add architecture configuration to mcp-operator helm chart

Author: Diaphteiros

charts/mcp-operator/templates/configmap-mcp-operator-config.yaml

@@ -0,0 +1,20 @@
+---
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: mcp-operator-config
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "mcp-operator.labels" . | nindent 4 }}
+data:
+  config.yaml: |
+    architecture:
+      {{- if and .Values.architecture .Values.architecture.immutability }}
+      immutability:
+      {{- .Values.architecture.immutability | toYaml | nindent 8 }}
+      {{- end }}
+      {{- if and .Values.apiServer .Values.apiServer.architecture }}
+      apiServer:
+        version: {{ .Values.apiServer.architecture.version | default "v1" }}
+        allowOverride: {{ .Values.apiServer.architecture.allowOverride | default false }}
+      {{- end }}

charts/mcp-operator/templates/deployment.yaml

@@ -30,6 +30,7 @@ spec:
         checksum/co-clusters: {{ include (print $.Template.BasePath "/secrets-cloudorchestrator-clusters.yaml") . | sha256sum }}
         checksum/auth-config: {{ include (print $.Template.BasePath "/secret-auth-config.yaml") . | sha256sum }}
         checksum/authz-config: {{ include (print $.Template.BasePath "/secret-authz-config.yaml") . | sha256sum }}
+        checksum/mcp-operator-config: {{ include (print $.Template.BasePath "/configmap-mcp-operator-config.yaml") . | sha256sum }}
         {{- with .Values.podAnnotations }}
           {{- toYaml . | nindent 8 }}
         {{- end }}
@@ -50,6 +51,7 @@ spec:
         command:
         - /mcp-operator
         - --controllers={{ include "mcp-operator.activeControllersString" .Values }}
+        - --config=/etc/config/mcp-operator/config.yaml
         {{- if .Values.deployment.leaderElection.enabled }}
         - --leader-elect
         - --lease-namespace={{ .Values.deployment.leaderElection.leaseNamespace }}
@@ -140,6 +142,9 @@ spec:
           mountPath: /tmp/k8s-webhook-server/serving-certs/
           readOnly: true
         {{- end }}
+        - name: mcp-operator-config
+          mountPath: /etc/config/mcp-operator
+          readOnly: true
         - name: common
           mountPath: /etc/config/common
           readOnly: true
@@ -247,6 +252,11 @@ spec:
           {{- end }}
           {{- end }}
       {{- end }}
+      - name: mcp-operator-config
+        projected:
+          sources:
+          - configMap:
+              name: mcp-operator-config
       - name: common
         projected:
           sources:

charts/mcp-operator/values.yaml

@@ -32,7 +32,10 @@ clusters:
   #   caData: ...
   #   caConfigMapName: ...
 
-
+# architecture: # architecture configuration
+#   immutability:
+#     policyName: mcp-architecture-immutability # name of the ValidatingAdmissionPolicy to enforce architecture immutability
+#     disabled: false # whether architecture immutability should be enforced (strongly recommended to leave this enabled)
 
 crds:
   manage: true
@@ -53,6 +56,9 @@ managedcontrolplane:
 
 apiserver:
   disabled: false
+  # architecture:
+  #   version: v1
+  #   allowOverride: false
   worker:
     maxWorkers: 10
     intervalTime: 10s