Add unpublished KDP 1.2 docs with rewritten MCP pages - #2265
Merged
Conversation
KDP now hosts the MCP server behind a gateway that authenticates each caller with their own platform account, so users connect to an endpoint instead of running the server themselves. The 1.1 page describes the opposite: a stateful server the user deploys, paired with a second Kubernetes MCP server. Copy 1.1 to 1.2 and rewrite the MCP documentation there: - AI Tooling: the hosted endpoint and ready-to-paste Claude Code and OpenCode configuration, the twelve tools the server exposes, the workspace path every call takes, and the operations the tools deliberately leave out. Corrects the claims that the server is stateful and needs a second MCP server. - MCP Gateway: a new setup page for operators, covering the chart values, the public PKCE client and cross-client trust the identity provider needs, how to verify the endpoint, and the failure modes. Both pages warn about the two settings that must not be changed: the OAuth callback port is matched exactly by the provider, and pinning scopes drops the audience that makes kcp accept the token. 1.2 is registered commented out in products.yaml, following the same approach used to stage KubeLB 1.3, so the tree is reachable by direct link but stays out of the version dropdown, sitemap and llms.txt until the release. The chart version pins are still 1.1.0 and need bumping before publishing. Signed-off-by: Max Strübing <mxstrbng@gmail.com>
Contributor
|
Skipping CI for Draft Pull Request. |
mstruebing
force-pushed
the
docs/kdp-1.2-mcp
branch
from
August 17, 2026 14:22
1267e11 to
082e69f
Compare
mstruebing
marked this pull request as ready for review
August 17, 2026 14:23
Member
Author
|
/retest |
Member
|
/lgtm |
Contributor
|
LGTM label has been added. DetailsGit tree hash: d3b57bde6b05d99b7c5660f38f982bb3a9fa303a |
Contributor
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: iammerus The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
Merged
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Creates a
v1.2KDP docs tree, copied fromv1.1and not published, with the MCP documentation rewritten and the AI Agent removed.Ref: https://github.com/kubermatic/developer-platform-mgmt/issues/273
Why
KDP now hosts the MCP server behind a gateway that authenticates each caller with their own platform account (developer-platform#779), so users connect to an endpoint rather than running the server themselves. The 1.1 page describes the opposite, and in a way that would not work if followed:
workspacepathNothing documented the operator side either: the endpoint does not exist until an admin enables the gateway and adds an identity-provider client.
What
MCP
platform-users/ai-toolingrewritten: hosted endpoint, ready-to-paste Claude Code and OpenCode configuration, the twelve tools, the workspace-path rule, and what the tools deliberately cannot do (service enablement, Blueprint authoring, logs/exec).setup/mcp-gateway(new, operator-facing): chart values, the public PKCE client andtrustedPeerscross-client trust the provider needs, verification steps and failure modes.AI Agent removed (second commit)
The
developer-platform-ai-agentchart is not part of 1.2, so everything documenting it is gone: thesetup/ai-agentpage and its screenshots, the quickstart section that deployed it (plus the<OPENAI_API_KEY>prerequisite and the two values files it read), theaiAgentfeature block in the dashboard values, and the chart's row and upgrade step in the upgrade guide.The dashboard's own AI assistance is a different component, configured on the dashboard API via
api.config.openaiKey, so the UI Builder and Blueprint pages describing it are untouched.Versioning
v1.2is registered commented out indata/products.yaml, the same approach used to stage KubeLB 1.3 (e3b6bc06), so it is reachable by direct link but stays out of the version dropdown, sitemap andllms.txt.Verification
hack/ci/verify-hugo.shbuilds clean with no warnings, and codespell passes. Against the built site:v1.2appears 0 times insitemap.xmlandllms.txt, its pages carrynoindex, nofollow, and the version dropdown still offers only v0.9.0 / v1.0 / v1.1./developer-platform/v1.2/platform-users/ai-tooling/and/developer-platform/v1.2/setup/mcp-gateway/.relrefandreadfiletarget in the tree still resolves, and nothing references the deletedsetup/ai-agentpage.Note that hidden versions get no left sidebar (the theme only renders the nav tree for versions listed in
products.yaml); it returns when the version is published.Before publishing
v1.2entry indata/products.yaml(one hunk).1.1.0:setup/quickstart(×3 plus the kcp chart) andsetup/upgrade(title and table).