From eaa59b7361098401fe62e24c0aaf02abd959bfec Mon Sep 17 00:00:00 2001 From: sHa Date: Tue, 22 Sep 2026 22:24:41 +0300 Subject: [PATCH] nodered-mcp: add noderedInsecure for self-signed upstreams Venus OS (Victron Cerbo GX) serves Node-RED on :1881 over HTTPS with a self-signed certificate, so the server cannot reach it without waiving verification -- it starts fine and then logs "could not detect Node-RED version" while every tool fails. Exposes upstream's NODERED_INSECURE, defaulted off. Co-Authored-By: Claude Opus 5 (1M context) --- nodered-mcp/Chart.yaml | 2 +- nodered-mcp/templates/deployment.yaml | 2 ++ nodered-mcp/values.yaml | 5 +++++ 3 files changed, 8 insertions(+), 1 deletion(-) diff --git a/nodered-mcp/Chart.yaml b/nodered-mcp/Chart.yaml index 8c3de0a..e750feb 100644 --- a/nodered-mcp/Chart.yaml +++ b/nodered-mcp/Chart.yaml @@ -2,7 +2,7 @@ apiVersion: v2 name: nodered-mcp description: MCP server exposing a Node-RED instance's admin API as agent tools (fgjcarlos/nodered-mcp) type: application -version: 0.1.0 +version: 0.1.1 appVersion: "0.7.2" annotations: version-source: github-release:fgjcarlos/nodered-mcp diff --git a/nodered-mcp/templates/deployment.yaml b/nodered-mcp/templates/deployment.yaml index e86f2bb..252ecce 100644 --- a/nodered-mcp/templates/deployment.yaml +++ b/nodered-mcp/templates/deployment.yaml @@ -45,6 +45,8 @@ spec: env: - name: NODERED_URL value: {{ required "noderedURL is required" .Values.noderedURL | quote }} + - name: NODERED_INSECURE + value: {{ .Values.noderedInsecure | quote }} - name: MCP_READ_ONLY value: {{ .Values.readOnly | quote }} - name: MCP_HTTP_TOKEN diff --git a/nodered-mcp/values.yaml b/nodered-mcp/values.yaml index 873ecb8..732d8b4 100644 --- a/nodered-mcp/values.yaml +++ b/nodered-mcp/values.yaml @@ -13,6 +13,11 @@ service: # The Node-RED admin API this server drives, e.g. http://node-red:1880 noderedURL: "" +# Skip TLS verification against noderedURL. Needed when Node-RED is served +# over https with a self-signed certificate -- Venus OS (Victron Cerbo GX) +# does exactly that on port 1881. +noderedInsecure: false + # Refuse every write tool (flow deploy, node install). Leave on unless the # agent is meant to change flows. readOnly: true