#SPDX-License-Identifier: MIT-0
---
# tasks file for ansible-role-mcp-servers
- name: Create namespace for MCP servers
  k8s:
    state: present
    definition:
      apiVersion: v1
      kind: Namespace
      metadata:
        name: "{{ mcp_namespace }}"

- name: Deploy MCP servers
  k8s:
    state: present
    definition:
      apiVersion: apps/v1
      kind: Deployment
      metadata:
        name: "{{ item.name }}"
        namespace: "{{ mcp_namespace }}"
      spec:
        replicas: 1
        selector:
          matchLabels:
            app: "{{ item.name }}"
        template:
          metadata:
            labels:
              app: "{{ item.name }}"
          spec:
            automountServiceAccountToken: false
            securityContext:
              runAsNonRoot: true
              runAsUser: 1000
              runAsGroup: 1000
              seccompProfile:
                type: RuntimeDefault
            containers:
              - name: "{{ item.name }}"
                image: "{{ item.image }}"
                command: "{{ item.command | default(omit) }}"
                args: "{{ item.args | default(omit) }}"
                env: "{{ item.env | default([]) }}"
                envFrom: "{{ item.envFrom | default([]) }}"
                ports:
                  - name: http
                    containerPort: 8000
                readinessProbe:
                  tcpSocket:
                    port: http
                  initialDelaySeconds: 5
                  periodSeconds: 10
                resources:
                  requests:
                    cpu: 10m
                    memory: 64Mi
                  limits:
                    memory: "{{ item.memory | default('256Mi') }}"
                securityContext:
                  allowPrivilegeEscalation: false
                  readOnlyRootFilesystem: true
                  capabilities:
                    drop: [ALL]
                volumeMounts: "{{ [{'name': 'tmp', 'mountPath': '/tmp'}] + (item.mounts | default([])) }}"
            volumes: "{{ [{'name': 'tmp', 'emptyDir': {}}] + (item.volumes | default([])) }}"
  loop: "{{ mcp_servers }}"
  loop_control:
    label: "{{ item.name }}"

- name: Create ClusterIP services for MCP servers (no ingress)
  k8s:
    state: present
    definition:
      apiVersion: v1
      kind: Service
      metadata:
        name: "{{ item.name }}"
        namespace: "{{ mcp_namespace }}"
      spec:
        type: ClusterIP
        selector:
          app: "{{ item.name }}"
        ports:
          - name: http
            port: 8000
            targetPort: http
  loop: "{{ mcp_servers }}"
  loop_control:
    label: "{{ item.name }}"