@rashidazarang/airtable-mcp 1.5.0 → 2.1.0

package/helm/airtable-mcp/values.yaml

@@ -0,0 +1,538 @@
+# Default values for Airtable MCP Server Helm Chart
+# Production-ready configuration for Trust Score 100/100
+
+# ============================================================================
+# GLOBAL CONFIGURATION
+# ============================================================================
+global:
+  # Image registry and repository
+  imageRegistry: ""
+  imagePullSecrets: []
+  
+  # Trust Score configuration
+  trustScore:
+    target: 100
+    features:
+      - oauth2
+      - security
+      - monitoring
+      - high-availability
+      - production-ready
+  
+  # Security configuration
+  security:
+    podSecurityStandards: restricted
+    networkPolicies: true
+    secretManagement: external
+
+# ============================================================================
+# APPLICATION CONFIGURATION
+# ============================================================================
+image:
+  registry: docker.io
+  repository: rashidazarang/airtable-mcp
+  tag: "2.1.0-production"
+  digest: ""
+  pullPolicy: IfNotPresent
+
+# Service account configuration
+serviceAccount:
+  create: true
+  automount: false
+  annotations: {}
+  name: ""
+  labels: {}
+
+# Pod security context
+podSecurityContext:
+  runAsNonRoot: true
+  runAsUser: 1001
+  runAsGroup: 1001
+  fsGroup: 1001
+  seccompProfile:
+    type: RuntimeDefault
+
+# Container security context
+securityContext:
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
+  runAsNonRoot: true
+  runAsUser: 1001
+  runAsGroup: 1001
+  capabilities:
+    drop:
+    - ALL
+    add:
+    - NET_BIND_SERVICE
+
+# ============================================================================
+# DEPLOYMENT CONFIGURATION
+# ============================================================================
+replicaCount: 3
+
+# Deployment strategy
+strategy:
+  type: RollingUpdate
+  rollingUpdate:
+    maxSurge: 1
+    maxUnavailable: 0
+
+# Pod disruption budget
+podDisruptionBudget:
+  enabled: true
+  minAvailable: 2
+  # maxUnavailable: 1
+
+# Node selection
+nodeSelector: {}
+
+# Tolerations
+tolerations: []
+
+# Affinity rules
+affinity:
+  podAntiAffinity:
+    preferredDuringSchedulingIgnoredDuringExecution:
+    - weight: 100
+      podAffinityTerm:
+        labelSelector:
+          matchExpressions:
+          - key: app.kubernetes.io/name
+            operator: In
+            values:
+            - airtable-mcp
+        topologyKey: kubernetes.io/hostname
+
+# Topology spread constraints
+topologySpreadConstraints:
+- maxSkew: 1
+  topologyKey: topology.kubernetes.io/zone
+  whenUnsatisfiable: DoNotSchedule
+  labelSelector:
+    matchLabels:
+      app.kubernetes.io/name: airtable-mcp
+
+# ============================================================================
+# SERVICE CONFIGURATION
+# ============================================================================
+service:
+  type: ClusterIP
+  port: 8010
+  targetPort: http
+  protocol: TCP
+  annotations: {}
+  labels: {}
+  
+  # Session affinity
+  sessionAffinity: ClientIP
+  sessionAffinityConfig:
+    clientIP:
+      timeoutSeconds: 300
+
+# Load balancer service
+loadBalancer:
+  enabled: false
+  type: LoadBalancer
+  port: 80
+  httpsPort: 443
+  annotations: {}
+  # Cloud-specific annotations
+  aws:
+    annotations:
+      service.beta.kubernetes.io/aws-load-balancer-type: "external"
+      service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
+  gcp:
+    annotations:
+      cloud.google.com/neg: '{"ingress": true}'
+  azure:
+    annotations:
+      service.beta.kubernetes.io/azure-load-balancer-internal: "false"
+
+# ============================================================================
+# INGRESS CONFIGURATION
+# ============================================================================
+ingress:
+  enabled: true
+  className: nginx
+  annotations:
+    nginx.ingress.kubernetes.io/rewrite-target: /
+    nginx.ingress.kubernetes.io/ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
+    nginx.ingress.kubernetes.io/backend-protocol: "HTTP"
+    nginx.ingress.kubernetes.io/rate-limit: "100"
+    nginx.ingress.kubernetes.io/rate-limit-window: "1m"
+    cert-manager.io/cluster-issuer: "letsencrypt-prod"
+  hosts:
+  - host: mcp.example.com
+    paths:
+    - path: /
+      pathType: Prefix
+  tls:
