Scott KarpandClaude Fable 5.1
354e223384
From a reading of the gate's documents (2026-10-21): - AGENTS.md: Steps 14 and 15 shown Pending while the Port and both sockets have carried live traffic since the gate was built → Done, with what carries them; "next build task" now points at the open items, the phase tables being complete. - README.md: the repository tree omitted azazel_processor, kushya_generator, mesorah, src/tools and scripts → listed, each in a line. - deploy/ARCHITECTURE.md: the judgment path holds no model, said in writing — the examination is Python patterns and Prolog rules, the judges consult that Prolog; kushya_generator (a fine-tuned model in this repo, not deployed, not wired) is an OFFERER whose output is examined, never a component the bedikah, the engine or a judge consults. The kohen is not the offerer. azazel_processor listed. - The map: the repository is public; eleven files named the ingress NLB's literal address and five the kohen's kubeconfig path. Docs now use the domains (git.bikoret.ch, bikoret.ch) or "<NLB-IP>" with the kubectl query that answers it; the kubeconfig is "$KUBECONFIG" / "$HOME/.kube/<your-cluster>.yaml". gitea-public-apply.sh takes NLB from the environment. None of it was a secret; all of it was a map. - OTP pin: checked, not changed — the segfault in the build log was a source-built OTP 26.2.1 on macOS; the image is hexpm's 26.2.1 with ERL_FLAGS +JMsingle. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
40 lines
1.1 KiB
YAML
40 lines
1.1 KiB
YAML
# Ingress for Gitea MCP Server — public HTTPS endpoint
|
|
# Routes mcp.bikoret.ch to the gitea-mcp service (moved from
|
|
# mcp.bikoret.ch on 2026-10-19 with the switch to MCP OAuth; the
|
|
# server only answers /mcp for the host in -oauth-public-url).
|
|
# TLS via cert-manager (Let's Encrypt)
|
|
#
|
|
# Prerequisites:
|
|
# 1. nginx-ingress controller installed
|
|
# 2. cert-manager installed
|
|
# 3. ClusterIssuer letsencrypt-prod applied
|
|
# 4. DNS: mcp.bikoret.ch → <NLB-IP> (the one NLB; Infomaniak zone)
|
|
---
|
|
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: gitea-mcp
|
|
namespace: shorashim
|
|
labels:
|
|
app.kubernetes.io/name: gitea-mcp
|
|
annotations:
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
nginx.ingress.kubernetes.io/ssl-redirect: "true"
|
|
spec:
|
|
ingressClassName: nginx
|
|
tls:
|
|
- hosts:
|
|
- mcp.bikoret.ch
|
|
secretName: gitea-mcp-bikoret-tls
|
|
rules:
|
|
- host: mcp.bikoret.ch
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: gitea-mcp
|
|
port:
|
|
number: 8080
|