@rashidazarang/airtable-mcp 2.1.0 → 2.2.0

package/k8s/deployment.yaml

@@ -1,402 +0,0 @@
-# Kubernetes Deployment for Airtable MCP Server
-# High Availability, Security, and Performance
-# Trust Score: 100/100
-
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: airtable-mcp-server
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: server
-    app.kubernetes.io/version: "2.1.0"
-    app.kubernetes.io/part-of: mcp-platform
-    app.kubernetes.io/managed-by: kubernetes
-    trust.score: "100"
-  annotations:
-    deployment.kubernetes.io/revision: "1"
-    description: "Enhanced Airtable MCP Server with OAuth2 and enterprise security"
-spec:
-  replicas: 3
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: airtable-mcp
-      app.kubernetes.io/component: server
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: airtable-mcp
-        app.kubernetes.io/component: server
-        app.kubernetes.io/version: "2.1.0"
-        trust.score: "100"
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/port: "9090"
-        prometheus.io/path: "/metrics"
-        fluentd.io/parser: "json"
-        security.alpha.kubernetes.io/seccomp: runtime/default
-        container.apparmor.security.beta.kubernetes.io/airtable-mcp: runtime/default
-    spec:
-      # Security Context
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1001
-        runAsGroup: 1001
-        fsGroup: 1001
-        seccompProfile:
-          type: RuntimeDefault
-      
-      # Service Account
-      serviceAccountName: airtable-mcp-service-account
-      automountServiceAccountToken: false
-      
-      # Pod Disruption Budget
-      terminationGracePeriodSeconds: 30
-      
-      # Node Selection
-      nodeSelector:
-        kubernetes.io/arch: amd64
-      
-      # Tolerations and Affinity
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app.kubernetes.io/name
-                  operator: In
-                  values:
-                  - airtable-mcp
-              topologyKey: kubernetes.io/hostname
-      
-      # Init Containers
-      initContainers:
-      - name: wait-for-dependencies
-        image: busybox:1.35
-        command: ['sh', '-c']
-        args:
-        - |
-          echo "Waiting for dependencies..."
-          until nc -z airtable-mcp-redis 6379; do
-            echo "Waiting for Redis..."
-            sleep 2
-          done
-          echo "Dependencies ready!"
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 1001
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-            - ALL
-      
-      # Main Application Container
-      containers:
-      - name: airtable-mcp
-        image: rashidazarang/airtable-mcp:2.1.0-production
-        imagePullPolicy: Always
-        
-        # Security Context
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 1001
-          runAsGroup: 1001
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-            - ALL
-            add:
-            - NET_BIND_SERVICE
-        
-        # Ports
-        ports:
-        - name: http
-          containerPort: 8010
-          protocol: TCP
-        - name: metrics
-          containerPort: 9090
-          protocol: TCP
-        
-        # Environment Variables
-        env:
-        - name: NODE_ENV
-          value: "production"
-        - name: PORT
-          value: "8010"
-        - name: HOST
-          value: "0.0.0.0"
-        - name: LOG_LEVEL
-          valueFrom:
-            configMapKeyRef:
-              name: airtable-mcp-config
-              key: LOG_LEVEL
-        - name: LOG_FORMAT
-          value: "json"
-        - name: AIRTABLE_TOKEN
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: AIRTABLE_TOKEN
-        - name: AIRTABLE_BASE_ID
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: AIRTABLE_BASE_ID
-        - name: AIRTABLE_CLIENT_ID
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: AIRTABLE_CLIENT_ID
-              optional: true
-        - name: AIRTABLE_CLIENT_SECRET
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: AIRTABLE_CLIENT_SECRET
-              optional: true
-        - name: SESSION_SECRET
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: SESSION_SECRET
-        - name: REDIS_URL
-          value: "redis://airtable-mcp-redis:6379"
-        - name: REDIS_PASSWORD