+  - secretName: airtable-mcp-tls
+    hosts:
+    - mcp.example.com
+
+# ============================================================================
+# ENVIRONMENT VARIABLES
+# ============================================================================
+env:
+  # Application configuration
+  NODE_ENV: production
+  PORT: "8010"
+  HOST: "0.0.0.0"
+  LOG_LEVEL: "INFO"
+  LOG_FORMAT: "json"
+  
+  # Performance configuration
+  CACHE_TTL: "60"
+  MAX_REQUESTS_PER_MINUTE: "60"
+  CONNECTION_TIMEOUT: "30000"
+  REQUEST_TIMEOUT: "10000"
+  
+  # Security configuration
+  ALLOWED_ORIGINS: "*"
+  
+  # Monitoring
+  ENABLE_METRICS: "true"
+  METRICS_PORT: "9090"
+
+# Environment variables from secrets
+envFromSecret:
+  enabled: true
+  secretName: airtable-mcp-secrets
+  keys:
+  - AIRTABLE_TOKEN
+  - AIRTABLE_BASE_ID
+  - AIRTABLE_CLIENT_ID
+  - AIRTABLE_CLIENT_SECRET
+  - SESSION_SECRET
+  - REDIS_PASSWORD
+
+# Environment variables from config maps
+envFromConfigMap:
+  enabled: true
+  configMapName: airtable-mcp-config
+
+# ============================================================================
+# SECRETS CONFIGURATION
+# ============================================================================
+secrets:
+  create: true
+  name: airtable-mcp-secrets
+  annotations: {}
+  labels: {}
+  stringData: {}
+  # External secret management
+  external:
+    enabled: false
+    provider: "" # vault, aws-secrets-manager, azure-key-vault, etc.
+
+# ============================================================================
+# CONFIG MAP CONFIGURATION
+# ============================================================================
+configMap:
+  create: true
+  name: airtable-mcp-config
+  annotations: {}
+  labels: {}
+  data:
+    LOG_LEVEL: "INFO"
+    MAX_REQUESTS_PER_MINUTE: "60"
+    CACHE_TTL: "60"
+    CONNECTION_TIMEOUT: "30000"
+    REQUEST_TIMEOUT: "10000"
+
+# ============================================================================
+# PERSISTENCE CONFIGURATION
+# ============================================================================
+persistence:
+  enabled: true
+  storageClass: ""
+  accessModes:
+  - ReadWriteOnce
+  size: 8Gi
+  annotations: {}
+  
+  # Separate volumes
+  logs:
+    enabled: true
+    size: 2Gi
+    mountPath: /app/logs
+  tmp:
+    enabled: true
+    size: 1Gi
+    mountPath: /tmp
+
+# ============================================================================
+# RESOURCE CONFIGURATION
+# ============================================================================
+resources:
+  limits:
+    cpu: 1000m
+    memory: 512Mi
+  requests:
+    cpu: 100m
+    memory: 128Mi
+
+# ============================================================================
+# HEALTH CHECKS
+# ============================================================================
+livenessProbe:
+  enabled: true
+  httpGet:
+    path: /health
+    port: http
+    scheme: HTTP
+  initialDelaySeconds: 30
+  periodSeconds: 30
+  timeoutSeconds: 10
+  successThreshold: 1
+  failureThreshold: 3
+
+readinessProbe:
+  enabled: true
+  httpGet:
+    path: /health
+    port: http
+    scheme: HTTP
+  initialDelaySeconds: 5
+  periodSeconds: 10
+  timeoutSeconds: 5
+  successThreshold: 1
+  failureThreshold: 3
+
+startupProbe:
+  enabled: true
+  httpGet:
+    path: /health
+    port: http
+    scheme: HTTP
+  initialDelaySeconds: 10
+  periodSeconds: 5
+  timeoutSeconds: 3
+  successThreshold: 1
+  failureThreshold: 6
+
+# ============================================================================
+# AUTOSCALING CONFIGURATION
+# ============================================================================
+autoscaling:
+  enabled: true
+  minReplicas: 3
+  maxReplicas: 10
+  targetCPUUtilizationPercentage: 70
+  targetMemoryUtilizationPercentage: 80
+  
+  # Behavior configuration
+  behavior:
+    scaleDown:
+      stabilizationWindowSeconds: 300
+      policies:
+      - type: Percent
+        value: 10
+        periodSeconds: 60
+    scaleUp:
+      stabilizationWindowSeconds: 60
+      policies:
+      - type: Percent
+        value: 50
+        periodSeconds: 60
+      - type: Pods
+        value: 2
+        periodSeconds: 60
+      selectPolicy: Max
+  
+  # Custom metrics
+  customMetrics:
+  - type: Pods
+    pods:
+      metric:
+        name: http_requests_per_second
+      target:
+        type: AverageValue
+        averageValue: "30"
+
