From ebe47899355fbeb5eb40d2c057ad71f0d434ec8b Mon Sep 17 00:00:00 2001
From: Will Anderson <will@neuralplatform.ai>
Date: Fri, 24 Apr 2026 13:00:56 -0500
Subject: [PATCH] Route /.well-known, /oauth2, /login, /sse, /message to
 neuron-mcp

OAuth discovery endpoints (/.well-known/oauth-protected-resource and
/.well-known/oauth-authorization-server) and the authorization server
paths (/oauth2/*, /login) were routing to neuron-rest, which has none
of those endpoints. MCP also uses /sse and /message directly.

All five path prefixes now route to neuron-mcp on port 8080.
---
 .../k8s/neuron-technologies/prod/ingress.yaml | 35 +++++++++++++++++++
 1 file changed, 35 insertions(+)

diff --git a/servers/legion/k8s/neuron-technologies/prod/ingress.yaml b/servers/legion/k8s/neuron-technologies/prod/ingress.yaml
index 453c063..2311e32 100644
--- a/servers/legion/k8s/neuron-technologies/prod/ingress.yaml
+++ b/servers/legion/k8s/neuron-technologies/prod/ingress.yaml
@@ -24,6 +24,41 @@ spec:
                 name: neuron-mcp
                 port:
                   number: 8080
+          - path: /sse
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
+          - path: /message
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
+          - path: /.well-known
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
+          - path: /oauth2
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
+          - path: /login
+            pathType: Prefix
+            backend:
+              service:
+                name: neuron-mcp
+                port:
+                  number: 8080
           - path: /license
             pathType: Prefix
             backend: