markdown-vault-mcp

2026-07-26 20:43:06 +03:00
parent 61a99ffe88
commit 4f75b37427
11 changed files with 174 additions and 25 deletions
@@ -0,0 +1,84 @@
+apiVersion: helm.toolkit.fluxcd.io/v2
+kind: HelmRelease
+metadata:
+  name: markdown-vault-mcp
+  namespace: mcp
+spec:
+  interval: 30m
+  chartRef:
+    kind: OCIRepository
+    name: markdown-vault-mcp
+  values:
+    controllers:
+      app:
+        containers:
+          app:
+            image:
+              repository: ghcr.io/pvliesdonk/markdown-vault-mcp
+              tag: latest
+            env:
+              MARKDOWN_VAULT_MCP_SOURCE_DIR: /vault
+              MARKDOWN_VAULT_MCP_INDEX_PATH: /data/state/index.db
+              MARKDOWN_VAULT_MCP_EMBEDDINGS_PATH: /data/state/embeddings
+              MARKDOWN_VAULT_MCP_STATE_PATH: /data/state
+              MARKDOWN_VAULT_MCP_READ_ONLY: "false"
+              MARKDOWN_VAULT_MCP_BASE_URL: "https://md-vault.mcp.aggtaa.com"
+              MARKDOWN_VAULT_MCP_BEARER_TOKEN:
+                valueFrom:
+                  secretKeyRef:
+                    name: markdown-vault-mcp-secrets
+                    key: BEARER_TOKEN
+            probes:
+              liveness:
+                enabled: true
+              readiness:
+                enabled: true
+            resources:
+              requests:
+                cpu: 100m
+                memory: 256Mi
+              limits:
+                memory: 1Gi
+
+    service:
+      app:
+        controller: app
+        ports:
+          http:
+            port: 8000
+
+    ingress:
+      app:
+        className: traefik
+        annotations:
+          cert-manager.io/cluster-issuer: letsencrypt-prod
+        hosts:
+          - host: md-vault.mcp.aggtaa.com
+            paths:
+              - path: /
+                pathType: Prefix
+                service:
+                  identifier: app
+                  port: http
+        tls:
+          - secretName: markdown-vault-mcp-tls
+            hosts:
+              - md-vault.mcp.aggtaa.com
+
+    persistence:
+      vault:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteMany
+        size: 30Gi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /vault
+      state:
+        type: persistentVolumeClaim
+        accessMode: ReadWriteOnce
+        size: 2Gi
+        storageClass: longhorn
+        retain: true
+        globalMounts:
+          - path: /data/state
@@ -0,0 +1,10 @@
+apiVersion: source.toolkit.fluxcd.io/v1
+kind: OCIRepository
+metadata:
+  name: markdown-vault-mcp
+  namespace: mcp
+spec:
+  interval: 1h
+  url: oci://ghcr.io/bjw-s-labs/helm/app-template
+  ref:
+    tag: "5.0.1"
@@ -0,0 +1,6 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+resources:
+  - helmrepository.yaml
+  - helmrelease.yaml
+  - secret.enc.yaml
@@ -0,0 +1,22 @@
+apiVersion: v1
+kind: Secret
+metadata:
+    name: markdown-vault-mcp-secrets
+    namespace: mcp
+stringData:
+    BEARER_TOKEN: ENC[AES256_GCM,data:rwP/zaEgKcTx9MifORlacquSDsBdjlZ8DRxxQXUrx1kmrLqK6dWntWEKI2fx06M5ajaJhQ0W3C9uNNebjwiuhA==,iv:Amod0QmRu8cty3GXNx1PJgMnlywcUm0OPp1HtHK+7x8=,tag:c7cdeW3GuSIhrsIM1sgwlg==,type:str]
+sops:
+    age:
+        - recipient: age1kct5g7d7eus2hvdnmx99ewsrtz70lhlasxa25euqwdctqhwqqpxqz0n7gg
+          enc: |
+            -----BEGIN AGE ENCRYPTED FILE-----
+            YWdlLWVuY3J5cHRpb24ub3JnL3YxCi0+IFgyNTUxOSB5ZFRTdjhHWjFwRjhYV0ZM
+            NHpsSUx3WkwxWEpHSy9DYVdlTzdnZmhaK0dZClBhakhvanBSQWFxOE1XTldNRHdu
+            YWduc25JZkd4UjUzSE5ZZ3ZEZmRHalUKLS0tIDE0QVorQVJRWUkrbVVYRVNDVmox
+            dkVMcUtianRlRVpyMnZyUkI1WGFtU00KP/q+PHNgsy3vqUvmlukO+5axCmFyYJS8
+            AuUWCz+XOfYk0sxhlBWrUJoc8CL1SNg2IeZSVu4Dx2tpohkDKXFelA==
+            -----END AGE ENCRYPTED FILE-----
+    lastmodified: "2026-08-26T10:20:15Z"
+    mac: ENC[AES256_GCM,data:6/WCEsa6nYxmjBCqCZs6Rm7frarSpK7eJybtkauBwoNjOruuH6pJuIhiI8X2h+e+AYN9fNEEzD/6HS3vHsu92jpLU7bp1mzhvqhek6+ge23502YOy+bl1MaS3SqBPP2wbBbWRFfqP8Hh8uEApUXq0R5CYoX8f4/PW1TrnHvTvCs=,iv:T5ERopywaFlhZ1PaUeFSWYMVzBF7rWnjNU+W//NmhF4=,tag:fItmUZSg0J7qjGokMLNXnQ==,type:str]
+    encrypted_regex: ^(data|stringData)$
+    version: 3.11.0