stacklok / toolhive / 24207149021

push

github

Add authServerRef CRD types, controller logic, and unit tests (#4644)

The embedded auth server currently competes with outgoing auth types (like AWS STS) for the single `externalAuthConfigRef` slot on MCPServer and MCPRemoteProxy CRDs. Because `MCPExternalAuthConfig` enforces mutually exclusive types, users cannot configure both an embedded auth server for incoming client authentication and an outgoing token exchange on the same resource. This PR adds a dedicated `authServerRef` field to both CRDs, separating the embedded auth server from `externalAuthConfigRef` so both can coexist.

307 of 483 new or added lines in 9 files covered. (63.56%)

56446 of 86770 relevant lines covered (65.05%)

60.28 hits per line