docs(apps): clarify mcp deployment needs no auth-oidc secret

This commit is contained in:
Sten
2026-05-28 16:51:04 +02:00
committed by Danijel Simeunovic
parent d6e61c5663
commit a1a7c048c1

View File

@@ -3,4 +3,7 @@ kind: Kustomization
resources: resources:
- forte-drop-mcp.yaml - forte-drop-mcp.yaml
- keycloak-client-forte-drop-mcp.yaml - keycloak-client-forte-drop-mcp.yaml
# - auth-oidc-sealed.yaml # added in follow-up commit # Note: no auth-oidc Secret needed for type: mcp. The MCP sidecar only validates
# tokens against the OIDC issuer (RFC 9728 resource server) and never authenticates
# itself, so it doesn't read a client-secret. forte-drop-secrets (shared with the
# web deployment) covers PG + S3 creds.