snow-flow 1.1.76 → 1.1.78

package/k8s/operations-mcp.yaml

@@ -1,232 +0,0 @@
-# ServiceNow Operations MCP Deployment
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: operations-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
-    app.kubernetes.io/version: "1.0.0"
-    app.kubernetes.io/component: mcp-service
-    app.kubernetes.io/part-of: servicenow-mcp
-    app.kubernetes.io/managed-by: kubectl
-spec:
-  replicas: 3
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: operations-mcp
-      app.kubernetes.io/instance: operations-mcp
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: operations-mcp
-        app.kubernetes.io/instance: operations-mcp
-        app.kubernetes.io/version: "1.0.0"
-        app.kubernetes.io/component: mcp-service
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/port: "3006"
-        prometheus.io/path: "/metrics"
-    spec:
-      serviceAccountName: mcp-service-account
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1001
-        runAsGroup: 1001
-        fsGroup: 1001
-      containers:
-      - name: operations-mcp
-        image: servicenow-mcp/operations-mcp:latest
-        imagePullPolicy: IfNotPresent
-        ports:
-        - name: http
-          containerPort: 3006
-          protocol: TCP
-        env:
-        - name: SERVICE_NAME
-          value: "operations-mcp"
-        - name: SERVER_PORT
-          value: "3006"
-        - name: SERVICE_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.podIP
-        - name: HOSTNAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        envFrom:
-        - configMapRef:
-            name: mcp-config
-        - secretRef:
-            name: servicenow-credentials
-        - secretRef:
-            name: neo4j-credentials
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: http
-          initialDelaySeconds: 30
-          periodSeconds: 30
-          timeoutSeconds: 10
-          failureThreshold: 3
-          successThreshold: 1
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: http
-          initialDelaySeconds: 15
-          periodSeconds: 10
-          timeoutSeconds: 5
-          failureThreshold: 3
-          successThreshold: 1
-        resources:
-          requests:
-            memory: "256Mi"
-            cpu: "250m"
-          limits:
-            memory: "512Mi"
-            cpu: "500m"
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-            - ALL
-        volumeMounts:
-        - name: tmp
-          mountPath: /tmp
-        - name: logs
-          mountPath: /app/logs
-      volumes:
-      - name: tmp
-        emptyDir: {}
-      - name: logs
-        emptyDir: {}
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app.kubernetes.io/name
-                  operator: In
-                  values:
-                  - operations-mcp
-              topologyKey: kubernetes.io/hostname
-      terminationGracePeriodSeconds: 30
----
-# ServiceNow Operations MCP Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: operations-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
-    app.kubernetes.io/version: "1.0.0"
-    app.kubernetes.io/component: mcp-service
-    app.kubernetes.io/part-of: servicenow-mcp
-  annotations:
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
-spec:
-  type: ClusterIP
-  ports:
-  - port: 3006
-    targetPort: http
-    protocol: TCP
-    name: http
-  selector:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
----
-# ServiceNow Operations MCP Horizontal Pod Autoscaler
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: operations-mcp-hpa
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
-    app.kubernetes.io/component: autoscaler
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: operations-mcp
-  minReplicas: 3
-  maxReplicas: 9
-  metrics:
-  - type: Resource
-    resource:
-      name: cpu
-      target:
-        type: Utilization
-        averageUtilization: 70
-  - type: Resource
-    resource:
-      name: memory
-      target:
-        type: Utilization
-        averageUtilization: 80
-  behavior:
-    scaleUp:
-      stabilizationWindowSeconds: 60
-      policies:
-      - type: Percent
-        value: 50
-        periodSeconds: 60
-    scaleDown:
-      stabilizationWindowSeconds: 300
-      policies:
-      - type: Percent
-        value: 25
-        periodSeconds: 60
----
-# ServiceNow Operations MCP ServiceMonitor for Prometheus
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: operations-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
-    app.kubernetes.io/component: monitoring
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: operations-mcp
-      app.kubernetes.io/instance: operations-mcp
-  endpoints:
-  - port: http
-    interval: 30s
-    path: /metrics
-    scrapeTimeout: 10s
----
-# ServiceNow Operations MCP Pod Disruption Budget
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: operations-mcp-pdb
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: operations-mcp
-    app.kubernetes.io/instance: operations-mcp
-    app.kubernetes.io/component: availability
-spec:
-  minAvailable: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: operations-mcp
-      app.kubernetes.io/instance: operations-mcp
----

