stacklok / toolhive / 18591972648

push

github

Add MCPRemoteProxy CRD definition and schema (#2240)

Introduces the MCPRemoteProxy custom resource definition for proxying
remote MCP servers in Kubernetes with authentication, authorization,
audit logging, and tool filtering capabilities.

This CRD enables organizations to deploy centralized proxies for
external SaaS MCP services (e.g., Salesforce MCP, GitHub MCP) with
visibility, policy enforcement, and audit trails.

Key features:
- Remote URL configuration with HTTPS validation
- Configurable transport (SSE or streamable-http)
- Required OIDC authentication for incoming requests
- Optional token exchange for remote service authentication
- Authorization policy support (inline or ConfigMap)
- Audit logging configuration
- Tool filtering and renaming via MCPToolConfig references
- OpenTelemetry telemetry integration
- Resource requirements and overrides

Includes:
- CRD type definition with kubebuilder markers
- Generated deepcopy methods
- Generated CRD manifest with OpenAPI v3 schema
- Operator-crds chart version bump (0.0.35 -> 0.0.36)
- API documentation

Note: RBAC permissions will be added when the controller is implemented.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>

3 of 112 new or added lines in 2 files covered. (2.68%)

17916 of 38454 relevant lines covered (46.59%)

15.64 hits per line