Skip to content

OSDOCS-16078# MCP server for OCP (TP)#111327

Open
lpettyjo wants to merge 1 commit into
openshift:mainfrom
lpettyjo:OSDOCS-16078
Open

OSDOCS-16078# MCP server for OCP (TP)#111327
lpettyjo wants to merge 1 commit into
openshift:mainfrom
lpettyjo:OSDOCS-16078

Conversation

@lpettyjo
Copy link
Copy Markdown
Contributor

@lpettyjo lpettyjo commented May 6, 2026

@openshift-ci openshift-ci Bot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label May 6, 2026
@ocpdocs-previewbot
Copy link
Copy Markdown

ocpdocs-previewbot commented May 6, 2026

@openshift openshift deleted a comment from openshift-ci Bot May 7, 2026
@lpettyjo lpettyjo force-pushed the OSDOCS-16078 branch 2 times, most recently from 34b97ff to a36b672 Compare May 7, 2026 17:12
Comment thread modules/ai-app-mcp-server-install.adoc
Comment thread modules/ai-app-mcp-server-install.adoc Outdated
Comment thread modules/ai-app-mcp-server-install.adoc Outdated
Comment thread modules/ai-app-mcp-server-install.adoc Outdated
Comment thread modules/ai-app-mcp-server-install.adoc Outdated
Comment thread modules/ai-app-mcp-server-mcp-server-overview.adoc Outdated
Comment thread modules/ai-app-mcp-server-prompting-instructions.adoc Outdated
@lpettyjo lpettyjo changed the title OSDOCS-16078# MCP server for OCP OSDOCS-16078# MCP server for OCP (TP) May 7, 2026
@lpettyjo lpettyjo force-pushed the OSDOCS-16078 branch 2 times, most recently from b4933e0 to cb887bc Compare May 13, 2026 15:39
@lpettyjo lpettyjo added this to the Planned for 4.22 GA milestone May 13, 2026
@openshift-ci openshift-ci Bot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. and removed size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels May 14, 2026
Comment thread modules/ai-app-mcp-server-configure-gateway.adoc Outdated
Comment thread modules/ai-app-mcp-server-setup-authentication.adoc
Comment thread modules/ai-app-mcp-server-setup-authentication.adoc
Comment thread modules/ai-app-mcp-server-setup-authorization.adoc Outdated
Comment thread modules/ai-app-mcp-server-verify-deployment.adoc Outdated
Comment thread modules/ai-app-mcp-server-configure-gateway.adoc
Comment thread modules/ai-app-mcp-server-install-helm.adoc
Comment thread modules/ai-app-mcp-server-prompting-instructions.adoc Outdated
[role="_abstract"]
With MCP server for {product-title} installed, you can now prompt the Large Language Model (LLM) to learn more about your cluster.

// ???AI warning. Get legal blurb as an OCP snippet: https://docs.google.com/document/d/1eVk8pMiSTqjfQSwU_h21BBXJ5PN8jbSLcU0wBtUt7bs/edit?tab=t.0#heading=h.dyq1r89dkf3e???
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this? 😅

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking to get some official (blessed by Legal) AI warning notice.

[id="ai-app-mcp-server-ai-safety_{context}"]
= AI safety

// ???AI warning. Get legal blurb as an OCP snippet: https://docs.google.com/document/d/1eVk8pMiSTqjfQSwU_h21BBXJ5PN8jbSLcU0wBtUt7bs/edit?tab=t.0#heading=h.dyq1r89dkf3e???
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this? 😅

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Same comment as above.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1 that we need to add the AI transparency notices. We may need guidance from Global Privacy or Legal to review for where these notices should be added.

