apiVersion: secrets.phase.dev/v1alpha1 kind: PhaseSecret metadata: name: gitea-mcp-server-secret namespace: agentgateway-system spec: authentication: serviceToken: serviceTokenSecretReference: secretName: phase-service-token secretNamespace: phase-secrets-operator managedSecretReferences: - secretName: gitea-mcp-server-secret secretNamespace: agentgateway-system secretType: Opaque phaseApp: gitea-mcp-server phaseAppEnv: production phaseAppEnvPath: / phaseHost: https://phase.hnrx.net --- apiVersion: apps/v1 kind: Deployment metadata: name: gitea-mcp-server namespace: agentgateway-system spec: replicas: 1 selector: matchLabels: app: gitea-mcp-server template: metadata: labels: app: gitea-mcp-server spec: containers: - name: gitea-mcp-server image: docker.gitea.com/gitea-mcp-server:latest command: ["/app/gitea-mcp"] args: ["-t", "http", "--port", "8080"] envFrom: - secretRef: name: gitea-mcp-server-secret ports: - containerPort: 8080 --- apiVersion: v1 kind: Service metadata: name: gitea-mcp-server namespace: agentgateway-system labels: app: gitea-mcp-server spec: selector: app: gitea-mcp-server ports: - port: 8080 targetPort: 8080 appProtocol: agentgateway.dev/mcp --- apiVersion: agentgateway.dev/v1alpha1 kind: AgentgatewayBackend metadata: name: gitea-mcp-backend namespace: agentgateway-system spec: mcp: targets: - name: gitea-mcp-server selector: services: matchLabels: app: gitea-mcp-server --- apiVersion: gateway.networking.k8s.io/v1 kind: HTTPRoute metadata: name: gitea-mcp namespace: agentgateway-system spec: parentRefs: - name: agentgateway-proxy namespace: agentgateway-system rules: - backendRefs: - name: mcp-backend namespace: agentgateway-system group: agentgateway.dev kind: AgentgatewayBackend matches: - path: type: PathPrefix value: /mcp-gitea