package/k8s/platform-development-mcp.yaml

@@ -1,232 +0,0 @@
-# ServiceNow Platform Development MCP Deployment
-apiVersion: apps/v1
-kind: Deployment
-metadata:
-  name: platform-development-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
-    app.kubernetes.io/version: "1.0.0"
-    app.kubernetes.io/component: mcp-service
-    app.kubernetes.io/part-of: servicenow-mcp
-    app.kubernetes.io/managed-by: kubectl
-spec:
-  replicas: 2
-  strategy:
-    type: RollingUpdate
-    rollingUpdate:
-      maxSurge: 1
-      maxUnavailable: 0
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: platform-development-mcp
-      app.kubernetes.io/instance: platform-development-mcp
-  template:
-    metadata:
-      labels:
-        app.kubernetes.io/name: platform-development-mcp
-        app.kubernetes.io/instance: platform-development-mcp
-        app.kubernetes.io/version: "1.0.0"
-        app.kubernetes.io/component: mcp-service
-      annotations:
-        prometheus.io/scrape: "true"
-        prometheus.io/port: "3007"
-        prometheus.io/path: "/metrics"
-    spec:
-      serviceAccountName: mcp-service-account
-      securityContext:
-        runAsNonRoot: true
-        runAsUser: 1001
-        runAsGroup: 1001
-        fsGroup: 1001
-      containers:
-      - name: platform-development-mcp
-        image: servicenow-mcp/platform-development-mcp:latest
-        imagePullPolicy: IfNotPresent
-        ports:
-        - name: http
-          containerPort: 3007
-          protocol: TCP
-        env:
-        - name: SERVICE_NAME
-          value: "platform-development-mcp"
-        - name: SERVER_PORT
-          value: "3007"
-        - name: SERVICE_IP
-          valueFrom:
-            fieldRef:
-              fieldPath: status.podIP
-        - name: HOSTNAME
-          valueFrom:
-            fieldRef:
-              fieldPath: metadata.name
-        envFrom:
-        - configMapRef:
-            name: mcp-config
-        - secretRef:
-            name: servicenow-credentials
-        - secretRef:
-            name: neo4j-credentials
-        livenessProbe:
-          httpGet:
-            path: /health
-            port: http
-          initialDelaySeconds: 30
-          periodSeconds: 30
-          timeoutSeconds: 10
-          failureThreshold: 3
-          successThreshold: 1
-        readinessProbe:
-          httpGet:
-            path: /ready
-            port: http
-          initialDelaySeconds: 15
-          periodSeconds: 10
-          timeoutSeconds: 5
-          failureThreshold: 3
-          successThreshold: 1
-        resources:
-          requests:
-            memory: "256Mi"
-            cpu: "250m"
-          limits:
-            memory: "512Mi"
-            cpu: "500m"
-        securityContext:
-          allowPrivilegeEscalation: false
-          readOnlyRootFilesystem: true
-          capabilities:
-            drop:
-            - ALL
-        volumeMounts:
-        - name: tmp
-          mountPath: /tmp
-        - name: logs
-          mountPath: /app/logs
-      volumes:
-      - name: tmp
-        emptyDir: {}
-      - name: logs
-        emptyDir: {}
-      affinity:
-        podAntiAffinity:
-          preferredDuringSchedulingIgnoredDuringExecution:
-          - weight: 100
-            podAffinityTerm:
-              labelSelector:
-                matchExpressions:
-                - key: app.kubernetes.io/name
-                  operator: In
-                  values:
-                  - platform-development-mcp
-              topologyKey: kubernetes.io/hostname
-      terminationGracePeriodSeconds: 30
----
-# ServiceNow Platform Development MCP Service
-apiVersion: v1
-kind: Service
-metadata:
-  name: platform-development-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
-    app.kubernetes.io/version: "1.0.0"
-    app.kubernetes.io/component: mcp-service
-    app.kubernetes.io/part-of: servicenow-mcp
-  annotations:
-    service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
-spec:
-  type: ClusterIP
-  ports:
-  - port: 3007
-    targetPort: http
-    protocol: TCP
-    name: http
-  selector:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
----
-# ServiceNow Platform Development MCP Horizontal Pod Autoscaler
-apiVersion: autoscaling/v2
-kind: HorizontalPodAutoscaler
-metadata:
-  name: platform-development-mcp-hpa
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
-    app.kubernetes.io/component: autoscaler
-spec:
-  scaleTargetRef:
-    apiVersion: apps/v1
-    kind: Deployment
-    name: platform-development-mcp
-  minReplicas: 2
-  maxReplicas: 6
-  metrics:
-  - type: Resource
-    resource:
-      name: cpu
-      target:
-        type: Utilization
-        averageUtilization: 70
-  - type: Resource
-    resource:
-      name: memory
-      target:
-        type: Utilization
-        averageUtilization: 80
-  behavior:
-    scaleUp:
-      stabilizationWindowSeconds: 60
-      policies:
-      - type: Percent
-        value: 50
-        periodSeconds: 60
-    scaleDown:
-      stabilizationWindowSeconds: 300
-      policies:
-      - type: Percent
-        value: 25
-        periodSeconds: 60
----
-# ServiceNow Platform Development MCP ServiceMonitor for Prometheus
-apiVersion: monitoring.coreos.com/v1
-kind: ServiceMonitor
-metadata:
-  name: platform-development-mcp
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
-    app.kubernetes.io/component: monitoring
-spec:
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: platform-development-mcp
-      app.kubernetes.io/instance: platform-development-mcp
-  endpoints:
-  - port: http
-    interval: 30s
-    path: /metrics
-    scrapeTimeout: 10s
----
-# ServiceNow Platform Development MCP Pod Disruption Budget
-apiVersion: policy/v1
-kind: PodDisruptionBudget
-metadata:
-  name: platform-development-mcp-pdb
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: platform-development-mcp
-    app.kubernetes.io/instance: platform-development-mcp
-    app.kubernetes.io/component: availability
-spec:
-  minAvailable: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: platform-development-mcp
-      app.kubernetes.io/instance: platform-development-mcp
----