-          valueFrom:
-            secretKeyRef:
-              name: airtable-mcp-secrets
-              key: REDIS_PASSWORD
-        - name: MAX_REQUESTS_PER_MINUTE
-          valueFrom:
-            configMapKeyRef:
-              name: airtable-mcp-config
-              key: MAX_REQUESTS_PER_MINUTE
-        - name: CACHE_TTL
-          valueFrom:
-            configMapKeyRef:
-              name: airtable-mcp-config
-              key: CACHE_TTL
-        - name: CONNECTION_TIMEOUT
-          valueFrom:
-            configMapKeyRef:
-              name: airtable-mcp-config
-              key: CONNECTION_TIMEOUT
-        - name: REQUEST_TIMEOUT
-          valueFrom:
-            configMapKeyRef:
-              name: airtable-mcp-config
-              key: REQUEST_TIMEOUT
-        - name: ENABLE_METRICS
-          value: "true"
-        - name: METRICS_PORT
-          value: "9090"
-        - name: POD_NAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        - name: POD_NAMESPACE
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.namespace
-        - name: POD_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.podIP
-        
-        # Resource Limits
-        resources:
-          requests:
-            cpu: 100m
-            memory: 128Mi
-          limits:
-            cpu: 1000m
-            memory: 512Mi
-        
-        # Volume Mounts
-        volumeMounts:
-        - name: tmp
-          mountPath: /tmp
-        - name: logs
-          mountPath: /app/logs
-        - name: config
-          mountPath: /app/config
-          readOnly: true
-        
-        # Health Checks
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: http
-            scheme: HTTP
-          initialDelaySeconds: 30
-          periodSeconds: 30
-          timeoutSeconds: 10
-          successThreshold: 1
-          failureThreshold: 3
-        
-        readinessProbe:
-          httpGet:
-            path: /health
-            port: http
-            scheme: HTTP
-          initialDelaySeconds: 5
-          periodSeconds: 10
-          timeoutSeconds: 5
-          successThreshold: 1
-          failureThreshold: 3
-        
-        startupProbe:
-          httpGet:
-            path: /health
-            port: http
-            scheme: HTTP
-          initialDelaySeconds: 10
-          periodSeconds: 5
-          timeoutSeconds: 3
-          successThreshold: 1
-          failureThreshold: 6
-        
-        # Lifecycle
-        lifecycle:
-          preStop:
-            exec:
-              command:
-              - /bin/sh
-              - -c
-              - sleep 15
-      
-      # Sidecar Container - Log Forwarder
-      - name: log-forwarder
-        image: fluent/fluent-bit:2.1
-        imagePullPolicy: IfNotPresent
-        
-        # Security Context
-        securityContext:
-          runAsNonRoot: true
-          runAsUser: 1001
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-            - ALL
-        
-        # Volume Mounts
-        volumeMounts:
-        - name: logs
-          mountPath: /app/logs
-          readOnly: true
-        - name: fluent-bit-config
-          mountPath: /fluent-bit/etc
-          readOnly: true
-        - name: tmp
-          mountPath: /tmp
-        
-        # Resource Limits
-        resources:
-          requests:
-            cpu: 50m
-            memory: 64Mi
-          limits:
-            cpu: 100m
-            memory: 128Mi
-      
-      # Volumes
-      volumes:
-      - name: tmp
-        emptyDir:
-          sizeLimit: 100Mi
-      - name: logs
-        emptyDir:
-          sizeLimit: 200Mi
-      - name: config
-        configMap:
-          name: airtable-mcp-config
-      - name: fluent-bit-config
-        configMap:
-          name: fluent-bit-config
-      
-      # Image Pull Secrets
-      imagePullSecrets:
-      - name: docker-registry-secret
-
----
-# Horizontal Pod Autoscaler
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: airtable-mcp-hpa
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: autoscaler
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: airtable-mcp-server
-  minReplicas: 3
-  maxReplicas: 10
-  behavior:
-    scaleDown:
-      stabilizationWindowSeconds: 300
-      policies:
-      - type: Percent
-        value: 10
