nodered-mcp: add noderedInsecure for self-signed upstreams

Venus OS (Victron Cerbo GX) serves Node-RED on :1881 over HTTPS with a
self-signed certificate, so the server cannot reach it without waiving
verification -- it starts fine and then logs "could not detect Node-RED
version" while every tool fails. Exposes upstream's NODERED_INSECURE,
defaulted off.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
This commit is contained in:
sha
2026-09-22 22:24:41 +03:00
co-authored by Claude Opus 5
parent f604fe5725
commit eaa59b7361
3 changed files with 8 additions and 1 deletions
+1 -1
View File
@@ -2,7 +2,7 @@ apiVersion: v2
name: nodered-mcp name: nodered-mcp
description: MCP server exposing a Node-RED instance's admin API as agent tools (fgjcarlos/nodered-mcp) description: MCP server exposing a Node-RED instance's admin API as agent tools (fgjcarlos/nodered-mcp)
type: application type: application
version: 0.1.0 version: 0.1.1
appVersion: "0.7.2" appVersion: "0.7.2"
annotations: annotations:
version-source: github-release:fgjcarlos/nodered-mcp version-source: github-release:fgjcarlos/nodered-mcp
+2
View File
@@ -45,6 +45,8 @@ spec:
env: env:
- name: NODERED_URL - name: NODERED_URL
value: {{ required "noderedURL is required" .Values.noderedURL | quote }} value: {{ required "noderedURL is required" .Values.noderedURL | quote }}
- name: NODERED_INSECURE
value: {{ .Values.noderedInsecure | quote }}
- name: MCP_READ_ONLY - name: MCP_READ_ONLY
value: {{ .Values.readOnly | quote }} value: {{ .Values.readOnly | quote }}
- name: MCP_HTTP_TOKEN - name: MCP_HTTP_TOKEN
+5
View File
@@ -13,6 +13,11 @@ service:
# The Node-RED admin API this server drives, e.g. http://node-red:1880 # The Node-RED admin API this server drives, e.g. http://node-red:1880
noderedURL: "" noderedURL: ""
# Skip TLS verification against noderedURL. Needed when Node-RED is served
# over https with a self-signed certificate -- Venus OS (Victron Cerbo GX)
# does exactly that on port 1881.
noderedInsecure: false
# Refuse every write tool (flow deploy, node install). Leave on unless the # Refuse every write tool (flow deploy, node install). Leave on unless the
# agent is meant to change flows. # agent is meant to change flows.
readOnly: true readOnly: true