fix(gitea-mcp): talk to Gitea via its public URL #1247

Merged
k.renner merged 1 commits from fix/gitea-mcp-public-gitea-url into master 2026-10-11 12:05:58 +00:00
Member

The OAuth protected-resource metadata advertised http://gitea.gitea.svc.cluster.local:3000 as authorization server, so MCP clients doing auth discovery failed. -H is now https://gitea.renner.uno; egress goes to Traefik like woodpecker-server and wiki already do, and the gitea:3000 grants on both sides are removed. Tool results' clone_url/html_url become public URLs as a side effect. Kustomize render and server dry-run of the CNPs pass. 🤖 Generated with Claude Code

The OAuth protected-resource metadata advertised http://gitea.gitea.svc.cluster.local:3000 as authorization server, so MCP clients doing auth discovery failed. -H is now https://gitea.renner.uno; egress goes to Traefik like woodpecker-server and wiki already do, and the gitea:3000 grants on both sides are removed. Tool results' clone_url/html_url become public URLs as a side effect. Kustomize render and server dry-run of the CNPs pass. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
claude-bot added 1 commit 2026-10-11 12:05:15 +00:00
fix(gitea-mcp): talk to Gitea via its public URL
ci/woodpecker/pr/ci-scripts-test Pipeline was successful
ci/woodpecker/pr/pr-review Pipeline was successful
ci/woodpecker/pr/ci-manifests-test Pipeline was successful
efd63b4107
gitea-mcp advertises its -H URL as the authorization server in the OAuth protected-resource metadata, so clients doing discovery were sent to http://gitea.gitea.svc.cluster.local:3000. Switch -H to https://gitea.renner.uno; egress now goes to Traefik (as woodpecker-server and wiki already do) and the gitea:3000 grant on both sides is removed. Tool results' clone_url/html_url become public URLs too.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
k.renner merged commit 66150f892d into master 2026-10-11 12:05:58 +00:00
Sign in to join this conversation.