apiVersion: kustomize.config.k8s.io/v1beta1 kind: Kustomization resources: - forte-drop-mcp.yaml # No keycloak-client config + no auth-oidc Secret for mcp mode. The chart's # auth.type: mcp auto-registers the MCP client; the sidecar is an RFC 9728 # resource server that validates tokens (no client-secret of its own). # forte-drop-secrets (shared with web) covers PG + S3 creds.