Skip to content

update mcp-gateway authn/authz guides#110677

Open
Patryk-Stefanski wants to merge 5 commits intoopenshift:mcp-gateway-docs-tpfrom
Patryk-Stefanski:fix-auth-authz-docs
Open

update mcp-gateway authn/authz guides#110677
Patryk-Stefanski wants to merge 5 commits intoopenshift:mcp-gateway-docs-tpfrom
Patryk-Stefanski:fix-auth-authz-docs

Conversation

@Patryk-Stefanski
Copy link
Copy Markdown

@Patryk-Stefanski Patryk-Stefanski commented Apr 23, 2026

@openshift-ci openshift-ci Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label Apr 23, 2026
@ocpdocs-previewbot
Copy link
Copy Markdown

ocpdocs-previewbot commented Apr 23, 2026

Signed-off-by: Patryk Stefanski <pstefans@redhat.com>
+
[source,json,subs="+quotes"]
----
$ oc patch gateway _<mcp_gateway>_ -n _<gateway_system>_ --type json -p '[
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should this section, lines 44-50 in the install doc be updated to match this?

  • we can make the listener a prereq to this procedure
  • add a note to the install doc that you need to config this listener to create authorization
  • then we can remove the step from this procedure

WDYT?

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sounds good to me, I removed it from this pr and added it as a prereq. Do you want to add it to your current installation PR, or will I create a follow-up PR?

Comment thread modules/proc-mcp-gateway-authorization.adoc Outdated
Comment thread modules/proc-mcp-gateway-authorization.adoc Outdated
Comment thread modules/proc-mcp-gateway-authorization.adoc Outdated
----
$ oc apply -f _<mcp_tool_auth_policy.yaml>_
$ oc apply -f - <<EOF
<AuthPolicy CR from the previous step>
Copy link
Copy Markdown
Contributor

@ShaunaDiaz ShaunaDiaz Apr 23, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
<AuthPolicy CR from the previous step>
_<mcp_tool_auth_policy.yaml>_

user-replaceable values can only look like this
I also don't think the EOF works when we separate file creation from application? (having the yaml in one step and application of the resource in a second step is preferred in docs)

Patryk-Stefanski and others added 4 commits April 23, 2026 23:56
Co-authored-by: Shauna Diaz <shdiaz@redhat.com>
Co-authored-by: Shauna Diaz <shdiaz@redhat.com>
Co-authored-by: Shauna Diaz <shdiaz@redhat.com>
…n doc

Signed-off-by: Patryk Stefanski <pstefans@redhat.com>
+
Replace `_<mcp_jwt_authpolicy.yaml>_` with the name of your CR.

Replace `_<mcp_jwt_auth_policy.yaml>_` with the name of your CR.
Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🤖 [error] AsciiDocDITA.TaskStep: Content other than a single list cannot be mapped to DITA steps.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 23, 2026

@Patryk-Stefanski: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants