DevOps AI Toolkit

{{- if eq .Values.deployment.method "toolhive" }}
apiVersion: toolhive.stacklok.dev/v1alpha1
kind: MCPServer
metadata:
  name: {{ include "dot-ai.fullname" . }}
  namespace: {{ .Release.Namespace }}
  labels:
    {{- include "dot-ai.labels" . | nindent 4 }}
spec:
  # Container image configuration
  image: {{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}
  
  # Transport configuration - streamable-http for ToolHive
  transport: streamable-http
  port: 3456
  targetPort: 3456
  
  # Permission profile for network access (Kubernetes API calls)
  permissionProfile:
    type: builtin
    name: network
  
  # Mount secrets for API keys  
  {{- if or .Values.secrets.anthropic.apiKey .Values.secrets.openai.apiKey }}
  secrets:
  - name: {{ .Values.secrets.name }}
    key: {{ .Values.secrets.anthropic.keyName }}
  {{- if .Values.secrets.openai.apiKey }}
  - name: {{ .Values.secrets.name }}
    key: {{ .Values.secrets.openai.keyName }}
  {{- end }}
  {{- end }}
  
  # Minimal resources for ToolHive proxy
  resources:
    limits:
      cpu: "200m"
      memory: "256Mi"
    requests:
      cpu: "100m"
      memory: "128Mi"
  
  # Pod template specification for the MCP server container
  podTemplateSpec:
    spec:
      {{- if .Values.serviceAccount.create }}
      serviceAccountName: {{ include "dot-ai.serviceAccountName" . }}
      {{- end }}
      containers:
      - name: mcp
        image: {{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}
        imagePullPolicy: IfNotPresent
        
        # Environment variables for HTTP transport
        env:
        - name: TRANSPORT_TYPE
          value: "http"
        - name: PORT
          value: "3456"
        - name: HOST
          value: "0.0.0.0"
        - name: SESSION_MODE
          value: "stateless"
        - name: DOT_AI_SESSION_DIR
          value: "/tmp/sessions"
        # AI Provider configuration
        - name: AI_PROVIDER
          value: {{ .Values.ai.provider | default "anthropic" | quote }}
        {{- if .Values.ai.model }}
        - name: AI_MODEL
          value: {{ .Values.ai.model | quote }}
        {{- end }}
        {{- if .Values.ai.customEndpoint.enabled }}
        - name: CUSTOM_LLM_BASE_URL
          value: {{ .Values.ai.customEndpoint.baseURL | quote }}
        - name: CUSTOM_EMBEDDINGS_BASE_URL
          value: {{ .Values.ai.customEndpoint.embeddingsBaseURL | default .Values.ai.customEndpoint.baseURL | quote }}
        {{- if .Values.ai.customEndpoint.embeddingsModel }}
        - name: EMBEDDINGS_MODEL
          value: {{ .Values.ai.customEndpoint.embeddingsModel | quote }}
        {{- end }}
        {{- if .Values.ai.customEndpoint.embeddingsDimensions }}
        - name: EMBEDDINGS_DIMENSIONS
          value: {{ .Values.ai.customEndpoint.embeddingsDimensions | quote }}
        {{- end }}
        {{- end }}
        # AI Provider API Keys
        - name: ANTHROPIC_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.anthropic.keyName }}
              optional: true
        - name: OPENAI_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.openai.keyName }}
              optional: true
        - name: GOOGLE_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.google.keyName }}
              optional: true
        - name: XAI_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.xai.keyName }}
              optional: true
        - name: MOONSHOT_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.moonshot.keyName }}
              optional: true
        - name: CUSTOM_LLM_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.customLlm.keyName | default "custom-llm-api-key" }}
              optional: true
        - name: CUSTOM_EMBEDDINGS_API_KEY
          valueFrom:
            secretKeyRef:
              name: {{ .Values.secrets.name }}
              key: {{ .Values.secrets.customEmbeddings.keyName | default "custom-embeddings-api-key" }}
              optional: true
        {{- if .Values.qdrant.enabled }}
        - name: QDRANT_URL
          value: "http://{{ include "dot-ai.fullname" . }}-qdrant:6333"
        {{- else if .Values.qdrant.external.url }}
        - name: QDRANT_URL
          value: {{ .Values.qdrant.external.url }}
        {{- end }}
{{- with .Values.extraEnv }}
        # Additional environment variables
        {{- toYaml . | nindent 8 }}
{{- end }}

        # Volume mounts for sessions directory
        volumeMounts:
        - name: sessions
          mountPath: /tmp/sessions
        
        # Resource configuration - reuse existing values
        resources:
          {{- toYaml .Values.resources | nindent 10 }}
      
      # Volumes for writable sessions directory
      volumes:
      - name: sessions
        emptyDir: {}
{{- end }}