Comment thread modules/ai-app-mcp-server-prompting-instructions.adoc Outdated
Comment thread modules/ai-app-mcp-server-prompting-workflow.adoc Outdated
Comment thread modules/ai-app-mcp-server-revoke-cr-access.adoc Outdated
@matzew
Copy link
Copy Markdown
Member

matzew commented May 20, 2026

Multiple files missing trailing newline:

  • ai-app-mcp-server-ai-safety.adoc
  • ai-app-mcp-server-install.adoc
  • ai-app-mcp-server-prompting-instructions.adoc
  • ai-app-mcp-server-prompting-workflow.adoc
  • ai-app-mcp-server-mcp-server-overview.adoc

Comment thread modules/ai-app-mcp-server-configure-gateway.adoc Outdated
Comment thread modules/ai-app-mcp-server-connect-client.adoc Outdated
+
For information about how to install the MCP Gateway, see the _Red Hat Connectivity Link_ documentation, Section _Installing the MCP gateway_.
+
After installation, the controller automatically creates the HTTPRoute for gateway access. The MCP Gateway acts as a reverse proxy that aggregates multiple MCP servers into a single endpoint and provides a layer for authentication and rate limiting.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The HTTPRoute needs to be created manually /cc @Cali0707

like said in ai-app-mcp-server-configure-gateway.adoc

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@matzew Yes. And I believe that is covered in the following "Configure the MCP gateway" section. Is something else needed?

Comment thread modules/ai-app-mcp-server-setup-authorization.adoc Outdated

* *Abstraction of complexity*: An MCP server hides the complicated parts of an integration. The LLM does not need to know how to write a SQL query or use a specific GitHub API. The server handles the code, the formatting, and the technical unique complexities, giving the LLM a clean, standardized result.

* *Execution and action*: Unlike the MCP Gateway, which just routes traffic, the Server is where the logic lives. When an AI decides to use a tool, the MCP server is the component that actually runs the Python script, queries the database, or calls the external API.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

what python script?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Good question.

Comment thread modules/ai-app-mcp-server-setup-authorization.adoc Outdated

[id="ai-app-mcp-server-ai-safety-data-ownership_{context}"]
== Data ownership
The MCP server for Red Hat {product-title} does not store any information or state of the cluster. If you opt in, there are several telemetry metrics that are collected to understand the overall usage levels of the MCP server for Red Hat {product-title}:
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@matzew Do we provide any mechanism for a user to disable / opt out for telemetry?

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

telemetry of the server itself must be enabled. not done by default CC @nader-ziada

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Telemetry is disabled by default,

To enable it, you need to provide an OTLP endpoint via either:

Environment variable:

export OTEL_EXPORTER_OTLP_ENDPOINT=http://localhost:4317

Or TOML config:

[telemetry]
endpoint = "http://localhost:4317"

Setting the endpoint auto-enables telemetry. You can also explicitly control it with enabled = true/false in the [telemetry] section, which takes precedence over auto-detection.

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@julienlim The section explicitly states that you have to opt in for telmetry, so you do not need to disable/opt out in the default setup. Do you want me to provide info on how to opt in?

Comment thread modules/ai-app-mcp-server-ai-safety.adoc
Comment thread modules/ai-app-mcp-server-ai-safety.adoc Outdated
Comment thread modules/ai-app-mcp-server-ai-safety.adoc
@lpettyjo lpettyjo force-pushed the OSDOCS-16078 branch 6 times, most recently from f50f278 to 4b1ef61 Compare May 21, 2026 12:09
@lpettyjo
Copy link
Copy Markdown
Contributor Author

@matzew Not sure why you think I need the newline char?. It's not needed for publishing. Some other reason we need it?

----
$ helm upgrade -i -n openshift-mcp-server --create-namespace openshift-mcp-server \
openshift-helm-charts/redhat-openshift-mcp-server \
--set config.toolsets={core,helm,kubevirt} \
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@matzew should these be changed to core,openshift or as a placeholder like <hostname> and add further explanations below?

Comment thread modules/ai-app-mcp-server-mcp-server-overview.adoc Outdated
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 21, 2026

@lpettyjo: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

branch/enterprise-4.22 size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

7 participants