🎃 Add a Helm chart for self-hosted Kubernetes installs
Los mantenedores suelen responder en 1 día
Nadie ha tomado este issue todavía.
Evaluación
- Dificultad
- 5/5
- Tiempo estimado
- Más de una semana
- Aptitud para principiantes
- 38/100
- Tipo de issue
- Nueva funcionalidad
- Claridad
- Bien especificado
- Estado de actividad
- Activo
- Stack tecnológico
- docker, helm, kubernetes, postgresql, redis, typescript
- Área
- devops, infrastructure
Línea de trabajo
Start with docker-compose.yml:36–110 and Dockerfile:158–175 to map the app’s environment, ports, and runtime, then read the secret validation and health endpoint references. Build and validate the chart under deploy/helm/anythingmcp with helm lint and helm template, then test installation and upgrade on kind or minikube. Done means the acceptance criteria pass, including stable generated secrets and the Helm documentation.
Escrito por el modelo de indexación a partir del texto del issue.
Descripción
Part of the October Challenge #846.
Why
Companies that self-host AnythingMCP increasingly run everything on Kubernetes (AKS, EKS, OpenShift, k3s) and do not want to translate docker-compose.yml by hand. A maintained chart in the repo is the standard entry point (n8n, Langfuse, Flowise and Dify all ship one). This issue is the first step: a single-replica chart that mirrors the Compose stack and passes helm lint.
Self-hosted vs Cloud
- Self-hosted: this is the whole point. Works for Community and Business; the license key is entered in the UI as today, nothing edition-specific in the chart.
- Cloud (
DEPLOYMENT_MODE=cloud): not affected. AnythingMCP Cloud is deployed bydocker-compose.cloud.yml+deploy/cloud/; do not change those files, and the chart must not exposeDEPLOYMENT_MODEas a value (it is our operating mode, not a user option). - Who can use it: cluster operators. No app roles involved; the first user who registers becomes
ADMINas with Compose.
What to build
deploy/helm/anythingmcp/ with Chart.yaml (apiVersion v2, appVersion = root package.json version, currently 0.18.0), values.yaml, templates/, README.md.
- App — one
Deploymentfromhelpcodeai/anythingmcp:<appVersion>running the default./start.sh(backend + frontend in one container, migrations on start).replicas: 1andstrategy: Recreatein this first version (see Out of scope for why). Ports3000(http) and4000(api), oneService. - Env — everything the
appservice sets indocker-compose.yml:50–99, as values. Required secrets in a chart-managedSecretorexistingSecret:JWT_SECRET,ENCRYPTION_KEY(min. 32 chars; must never change after install),MCP_API_KEY/MCP_BEARER_TOKEN, DB password. Do not ship defaults: the backend refuses placeholder values at startup (secrets.util.ts:41); userequiredin templates, or generate withrandAlphaNumand keep them stable across upgrades withlookup. - PostgreSQL —
postgresql.enabled: truedeploys a simpleStatefulSetofpostgres:17-alpinewith a PVC (no third-party subchart).externalDatabase.url/existingSecretwhenenabled: false→ buildsDATABASE_URL. - Redis — optional (
redis.enabled: falseby default, like Compose); when on, a smallredis:7-alpineDeployment andREDIS_URLset.externalRedis.urlalternative. - MOTIS — optional (
motis.enabled: false); when on, also addmotistoSSRF_ALLOWED_HOSTSand setMOTIS_INTERNAL_URL(docker-compose.yml:77–85,:135). - Ingress — optional,
className,hosts,tls. Route the backend paths to port 4000 and everything else to 3000. Take the list from therewrites()inpackages/frontend/next.config.ts:19(the Cloud Caddyfile says it must match it):/api,/health,/mcp,/.well-known,/auth,/sso,/authorize,/callback,/token,/register,/userinfo, plus/revokefromsetup.sh:463. (setup.sh:455–467is older and misses/ssoand/userinfo.) Document nginx annotations for SSE/streaming (proxy-buffering: off, longproxy-read-timeout). SetSERVER_URL,FRONTEND_URL,CORS_ORIGIN,NEXT_PUBLIC_API_URLfrom the first host. - Probes —
startupProbeHTTPGET /healthon 4000 with a generousfailureThreshold(migrations run first);readinessProbeGET /health;livenessProbetcpSocket 4000, not/health(it checks the database, and a DB blip must not restart the app —health.controller.ts:74). securityContext: non-root (the image runs asappuser,Dockerfile:158),resources,nodeSelector/tolerations/affinity,podAnnotations,serviceAccount.- CI (optional but welcome): a job in
.github/workflows/ci.ymlrunninghelm lintandhelm template(orchart-testingct lint).
Where to look
docker-compose.yml:36–110(app),:113(postgres),:135(motis),:156(commented redis) — source of truth for services and env.start.sh:57,:64—frontend/allmodes;run_migrationsat the top.Dockerfile:158–175— user, ports, healthcheck, CMD.packages/backend/src/health/health.controller.ts:74—/health(DB, Redis, heap).packages/backend/src/common/secrets.util.ts:41— startup secret validation.setup.sh:455— path routing the Compose Caddy setup uses.deploy/cloud/Caddyfile:76–123— explains why a split frontend/backend needs explicit backend routes (Next rewrites are baked withlocalhost:4000).docs/deployment.md:159— production deployment docs to extend.
