From 9878150f47668b83748235c4490d455edf0323d2 Mon Sep 17 00:00:00 2001
From: Reese <reesevader@hotmail.co.uk>
Date: Thu, 27 Nov 2025 11:37:17 +0000
Subject: [PATCH] Deploys upload service and uses ClusterIP

Adds the upload service to the kustomization file, enabling its deployment.

Configures all services to use ClusterIP instead of NodePort,
restricting external access by default. NodePort is still configurable.
---
 deploy/kubernetes/kustomization.yaml  | 1 +
 deploy/kubernetes/llamacpp.yaml       | 4 ++--
 deploy/kubernetes/mcp-http.yaml       | 8 ++------
 deploy/kubernetes/mcp-indexer.yaml    | 4 +---
 deploy/kubernetes/mcp-memory.yaml     | 4 +---
 deploy/kubernetes/upload-service.yaml | 2 +-
 6 files changed, 8 insertions(+), 15 deletions(-)

diff --git a/deploy/kubernetes/kustomization.yaml b/deploy/kubernetes/kustomization.yaml
index 784d5e31..d4d55cbe 100644
--- a/deploy/kubernetes/kustomization.yaml
+++ b/deploy/kubernetes/kustomization.yaml
@@ -27,6 +27,7 @@ resources:
 
   # Optional services
   - llamacpp.yaml
+  - upload-service.yaml
   - ingress.yaml
 
 # Common labels
diff --git a/deploy/kubernetes/llamacpp.yaml b/deploy/kubernetes/llamacpp.yaml
index f8beb552..331bdabe 100644
--- a/deploy/kubernetes/llamacpp.yaml
+++ b/deploy/kubernetes/llamacpp.yaml
@@ -146,12 +146,12 @@ metadata:
     app: context-engine
     component: llamacpp
 spec:
-  type: NodePort  # Change to LoadBalancer for external access
+  type: ClusterIP  # Change to LoadBalancer for external access
   ports:
   - name: http
     port: 8080
     targetPort: http
-    nodePort: 30808  # Optional: specify node port
+    # nodePort: 30808  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine
diff --git a/deploy/kubernetes/mcp-http.yaml b/deploy/kubernetes/mcp-http.yaml
index 9829b085..e48c29df 100644
--- a/deploy/kubernetes/mcp-http.yaml
+++ b/deploy/kubernetes/mcp-http.yaml
@@ -118,17 +118,15 @@ metadata:
     app: context-engine
     component: mcp-memory-http
 spec:
-  type: NodePort  # Change to LoadBalancer for external access
+  type: ClusterIP  # Change to LoadBalancer for external access
   ports:
   - name: http
     port: 8002
     targetPort: http
-    nodePort: 30804  # Optional: specify node port
     protocol: TCP
   - name: health
     port: 18002
     targetPort: health
-    nodePort: 30805  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine
@@ -310,17 +308,15 @@ metadata:
     app: context-engine
     component: mcp-indexer-http
 spec:
-  type: NodePort  # Change to LoadBalancer for external access
+  type: ClusterIP  # Change to LoadBalancer for external access
   ports:
   - name: http
     port: 8003
     targetPort: http
-    nodePort: 30806  # Optional: specify node port
     protocol: TCP
   - name: health
     port: 18003
     targetPort: health
-    nodePort: 30807  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine
diff --git a/deploy/kubernetes/mcp-indexer.yaml b/deploy/kubernetes/mcp-indexer.yaml
index 389316f3..bdc1103e 100644
--- a/deploy/kubernetes/mcp-indexer.yaml
+++ b/deploy/kubernetes/mcp-indexer.yaml
@@ -111,17 +111,15 @@ metadata:
     app: context-engine
     component: mcp-indexer
 spec:
-  type: NodePort  # Change to LoadBalancer for external access
+  type: ClusterIP  # Change to LoadBalancer for external access
   ports:
   - name: sse
     port: 8001
     targetPort: sse
-    nodePort: 30802  # Optional: specify node port
     protocol: TCP
   - name: health
     port: 18001
     targetPort: health
-    nodePort: 30803  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine
diff --git a/deploy/kubernetes/mcp-memory.yaml b/deploy/kubernetes/mcp-memory.yaml
index 891ce15e..bac047e7 100644
--- a/deploy/kubernetes/mcp-memory.yaml
+++ b/deploy/kubernetes/mcp-memory.yaml
@@ -102,17 +102,15 @@ metadata:
     app: context-engine
     component: mcp-memory
 spec:
-  type: NodePort  # Change to LoadBalancer for external access
+  type: ClusterIP  # Change to LoadBalancer for external access
   ports:
   - name: sse
     port: 8000
     targetPort: sse
-    nodePort: 30800  # Optional: specify node port
     protocol: TCP
   - name: health
     port: 18000
     targetPort: health
-    nodePort: 30801  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine
diff --git a/deploy/kubernetes/upload-service.yaml b/deploy/kubernetes/upload-service.yaml
index 189a35b1..1379ab7c 100644
--- a/deploy/kubernetes/upload-service.yaml
+++ b/deploy/kubernetes/upload-service.yaml
@@ -122,7 +122,7 @@ spec:
   - name: http
     port: 8002
     targetPort: http
-    nodePort: 30804  # Optional: specify node port
+    nodePort: 30810  # Optional: specify node port
     protocol: TCP
   selector:
     app: context-engine