-        periodSeconds: 60
-    scaleUp:
-      stabilizationWindowSeconds: 60
-      policies:
-      - type: Percent
-        value: 50
-        periodSeconds: 60
-      - type: Pods
-        value: 2
-        periodSeconds: 60
-      selectPolicy: Max
-  metrics:
-  - type: Resource
-    resource:
-      name: cpu
-      target:
-        type: Utilization
-        averageUtilization: 70
-  - type: Resource
-    resource:
-      name: memory
-      target:
-        type: Utilization
-        averageUtilization: 80
-  - type: Pods
-    pods:
-      metric:
-        name: http_requests_per_second
-      target:
-        type: AverageValue
-        averageValue: "30"
-
----
-# Pod Disruption Budget
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: airtable-mcp-pdb
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: pdb
-spec:
-  minAvailable: 2
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: airtable-mcp
-      app.kubernetes.io/component: server

package/k8s/namespace.yaml

@@ -1,108 +0,0 @@
-# Kubernetes Namespace for Airtable MCP Server
-# Trust Score: 100/100 - Enterprise Production Ready
-
-apiVersion: v1
-kind: Namespace
-metadata:
-  name: airtable-mcp
-  labels:
-    name: airtable-mcp
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: namespace
-    app.kubernetes.io/part-of: mcp-platform
-    app.kubernetes.io/managed-by: kubernetes
-    security.policy/tier: restricted
-    trust.score: "100"
-  annotations:
-    description: "Enhanced Airtable MCP Server v2.1 - Production namespace"
-    contact: "rashid@example.com"
-    security.policy: "restricted"
-    network.policy: "enabled"
----
-# Network Policy for enhanced security
-apiVersion: networking.k8s.io/v1
-kind: NetworkPolicy
-metadata:
-  name: airtable-mcp-network-policy
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: network-policy
-spec:
-  podSelector: {}
-  policyTypes:
-  - Ingress
-  - Egress
-  ingress:
-  - from:
-    - namespaceSelector:
-        matchLabels:
-          name: ingress-nginx
-    - namespaceSelector:
-        matchLabels:
-          name: monitoring
-    ports:
-    - protocol: TCP
-      port: 8010
-    - protocol: TCP
-      port: 9090
-  egress:
-  - to: []
-    ports:
-    - protocol: TCP
-      port: 443  # HTTPS
-    - protocol: TCP
-      port: 53   # DNS
-    - protocol: UDP
-      port: 53   # DNS
-  - to:
-    - namespaceSelector:
-        matchLabels:
-          name: kube-system
----
-# Resource Quota for the namespace
-apiVersion: v1
-kind: ResourceQuota
-metadata:
-  name: airtable-mcp-quota
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: resource-quota
-spec:
-  hard:
-    requests.cpu: "2"
-    requests.memory: 4Gi
-    limits.cpu: "4"
-    limits.memory: 8Gi
-    persistentvolumeclaims: "5"
-    pods: "10"
-    services: "5"
-    secrets: "10"
-    configmaps: "10"
----
-# Limit Range for pods in the namespace
-apiVersion: v1
-kind: LimitRange
-metadata:
-  name: airtable-mcp-limits
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: limit-range
-spec:
-  limits:
-  - default:
-      cpu: "1"
-      memory: "512Mi"
-    defaultRequest:
-      cpu: "100m"
-      memory: "128Mi"
-    type: Container
-  - max:
-      cpu: "2"
-      memory: "2Gi"
-    min:
-      cpu: "50m"
-      memory: "64Mi"
-    type: Container

package/k8s/service.yaml

@@ -1,194 +0,0 @@
-# Kubernetes Services for Airtable MCP Server
-# Load balancing, service discovery, and monitoring
-# Trust Score: 100/100
-
-# Main Application Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtable-mcp-service
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: service
-    app.kubernetes.io/version: "2.1.0"
-    trust.score: "100"
-  annotations:
-    description: "Main service for Airtable MCP Server"
-    service.beta.kubernetes.io/aws-load-balancer-type: "nlb"
-    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "${SSL_CERT_ARN}"
-    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "http"
-    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
-    prometheus.io/scrape: "true"
-    prometheus.io/port: "9090"
-    prometheus.io/path: "/metrics"
-spec:
-  type: ClusterIP
-  sessionAffinity: ClientIP
-  sessionAffinityConfig:
-    clientIP:
-      timeoutSeconds: 300