Acceptance criteria
-
helm lint deploy/helm/anythingmcppasses with default values and withpostgresql.enabled=false,externalDatabase.url=…. -
helm installon kind/minikube: pod becomes Ready, UI reachable via port-forward/Ingress, registration works,/mcp/<serverId>answers with an API key. Put the exact commands you ran in the PR. -
helm upgradekeeps generated secrets (no newENCRYPTION_KEY, which would make stored credentials unreadable). - No secret value appears in
helm templateoutput unless the user passed it. - Docs:
deploy/helm/anythingmcp/README.md(values table) + a "Kubernetes (Helm)" section indocs/deployment.md.
Out of scope
- Multiple replicas / HPA / split frontend+backend pods. Needs Redis for shared rate limits,
MCP_STATEFUL_SESSIONSoff or sticky sessions (mcp-session.manager.ts:67), and migrations moved to a Job — follow-up issue. - Publishing the chart to a Helm repo / OCI registry, Artifact Hub listing.
- Operator, Kustomize, Terraform.
- Prometheus
ServiceMonitor(comes after the metrics endpoint in #854).
Size
L (several days, may be split: chart + lint first, Ingress/MOTIS second).
How to claim
Comment "I'd like to work on this" and we'll assign you. Rules in #846.
- Lenguaje dominante
- TypeScript
- Estrellas
- 856
- Forks
- 82
- Merge medio
- 5 h 18 min
- PR fusionados (30 d)
- 162
Preparar el entorno
Este proyecto no incluye contenedor de desarrollo, Dockerfile ni guía de contribución, así que la configuración corre por tu cuenta: empieza por su README y consulta nuestra guía para la primera contribución para los pasos generales.
Primeros pasos
- Lee el issue completo y luego la guía de contribución del proyecto.
- Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
- Haz un fork del repositorio y trabaja en una rama.
- Abre un pull request que haga referencia al número del issue.
Más de HelpCode-ai/anythingmcp
-
Docs: document all SMTP_* and other undocumented env vars for self-hostingPosiblemente ocupada @notlakshitha la tomó hace 3 días. Abiertoenhancement
Dificultad 2/5 1-3 horas Aptitud para principiantes 82/100
HelpCode-ai/anythingmcp#1049 · 3 comentarios ·
Los mantenedores suelen responder en 1 día
-
good first issue hacktoberfest
Dificultad 2/5 Medio día Aptitud para principiantes 70/100
HelpCode-ai/anythingmcp#996 ·
Los mantenedores suelen responder en 1 día
-
good first issue hacktoberfest
Dificultad 2/5 Medio día Aptitud para principiantes 72/100
HelpCode-ai/anythingmcp#995 ·
Los mantenedores suelen responder en 1 día
-
enhancement good first issue hacktoberfest help wanted
Dificultad 2/5 1-3 horas Aptitud para principiantes 78/100
HelpCode-ai/anythingmcp#982 ·
Los mantenedores suelen responder en 1 día
-
Upload the new social previewPosiblemente ocupada @helpcodeai la tomó hace 3 días. Abierto
HelpCode-ai/anythingmcp#1087 · 6 comentarios · 1 asignado ·
Los mantenedores suelen responder en 1 día
Todos los issues de HelpCode-ai/anythingmcp
Issues similares
-
community first-timers-only good first issue hacktoberfest help wanted low hanging fruit up-for-grabs
Dificultad 1/5 Menos de una hora Aptitud para principiantes 90/100
lingdojo/kana-dojo#32663 · 1 comentario · 5 reacciones ·
Los mantenedores suelen responder en 1 día
-
Admin: Title Separator field can't be cleared (input falls back to "|")Posiblemente ocupada @emdashbot la tomó hoy. Abiertobot:bug bot:in-review
Dificultad 2/5 1-3 horas Aptitud para principiantes 80/100
emdash-cms/emdash#4236 · 3 comentarios ·
Los mantenedores suelen responder en 1 día
-
PHP workflow streaming requests buffer the full SSE responsePosiblemente ocupada @Winoren la tomó hoy. Abiertoreview: medium
Dificultad 2/5 1-3 horas Aptitud para principiantes 84/100
langgenius/dify#44270 · 1 comentario · 1 reacción ·
Los mantenedores suelen responder en 1 día
-
area:holodeck review-finding
Dificultad 2/5 1-3 horas Aptitud para principiantes 62/100
hyperdrive-technology/holodeck#142 ·
Los mantenedores suelen responder en 1 día
-
session-worker-compile.yml uses a floating oven-sh/setup-bun@v2 tag instead of the pinned SHAAbierto
Dificultad 1/5 Menos de una hora Aptitud para principiantes 90/100
code-yeongyu/senpi#3573 ·
Los mantenedores suelen responder en 1 día