Secure MCP Server

apiVersion: v1 kind: Secret metadata: name: secure-mcp-secrets namespace: secure-mcp labels: app.kubernetes.io/name: secure-mcp app.kubernetes.io/component: secrets annotations: # Enable automatic rotation with external-secrets operator external-secrets.io/rotation-enabled: "true" external-secrets.io/rotation-period: "720h" type: Opaque stringData: # Database credentials - Replace with base64 encoded values in production DB_USERNAME: "mcp_user" DB_PASSWORD: "ChangeThisSecurePassword123!" # Redis password REDIS_PASSWORD: "ChangeThisRedisPassword456!" # JWT secrets JWT_SECRET: "ChangeThisJWTSecret789!" JWT_PUBLIC_KEY: | -----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1234567890 # Replace with actual RSA public key -----END PUBLIC KEY----- JWT_PRIVATE_KEY: | -----BEGIN RSA PRIVATE KEY----- MIIEpAIBAAKCAQEA1234567890 # Replace with actual RSA private key -----END RSA PRIVATE KEY----- # Vault configuration VAULT_TOKEN: "ChangeThisVaultToken!" VAULT_ROLE_ID: "ChangeThisRoleId!" VAULT_SECRET_ID: "ChangeThisSecretId!" # OAuth/SAML credentials OAUTH_CLIENT_ID: "secure-mcp-client" OAUTH_CLIENT_SECRET: "ChangeThisOAuthSecret!" SAML_CERT: | -----BEGIN CERTIFICATE----- MIIDXTCCAkWgAwIBAgIJANOPQ1234567890 # Replace with actual SAML certificate -----END CERTIFICATE----- SAML_PRIVATE_KEY: | -----BEGIN PRIVATE KEY----- MIIEvQIBADANBgkqhkiG9w0BAQEFAASCBKcwggSj1234567890 # Replace with actual SAML private key -----END PRIVATE KEY----- # API Keys INTERNAL_API_KEY: "ChangeThisInternalAPIKey!" WEBHOOK_SECRET: "ChangeThisWebhookSecret!" --- apiVersion: v1 kind: Secret metadata: name: secure-mcp-tls namespace: secure-mcp labels: app.kubernetes.io/name: secure-mcp app.kubernetes.io/component: tls type: kubernetes.io/tls data: # Replace with actual base64 encoded TLS certificate and key tls.crt: LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURYVENDQWtXZ0F3SUJBZ0lKQUxRWkVxMTIzNDU2Nzg5MAotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0t tls.key: LS0tLS1CRUdJTiBQUklWQVRFIEtFWS0tLS0tCk1JSUV2UUlCQURBTkJna3Foa2lHOXcwQkFRRUZBQVNDQktjd2dnU2pBZ0VBQW9JQkFRQzEyMzQ1Njc4OTAKLS0tLS1FTkQgUFJJVkFURSBLRVktLS0tLQ==