refactor: bind to 127.0.0.1:8080 by default

[xcoulon]

when deployed, the container will be accessed via kube-rbac-proxies

Signed-off-by: Xavier Coulon xcoulon@redhat.com

Summary by CodeRabbit

• New Features

  • Startup logs now show the server listen address for clearer runtime visibility

• Bug Fixes

  • Server default changed to listen on localhost only (127.0.0.1), reducing exposure

• Documentation

  • Clarifying inline comments added for the server listen configuration

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

Changed the MCP server default bind address in the Containerfile from 0.0.0.0 to 127.0.0.1, added inline comments to compose.yaml environment lines, and extended startup logging in cmd/start_server.go to include a "listen" field.

Changes

Cohort / File(s)	Summary
Container image config Containerfile	Updated ENV ARGOCD_MCP_SERVER_LISTEN_HOST from 0.0.0.0 to 127.0.0.1 (restricts listen address to localhost)
Compose/environment docs compose.yaml	Added inline comments next to ARGOCD_MCP_SERVER_LISTEN_HOST=0.0.0.0 occurrences (no value changes)
Startup logging cmd/start_server.go	Extended startup log output to include the listen field alongside transport, argocd-url, insecure, and debug

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• test: e2e tests with podman compose #40: Modifies MCP server listen address/flag and related startup behavior.
• refactor listen port address #30: Changes server listen configuration/defaults across startup and container settings.

Suggested reviewers

• mfrancisc
• rsoaresd

Poem

🐰 I hop in quietly to say hello,
The server listens only where I go—localhost so neat,
Logs now whisper where the bind will be,
Comments tucked in compose for clarity sweet,
A tiny change, a safer seat. 🥕✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: updating the default binding address to 127.0.0.1 in the Containerfile and adding documentation in compose.yaml.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[rsoaresd]

🚀

[xcoulon]

I need to check if this is not going to cause troubles with the health endpoints which may become unreachable, hence resulting in pod being constantly restarted :/