Skip to content

Conversation

@sabre1041
Copy link
Contributor

@sabre1041 sabre1041 commented Nov 4, 2025

Added a Helm chart for the MCP Server

Future enhancements include automating the publishing of the chart to an OCI repository

resolves #435

Signed-off-by: Andrew Block <andy.block@gmail.com>
Copy link
Collaborator

@Cali0707 Cali0707 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for adding the helm chart @sabre1041 !

Have a few questions/comments but overall this looks great!!

Comment on lines +61 to +66
{{- with .Values.extraVolumeMounts }}
{{- tpl (toYaml .) . | nindent 12 }}
{{- end }}
{{- with .Values.extraVolumeMounts }}
{{- tpl (toYaml .) . | nindent 12 }}
{{- end }}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this seems duplicated

registry: quay.io
repository: manusa/kubernetes_mcp_server
# -- This sets the tag or sha digest for the image.
version: latest
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should this go to latest? or do we want to pin it to the most recent release?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think generally, we should have image somewhere else published, instead of manusa repo 😅

annotations:
{{- tpl (toYaml .) . | nindent 4 }}
{{- end }}
{{- end }}
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@sabre1041 maybe I'm missing something but don't we need a ClusterRole + ClusterRoleBinding if require_oauth is not set to true (false is the default)?

Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In this scenario, if a request does not have a bearer token in the request, the underlying kubernetes manager will be used (using the service account credentials), which has no permissions

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

A Helm chart to install the MCP server on the cluster

4 participants