toolhive/examples/operator/mcp-servers/mcpserver_with_pod_template.yaml at main · stacklok/toolhive · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
apiVersion: toolhive.stacklok.dev/v1beta1
kind: MCPServer
metadata:
  name: sample-with-pod-template
spec:
  image: ghcr.io/stackloklabs/mcp-fetch:latest
  transport: sse
  proxyPort: 8080
  # Example of using the PodTemplateSpec to customize the pod
  podTemplateSpec:
    spec:
      # Add tolerations to run on nodes with specific taints
      tolerations:
      - key: "dedicated"
        operator: "Equal"
        value: "mcp-servers"
        effect: "NoSchedule"
      # Add node selector to run on specific nodes
      nodeSelector:
        kubernetes.io/os: linux
        node-type: mcp-server
      # Add security context for the pod
      securityContext:
        runAsNonRoot: true
        seccompProfile:
          type: RuntimeDefault
      # Customize the MCP container
      containers:
      - name: mcp
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          runAsUser: 1000
        resources:
          limits:
            cpu: "500m"
            memory: "512Mi"
          requests:
            cpu: "100m"
            memory: "128Mi"