apiVersion: v1
kind: Namespace
metadata:
 name: gitea-mcp
---
apiVersion: v1
kind: Secret
metadata:
 name: gitea-mcp-secret
 namespace: gitea-mcp
type: Opaque
stringData:
 # Paste a Personal Access Token with only the scopes you need.
 GITEA_ACCESS_TOKEN: "<GITEA_PAT>"
---
apiVersion: apps/v1
kind: Deployment
metadata:
 name: gitea-mcp
 namespace: gitea-mcp
spec:
 replicas: 1
 selector:
 matchLabels:
 app: gitea-mcp
 template:
 metadata:
 labels:
 app: gitea-mcp
 spec:
 containers:
 - name: server
 image: gitea/gitea-mcp-server:latest
 imagePullPolicy: IfNotPresent
 env:
 - name: MCP_MODE
 value: "sse"
 - name: GITEA_HOST
 value: "<GITEA_HOST>"
 - name: GITEA_ACCESS_TOKEN
 valueFrom:
 secretKeyRef:
 name: gitea-mcp-secret
 key: GITEA_ACCESS_TOKEN
 ports:
 - containerPort: 8080
 name: http
 # Socket probes (server often lacks /healthz)
 readinessProbe:
 tcpSocket: { port: http }
 initialDelaySeconds: 5
 periodSeconds: 10
 livenessProbe:
 tcpSocket: { port: http }
 initialDelaySeconds: 10
 periodSeconds: 20
 resources:
 requests:
 cpu: 100m
 memory: 128Mi
 limits:
 cpu: 500m
 memory: 512Mi
 securityContext:
 runAsNonRoot: true
 runAsUser: 10001
 fsGroup: 10001
---
apiVersion: v1
kind: Service
metadata:
 name: gitea-mcp
 namespace: gitea-mcp
spec:
 selector:
 app: gitea-mcp
 ports:
 - name: http
 port: 80
 targetPort: http