package/k8s/rbac.yaml

@@ -1,140 +0,0 @@
-# RBAC configuration for ServiceNow MCP services
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: mcp-service-account
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: security
-automountServiceAccountToken: true
----
-# Role for MCP services
-apiVersion: rbac.authorization.k8s.io/v1
-kind: Role
-metadata:
-  namespace: servicenow-mcp
-  name: mcp-service-role
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: security
-rules:
-# Allow reading configmaps and secrets
-- apiGroups: [""]
-  resources: ["configmaps", "secrets"]
-  verbs: ["get", "list", "watch"]
-# Allow reading services for service discovery
-- apiGroups: [""]
-  resources: ["services", "endpoints"]
-  verbs: ["get", "list", "watch"]
-# Allow reading pods for health checks
-- apiGroups: [""]
-  resources: ["pods"]
-  verbs: ["get", "list", "watch"]
-# Allow creating events for logging
-- apiGroups: [""]
-  resources: ["events"]
-  verbs: ["create", "patch"]
----
-# RoleBinding for MCP services
-apiVersion: rbac.authorization.k8s.io/v1
-kind: RoleBinding
-metadata:
-  name: mcp-service-binding
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: security
-subjects:
-- kind: ServiceAccount
-  name: mcp-service-account
-  namespace: servicenow-mcp
-roleRef:
-  kind: Role
-  name: mcp-service-role
-  apiGroup: rbac.authorization.k8s.io
----
-# ClusterRole for cross-namespace service discovery (if needed)
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: mcp-service-discovery-role
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: security
-rules:
-# Allow reading services across namespaces for service discovery
-- apiGroups: [""]
-  resources: ["services"]
-  verbs: ["get", "list", "watch"]
-# Allow reading nodes for topology awareness
-- apiGroups: [""]
-  resources: ["nodes"]
-  verbs: ["get", "list", "watch"]
----
-# ClusterRoleBinding for service discovery
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: mcp-service-discovery-binding
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: security
-subjects:
-- kind: ServiceAccount
-  name: mcp-service-account
-  namespace: servicenow-mcp
-roleRef:
-  kind: ClusterRole
-  name: mcp-service-discovery-role
-  apiGroup: rbac.authorization.k8s.io
----
-# ServiceAccount for monitoring
-apiVersion: v1
-kind: ServiceAccount
-metadata:
-  name: mcp-monitoring-account
-  namespace: servicenow-mcp
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: monitoring
----
-# ClusterRole for monitoring
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRole
-metadata:
-  name: mcp-monitoring-role
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: monitoring
-rules:
-# Prometheus needs to scrape metrics
-- apiGroups: [""]
-  resources: ["services", "endpoints", "pods"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: [""]
-  resources: ["nodes", "nodes/proxy", "services", "endpoints", "pods"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["extensions"]
-  resources: ["ingresses"]
-  verbs: ["get", "list", "watch"]
-- apiGroups: ["networking.k8s.io"]
-  resources: ["ingresses"]
-  verbs: ["get", "list", "watch"]
----
-# ClusterRoleBinding for monitoring
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: mcp-monitoring-binding
-  labels:
-    app.kubernetes.io/name: servicenow-mcp
-    app.kubernetes.io/component: monitoring
-subjects:
-- kind: ServiceAccount
-  name: mcp-monitoring-account
-  namespace: servicenow-mcp
-roleRef:
-  kind: ClusterRole
-  name: mcp-monitoring-role
-  apiGroup: rbac.authorization.k8s.io