mirror of
https://github.com/shadoll/helm-charts.git
synced 2026-10-12 21:59:18 +00:00
sha
58671bda88
Wraps FreePeak/db-mcp-server: multi-database Postgres MCP driven by a single JSON connection list, so new databases don't need a new Helm release. Includes per-connection read_only/max_rows/query_timeout/ masking_rules guardrails and a PVC-backed audit log.
52 lines
1.2 KiB
YAML
52 lines
1.2 KiB
YAML
image:
|
|
repository: freepeak/db-mcp-server
|
|
tag: ""
|
|
pullPolicy: IfNotPresent
|
|
|
|
port: 9092
|
|
|
|
# Name of a Secret holding the whole multi-database config as one JSON blob
|
|
# (see FreePeak/db-mcp-server's DB_CONFIG env var) -- keeps connection
|
|
# strings/passwords for every database out of a plain ConfigMap.
|
|
existingSecret: ""
|
|
secretConfigKey: "DB_CONFIG"
|
|
|
|
env:
|
|
TRANSPORT_MODE: "sse"
|
|
SERVER_PORT: "9092"
|
|
LOG_LEVEL: "info"
|
|
|
|
# Persistent audit log (DB_MCP_AUDIT_LOG) -- one JSONL record per executed
|
|
# statement, including rejected writes against read-only databases. Kept on
|
|
# a small PVC so it survives pod restarts; this is the primary compensating
|
|
# control for a server with broad read/write reach across many databases.
|
|
auditLog:
|
|
enabled: true
|
|
dir: /var/log/db-mcp
|
|
path: /var/log/db-mcp/audit.jsonl
|
|
storageClass: local-path
|
|
size: 1Gi
|
|
|
|
resources:
|
|
requests:
|
|
cpu: "50m"
|
|
memory: "128Mi"
|
|
limits:
|
|
cpu: "500m"
|
|
memory: "512Mi"
|
|
|
|
nodeSelector: {}
|
|
|
|
tolerations: []
|
|
|
|
ingresses: {}
|
|
# https:
|
|
# host: pg.mcp.example.com
|
|
# annotations: {}
|
|
# tls:
|
|
# - hosts:
|
|
# - pg.mcp.example.com
|
|
# lan:
|
|
# host: pg.mcp.example.lan
|
|
# annotations: {}
|