Merge pull request #666 from ansible/TamiTakamiya/allow-write-operations-parameter

allow_write_operations parameter support

Author: TamiTakamiya

config/crd/bases/mcpserver.ansible.com_ansiblemcpservers.yaml

@@ -481,6 +481,10 @@ spec:
               public_base_url:
                 description: The URL of your Ansible Automation Platform
                 type: string
+              allow_write_operations:
+                description: Enable tools that support modification and data changes (using POST, DELETE, and PATCH methods).
+                type: boolean
+                default: false
               extra_settings:
                 description: Environment variables to configure the application-level settings
                 items:

config/samples/mcpserver_v1alpha1_ansiblemcpserver.yaml

@@ -13,3 +13,4 @@ spec:
   service_type: ClusterIP
   ingress_type: Route
   public_base_url: https://your_aap_public_base_url_here
+  allow_write_operations: false

docs/running-on-openshift-cluster.md

@@ -199,6 +199,7 @@ spec:
   service_type: ClusterIP
   ingress_type: Route
   public_base_url: https://your-aap-public-base-url.example.com
+  allow_write_operations: false
   image_pull_secrets:
     - redhat-operators-pull-secret
 ```
@@ -220,6 +221,7 @@ oc get route -n <target-namespace> my-mcpserver
 Key configuration options for the `AnsibleMCPServer` include:
 
 - `public_base_url`: **Required.** The URL of your Ansible Automation Platform
+- `allow_write_operations` : Enable tools that support modification and data changes (using POST, DELETE, and PATCH methods). (default: `false`)
 - `service_type`: Service type (default: `ClusterIP`). Options: `ClusterIP`, `NodePort`, `LoadBalancer`
 - `ingress_type`: Ingress type (default: `Route`). Use `Route` for OpenShift or `Ingress` for standard Kubernetes
 - `image_pull_secrets`: List of secrets for pulling container images from private registries

molecule/default/molecule.yml

@@ -42,6 +42,7 @@ provisioner:
         operator_pull_policy: ${OPERATOR_PULL_POLICY:-"Never"}
         kustomize: ${KUSTOMIZE_PATH:-kustomize}
         public_base_url: ${BASE_URL:-"http://localhost"}
+        allow_write_operations: ${ALLOW_WRITE_OPERATIONS:-false}
   env:
     K8S_AUTH_KUBECONFIG: ${KUBECONFIG:-"~/.kube/config"}
 verifier:

molecule/default/templates/create_mcpserver_instance.yaml.j2

@@ -10,6 +10,7 @@ metadata:
   name: ansiblemcpserver-sample
 spec:
   public_base_url: {{ public_base_url }}
+  allow_write_operations: {{ allow_write_operations }}
   no_log: false
   ingress_type: Ingress
   ingress_path: /mcp

molecule/kind/molecule.yml

@@ -46,6 +46,7 @@ provisioner:
         kubeconfig: "{{ lookup('env', 'KUBECONFIG') }}"
         kustomize: ${KUSTOMIZE_PATH:-kustomize}
         public_base_url: ${BASE_URL:-"http://localhost"}
+        allow_write_operations: ${ALLOW_WRITE_OPERATIONS:-false}
   env:
     K8S_AUTH_KUBECONFIG: ${MOLECULE_EPHEMERAL_DIRECTORY}/kubeconfig
     KUBECONFIG: ${MOLECULE_EPHEMERAL_DIRECTORY}/kubeconfig

roles/mcpserver/templates/mcpserver.configmap.yaml.j2

@@ -9,6 +9,7 @@ metadata:
     {{ lookup("template", "../common/templates/labels/common.yaml.j2") | indent(width=4) | trim }}
 data:
   BASE_URL: "{{ public_base_url }}"
+  ALLOW_WRITE_OPERATIONS: "{{ allow_write_operations }}"
   # Custom user variables
 {% for item in extra_settings | default([]) %}
   {{ item.setting | upper }}: "{{ item.value }}"