apiVersion: toolhive.stacklok.dev/v1beta1
kind: VirtualMCPServer
metadata:
  name: full-vmcp
  namespace: toolhive-system
  annotations:
    toolhive.stacklok.dev/registry-export: "true"
    toolhive.stacklok.dev/registry-title: Full Homelab Virtual MCP
    toolhive.stacklok.dev/registry-description: Full virtual MCP exposing the homelab MCP tool group through ToolHive aggregation.
    toolhive.stacklok.dev/registry-url: https://vmcp-full-vmcp.ngorse.com
    glance/parent: toolhive
spec:
  groupRef:
    name: homelab-core
  podTemplateSpec:
    metadata:
      annotations:
        glance/parent: toolhive
  embeddingServerRef:
    name: homelab-embedding
  incomingAuth:
    type: oidc
    oidcConfigRef:
      name: full-vmcp-oidc
      audience: toolhive-full-vmcp
  authServerConfig:
    issuer: https://full-vmcp.ngorse.com
    upstreamProviders:
      - name: keycloak
        type: oidc
        oidcConfig:
          issuerUrl: https://cloak.olb42.com/realms/home-lab
          clientId: toolhive-full-vmcp
          clientSecretFile: /var/run/secrets/toolhive/client-secret
          redirectUri: https://full-vmcp.ngorse.com/oauth/callback
          scopes:
            - openid
            - profile
            - email
            - offline_access
  config:
    aggregation:
      conflictResolution: prefix
    optimizer:
      maxToolsToReturn: 8