stacklok / toolhive / 23496020033

65%

Build Type

push

github

Committed by web-flow

Commit Message

Add AuthServerConfigRef CRD field, config model, and JwksAllowPrivateIP (#4286)

* Add inline AuthServerConfig, config model, and JwksAllowPrivateIP

Phase 1 of the vMCP embedded authorization server (#4140):

- Move ExternalAuthConfigRef to mcpexternalauthconfig_types.go
- Add AuthServerConfig *EmbeddedAuthServerConfig to VirtualMCPServerSpec
  for inline embedded auth server configuration (no separate CRD needed)
- Add ConditionTypeAuthServerConfigValidated condition and reasons
- Add validateAuthServerConfig() for issuer and upstream provider checks
- Add RuntimeConfig with AuthServer field (runtime-only, not in CRD)
- Add JwksAllowPrivateIP to OIDCConfig, OR with ProtectedResourceAllowPrivateIP
- Regenerate deepcopy, CRD manifests, and CRD reference docs

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Fix gci lint error in mcpexternalauthconfig_types.go

Remove extra blank line that caused gci import ordering lint failure.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

* Regenerate CRD manifests and docs

Update generated CRD YAML and reference docs to match updated
AuthServerConfig description in VirtualMCPServer types.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Run Details

15 of 25 new or added lines in 3 files covered. (60.0%)

102 existing lines in 8 files now uncovered.

50876 of 78749 relevant lines covered (64.61%)

151.68 hits per line