admin/homelab
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
2d09640ef2669ac20392790ebf08ed1723fa608a
homelab/platform/mcp-servers/helmrelease.yaml

59 lines
1.5 KiB
YAML
Raw Normal View History

Initial homelab GitOps repository setup This commit establishes the foundation for the homelab GitOps repository: - Created layered architecture (infrastructure/platform/apps) - Added MCP servers umbrella chart with SOPS-encrypted secrets - Configured Flux Kustomizations for infrastructure and platform layers - Set up SOPS + Age for secrets management - Added .gitignore and documentation MCP servers include: - Gateway with auth (API keys in encrypted secrets) - n8n MCP (workflow automation) - Playwright MCP (browser automation) - Kubernetes MCP (kubectl operations) - GitHub MCP (repository management) - Gitea MCP (self-hosted git) - SQLite MCP (database operations) - Filesystem MCP (file operations) - Fetch MCP (HTTP requests) - Memory MCP (shared memory/state) All secrets are encrypted with SOPS using Age encryption.
2025-11-16 02:28:44 -05:00
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata:
name: mcp-umbrella
namespace: mcp
spec:
interval: 10m
timeout: 5m
chart:
spec:
Configure MCP servers to use Harbor OCI registry - Updated Chart.yaml dependencies to use OCI registry - Added HelmRepository resource for Harbor - Created Harbor registry secret (SOPS-encrypted) - Updated HelmRelease to use HelmRepository instead of Git source - Packaged and pushed all 16 MCP charts to Harbor OCI registry - Updated .sops.yaml to handle platform secrets All MCP charts are now available at: oci://images.caffeinetux.com/mcp-charts
2025-11-16 03:04:40 -05:00
chart: mcp-umbrella
version: "1.0.0"
Initial homelab GitOps repository setup This commit establishes the foundation for the homelab GitOps repository: - Created layered architecture (infrastructure/platform/apps) - Added MCP servers umbrella chart with SOPS-encrypted secrets - Configured Flux Kustomizations for infrastructure and platform layers - Set up SOPS + Age for secrets management - Added .gitignore and documentation MCP servers include: - Gateway with auth (API keys in encrypted secrets) - n8n MCP (workflow automation) - Playwright MCP (browser automation) - Kubernetes MCP (kubectl operations) - GitHub MCP (repository management) - Gitea MCP (self-hosted git) - SQLite MCP (database operations) - Filesystem MCP (file operations) - Fetch MCP (HTTP requests) - Memory MCP (shared memory/state) All secrets are encrypted with SOPS using Age encryption.
2025-11-16 02:28:44 -05:00
sourceRef:
Configure MCP servers to use Harbor OCI registry - Updated Chart.yaml dependencies to use OCI registry - Added HelmRepository resource for Harbor - Created Harbor registry secret (SOPS-encrypted) - Updated HelmRelease to use HelmRepository instead of Git source - Packaged and pushed all 16 MCP charts to Harbor OCI registry - Updated .sops.yaml to handle platform secrets All MCP charts are now available at: oci://images.caffeinetux.com/mcp-charts
2025-11-16 03:04:40 -05:00
kind: HelmRepository
name: mcp-charts
Initial homelab GitOps repository setup This commit establishes the foundation for the homelab GitOps repository: - Created layered architecture (infrastructure/platform/apps) - Added MCP servers umbrella chart with SOPS-encrypted secrets - Configured Flux Kustomizations for infrastructure and platform layers - Set up SOPS + Age for secrets management - Added .gitignore and documentation MCP servers include: - Gateway with auth (API keys in encrypted secrets) - n8n MCP (workflow automation) - Playwright MCP (browser automation) - Kubernetes MCP (kubectl operations) - GitHub MCP (repository management) - Gitea MCP (self-hosted git) - SQLite MCP (database operations) - Filesystem MCP (file operations) - Fetch MCP (HTTP requests) - Memory MCP (shared memory/state) All secrets are encrypted with SOPS using Age encryption.
2025-11-16 02:28:44 -05:00
namespace: flux-system
interval: 5m
install:
createNamespace: false
remediation:
retries: 3
upgrade:
remediation:
retries: 3
remediateLastFailure: true
cleanupOnFail: true
values:
Disable playwright and puppeteer MCP servers These resource-intensive browser automation servers are disabled: - playwright-mcp: Requires 2Gi memory, complex persistence setup - puppeteer-mcp: Similar resource requirements This allows the remaining 13 MCP servers to deploy successfully: ✓ mcp-gateway, n8n-mcp, kubernetes-mcp, github-mcp, gitea-mcp ✓ postgresql-mcp, sqlite-mcp, prometheus-mcp, slack-mcp, s3-mcp ✓ filesystem-mcp, fetch-mcp, memory-mcp Can re-enable later with proper persistence configuration.
2025-11-16 12:00:00 -05:00
# Disable resource-intensive servers
playwright-mcp:
enabled: false
puppeteer-mcp:
enabled: false
# Configure enabled servers with secrets
Move secrets to HelmRelease values field Secrets are now in the HelmRelease spec.values field. This allows Flux to pass them directly to Helm during deployment. Next step: Extract these to SOPS-encrypted Secret and use valuesFrom.
2025-11-16 03:15:08 -05:00
mcp-gateway:
gateway:
auth:
apiKeys:
- name: "n8n"
key: "d8c32225b3ae87fc3c58811ee171d8fb03d60ff1225000a9286785edb0af21a4"
- name: "admin"
key: "244a99ed30be843541cdfbeb07b9292e19e041956840ebb4b7a169a5904c88f5"
n8n-mcp:
n8nMCP:
n8n:
apiKey: "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIyNWI4Njk4My0wOWQzLTRjMzAtOWQ0OC03OWQxOWMxZjc5Y2UiLCJpc3MiOiJuOG4iLCJhdWQiOiJwdWJsaWMtYXBpIiwiaWF0IjoxNzYzMDk2NDU4fQ.I9MhQ1THxAD-P4mfcZAl3qxpjoIYM61OD1BIILDyPUw"
github-mcp:
github:
token: "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"
owner: "caffeinetux"
gitea-mcp:
gitea:
url: "http://gitea-http.gitea.svc.cluster.local:3000"
token: "b8a17f45f86db1cb1924487189a2d8e3d298a611"
owner: "admin"
Reference in New Issue Copy Permalink