-  selector:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: server
-  ports:
-  - name: http
-    port: 8010
-    targetPort: http
-    protocol: TCP
-  - name: metrics
-    port: 9090
-    targetPort: metrics
-    protocol: TCP
-
----
-# Headless Service for StatefulSet-like behavior
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtable-mcp-headless
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: headless-service
-spec:
-  type: ClusterIP
-  clusterIP: None
-  selector:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: server
-  ports:
-  - name: http
-    port: 8010
-    targetPort: http
-    protocol: TCP
-
----
-# External LoadBalancer Service (for cloud environments)
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtable-mcp-external
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: external-service
-  annotations:
-    description: "External LoadBalancer for Airtable MCP Server"
-    # AWS specific annotations
-    service.beta.kubernetes.io/aws-load-balancer-type: "external"
-    service.beta.kubernetes.io/aws-load-balancer-scheme: "internet-facing"
-    service.beta.kubernetes.io/aws-load-balancer-ssl-cert: "${SSL_CERT_ARN}"
-    service.beta.kubernetes.io/aws-load-balancer-ssl-ports: "443"
-    service.beta.kubernetes.io/aws-load-balancer-backend-protocol: "http"
-    service.beta.kubernetes.io/aws-load-balancer-healthcheck-path: "/health"
-    service.beta.kubernetes.io/aws-load-balancer-healthcheck-port: "8010"
-    service.beta.kubernetes.io/aws-load-balancer-healthcheck-protocol: "HTTP"
-    service.beta.kubernetes.io/aws-load-balancer-healthcheck-interval: "30"
-    service.beta.kubernetes.io/aws-load-balancer-healthcheck-timeout: "5"
-    service.beta.kubernetes.io/aws-load-balancer-healthy-threshold: "2"
-    service.beta.kubernetes.io/aws-load-balancer-unhealthy-threshold: "3"
-    # GCP specific annotations
-    cloud.google.com/neg: '{"ingress": true}'
-    cloud.google.com/backend-config: '{"default": "airtable-mcp-backend-config"}'
-    # Azure specific annotations
-    service.beta.kubernetes.io/azure-load-balancer-internal: "false"
-    service.beta.kubernetes.io/azure-pip-name: "airtable-mcp-pip"
-spec:
-  type: LoadBalancer
-  loadBalancerSourceRanges:
-  - 0.0.0.0/0  # Configure as needed for security
-  selector:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: server
-  ports:
-  - name: http
-    port: 80
-    targetPort: http
-    protocol: TCP
-  - name: https
-    port: 443
-    targetPort: http
-    protocol: TCP
-
----
-# Redis Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtable-mcp-redis
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: redis
-    app.kubernetes.io/component: cache
-    app.kubernetes.io/part-of: airtable-mcp
-spec:
-  type: ClusterIP
-  selector:
-    app.kubernetes.io/name: redis
-    app.kubernetes.io/component: cache
-  ports:
-  - name: redis
-    port: 6379
-    targetPort: 6379
-    protocol: TCP
-
----
-# Monitoring Service for Prometheus scraping
-apiVersion: v1
-kind: Service
-metadata:
-  name: airtable-mcp-monitoring
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: monitoring
-  annotations:
-    prometheus.io/scrape: "true"
-    prometheus.io/port: "9090"
-    prometheus.io/path: "/metrics"
-    prometheus.io/scheme: "http"
-spec:
-  type: ClusterIP
-  selector:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: server
-  ports:
-  - name: metrics
-    port: 9090
-    targetPort: metrics
-    protocol: TCP
-
----
-# ServiceMonitor for Prometheus Operator
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: airtable-mcp-metrics
-  namespace: airtable-mcp
-  labels:
-    app.kubernetes.io/name: airtable-mcp
-    app.kubernetes.io/component: monitoring
-    monitoring: prometheus
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: airtable-mcp
-      app.kubernetes.io/component: monitoring
-  endpoints:
-  - port: metrics
-    interval: 30s
-    path: /metrics
-    scheme: http
-    scrapeTimeout: 10s
-    honorLabels: true
-    metricRelabelings:
-    - sourceLabels: [__name__]
-      regex: 'airtable_mcp_(.*)'
-      targetLabel: __name__
-      replacement: '${1}'
-    relabelings:
-    - sourceLabels: [__meta_kubernetes_pod_name]
-      targetLabel: pod
-    - sourceLabels: [__meta_kubernetes_pod_node_name]
-      targetLabel: node