Chart values
The values reference for chart.md.
Spec and upstream
runtime.mode-specby default, orupstream.runtime.injectSecrets- inject generated secrets into the mcp-beaver container. Disable when only a co-located upstream needs them.spec- the guardfile body, supplied with--set-file. Written to a ConfigMap at/spec/<specName>.mcp.kdl. Empty by default so a spec-mode render fails loud.specNamedefaults to the release name. In upstream mode it is optional, and anmcp-upstreamguardfile there selects the guardfile-stated proxy.widgets- one{path, content}perapp file=anapp-bearing guardfile names.pathis spelled exactly as the guardfile spells it, and the chart lands the content back at/spec/<path>. A guardfile declaring anappwith no matching entry fails at pod startup rather than at template time, because the chart never parses the guardfile. See apps.md.upstream.url- required in upstream mode unlessspecstates it.upstream.toolsis the exact allowlist and needs at least one entry.upstream.namedefaults to the release fullname, andupstream.headerscarries credentials to an authenticated upstream as<name>=<template>resolved in the container. All four, plusupstream.oauth2Clients, are refused beside aspec, which states them itself.upstream.connectTimeoutis2mand applies either way. See upstream.md.extraContainers- optional co-located containers, appended in both modes. A loopback-only upstream keeps its unfiltered surface off the network.
Image, secrets, service, pod
image.repositorydefaults to the canonical Forgejo OCI path,image.tagto.Chart.appVersionwith a rollout setting the built runtime sha, andimage.pullPolicytoAlways. A private-package consumer names its read-only credential inimagePullSecrets.secretmapsENV_VARto a source, one pervalue env <VAR>the guardfile names. A string is an SSM parameter path and the chart mints an ExternalSecret. A map{secretName, key}references an existing Secret.externalSecret.refreshIntervaland.secretStoreRefpick the store,aws-parameter-storeby default.service.typeisClusterIP. Settingservice.nodePortbinds a direct node port, and the consuming deployment protects it.replicaCount,resources,nodeSelector,tolerations,affinity,podSecurityContext,securityContext, the three probes,extraEnvare the usual knobs. The startup probe keeps upstream warmup off the liveness path.
Telemetry. The chart carries no collector endpoint or fleet service identity. Opt in
through extraEnv with the standard OTEL_* variables. Leaving all selectors
and endpoints unset keeps startup a no-network no-op. See telemetry.md.