will.anderson/infrastructure
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'Fix Neuron MCP routing and security' (#11) from fix/neuron-mcp into main

Browse Source
This commit is contained in:
Will Anderson
2026-04-26 06:35:41 +00:00
parent cd57a7b789 01245a6278
commit 4137fb556b
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
servers/legion/k8s/neuron-technologies/prod/ingress.yaml
+5 -1
View File
@@ -13,8 +13,9 @@ spec:
hosts: hosts:
- neurontechnologies.ai - neurontechnologies.ai
- www.neurontechnologies.ai - www.neurontechnologies.ai
- neuron.neurontechnologies.ai
rules: rules:
- host: neurontechnologies.ai - host: neuron.neurontechnologies.ai
http: http:
paths: paths:
- path: /mcp - path: /mcp
@@ -66,6 +67,9 @@ spec:
name: neuron-mcp name: neuron-mcp
port: port:
number: 8080 number: 8080
- host: neurontechnologies.ai
http:
paths:
- path: /license - path: /license
pathType: Prefix pathType: Prefix
backend: backend:
servers/legion/k8s/neuron-technologies/prod/mcp-deployment.yaml
+2 -2
View File
@@ -21,12 +21,11 @@ spec:
app: neuron-mcp app: neuron-mcp
slot: blue slot: blue
env: prod env: prod
annotations:
kubectl.kubernetes.io/restartedAt: "2026-04-25T08:40:00Z"
spec: spec:
terminationGracePeriodSeconds: 30 terminationGracePeriodSeconds: 30
securityContext: securityContext:
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000
seccompProfile: seccompProfile:
type: RuntimeDefault type: RuntimeDefault
containers: containers:
@@ -40,6 +39,7 @@ spec:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
readOnlyRootFilesystem: false # JVM writes temp files; restrict paths via allowedPaths once profiled readOnlyRootFilesystem: false # JVM writes temp files; restrict paths via allowedPaths once profiled
runAsNonRoot: true runAsNonRoot: true
runAsUser: 1000
capabilities: capabilities:
drop: ["ALL"] drop: ["ALL"]
env: env: