File tree Expand file tree Collapse file tree 1 file changed +4
-16
lines changed Expand file tree Collapse file tree 1 file changed +4
-16
lines changed Original file line number Diff line number Diff line change @@ -208,9 +208,7 @@ The `podTemplateSpec` field follows the standard Kubernetes
208
208
[ ` PodTemplateSpec ` ] ( https://kubernetes.io/docs/reference/kubernetes-api/workload-resources/pod-template-v1/#PodTemplateSpec )
209
209
format, so you can use any valid pod specification options.
210
210
211
- This example sets security contexts and resource limits. It lets the MCP
212
- container to run as root, an unfortunate requirement for the Fetch MCP server
213
- image, while still applying some security restrictions.
211
+ This example sets resource limits.
214
212
215
213
``` yaml {13-14} title="my-mcpserver-custom-pod.yaml"
216
214
apiVersion : toolhive.stacklok.dev/v1alpha1
@@ -219,34 +217,24 @@ metadata:
219
217
name : fetch
220
218
namespace : development # Can be any namespace
221
219
spec :
222
- image : docker .io/mcp/fetch
223
- transport : stdio
220
+ image : ghcr .io/stackloklabs/gofetch/server
221
+ transport : sse
224
222
port : 8080
223
+ targetPort : 8080
225
224
permissionProfile :
226
225
type : builtin
227
226
name : network
228
227
podTemplateSpec :
229
228
spec :
230
229
containers :
231
230
- name : mcp # This name must be "mcp"
232
- securityContext :
233
- allowPrivilegeEscalation : false
234
- runAsNonRoot : false # Allows the MCP container to run as root
235
- runAsUser : 0
236
- capabilities :
237
- drop :
238
- - ALL
239
231
resources : # These resources apply to the MCP container
240
232
limits :
241
233
cpu : ' 500m'
242
234
memory : ' 512Mi'
243
235
requests :
244
236
cpu : ' 100m'
245
237
memory : ' 128Mi'
246
- securityContext :
247
- runAsNonRoot : true # The pod itself can run as a non-root user
248
- seccompProfile :
249
- type : RuntimeDefault
250
238
resources : # These resources apply to the proxy container
251
239
limits :
252
240
cpu : ' 100m'
You can’t perform that action at this time.
0 commit comments