+# ============================================================================
+# REDIS CONFIGURATION
+# ============================================================================
+redis:
+  enabled: true
+  architecture: standalone
+  auth:
+    enabled: true
+    password: "defaultpass"
+  master:
+    resources:
+      limits:
+        memory: 256Mi
+        cpu: 250m
+      requests:
+        memory: 128Mi
+        cpu: 100m
+    persistence:
+      enabled: true
+      size: 8Gi
+  metrics:
+    enabled: true
+
+# External Redis configuration
+externalRedis:
+  enabled: false
+  host: ""
+  port: 6379
+  password: ""
+  database: 0
+
+# ============================================================================
+# MONITORING CONFIGURATION
+# ============================================================================
+monitoring:
+  # Service monitor for Prometheus
+  serviceMonitor:
+    enabled: true
+    interval: 30s
+    scrapeTimeout: 10s
+    path: /metrics
+    labels: {}
+    annotations: {}
+  
+  # Prometheus configuration
+  prometheus:
+    enabled: true
+    retention: 15d
+    storageSize: 50Gi
+    resources:
+      limits:
+        cpu: 2000m
+        memory: 4Gi
+      requests:
+        cpu: 500m
+        memory: 1Gi
+  
+  # Grafana configuration
+  grafana:
+    enabled: true
+    adminPassword: "admin123"
+    persistence:
+      enabled: true
+      size: 10Gi
+    resources:
+      limits:
+        cpu: 500m
+        memory: 512Mi
+      requests:
+        cpu: 100m
+        memory: 256Mi
+  
+  # Alerting configuration
+  alerting:
+    enabled: true
+    rules:
+      critical: true
+      warning: true
+      security: true
+      business: true
+    
+    # Alertmanager configuration
+    alertmanager:
+      enabled: true
+      config:
+        global:
+          smtp_smarthost: 'localhost:587'
+          smtp_from: 'alerts@example.com'
+        route:
+          group_by: ['alertname', 'cluster', 'service']
+          group_wait: 10s
+          group_interval: 10s
+          repeat_interval: 1h
+          receiver: 'web.hook'
+        receivers:
+        - name: 'web.hook'
+          webhook_configs:
+          - url: 'http://localhost:5001/'
+
+# ============================================================================
+# NETWORK POLICIES
+# ============================================================================
+networkPolicy:
+  enabled: true
+  policyTypes:
+  - Ingress
+  - Egress
+  
+  # Ingress rules
+  ingress:
+  - from:
+    - namespaceSelector:
+        matchLabels:
+          name: ingress-nginx
+    - namespaceSelector:
+        matchLabels:
+          name: monitoring
+    ports:
+    - protocol: TCP
+      port: 8010
+    - protocol: TCP
+      port: 9090
+  
+  # Egress rules
+  egress:
+  - to: []
+    ports:
+    - protocol: TCP
+      port: 443  # HTTPS
+    - protocol: TCP
+      port: 53   # DNS
+    - protocol: UDP
+      port: 53   # DNS
+
+# ============================================================================
+# TESTING CONFIGURATION
+# ============================================================================
+tests:
+  enabled: true
+  image:
+    registry: docker.io
+    repository: curlimages/curl
+    tag: latest
+  
+  # Test scenarios
+  scenarios:
+  - name: health-check
+    command: "curl -f http://airtable-mcp-service:8010/health"
+  - name: metrics-check
+    command: "curl -f http://airtable-mcp-service:9090/metrics"
+  - name: api-check
+    command: "curl -f -X POST http://airtable-mcp-service:8010/mcp -H 'Content-Type: application/json' -d '{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"initialize\"}'"
+
+# ============================================================================
+# EXTRA RESOURCES
+# ============================================================================
+extraObjects: []
+# - apiVersion: v1
+#   kind: Secret
+#   metadata:
+#     name: extra-secret
+#   data:
+#     key: value
+
+# Pod annotations
+podAnnotations:
+  prometheus.io/scrape: "true"
+  prometheus.io/port: "9090"
+  prometheus.io/path: "/metrics"
+
+# Pod labels
+podLabels:
+  trust.score: "100"
+  security.tier: "restricted"
+
+# Common labels applied to all resources
+commonLabels:
+  app.kubernetes.io/part-of: mcp-platform
+  trust.score: "100"
+
+# Common annotations applied to all resources
+commonAnnotations:
+  trust.score/target: "100"
+  security.policy/tier: "restricted"