Add virtualmcpservers to default Helm RBAC values

docs/in-cluster-authentication.md

@@ -78,7 +78,7 @@ When NOT in-cluster (kubectl proxy):
 
 ## Required RBAC Permissions
 
-For the service account to access MCPServer CRDs, you need appropriate RBAC:
+For the service account to access MCPServer and VirtualMCPServer CRDs, you need appropriate RBAC:
 
 ```yaml
 apiVersion: v1
@@ -93,7 +93,7 @@ metadata:
   name: mcp-optimizer-reader
 rules:
 - apiGroups: ["toolhive.stacklok.dev"]
-  resources: ["mcpservers"]
+  resources: ["mcpservers", "virtualmcpservers"]
   verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1
@@ -151,7 +151,7 @@ metadata:
   name: mcp-optimizer-reader
 rules:
 - apiGroups: ["toolhive.stacklok.dev"]
-  resources: ["mcpservers"]
+  resources: ["mcpservers", "virtualmcpservers"]
   verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1

docs/kubernetes-integration.md

@@ -514,7 +514,7 @@ Configuration file: `~/Library/Application Support/Claude/claude_desktop_config.
 
 ## RBAC Configuration
 
-When running in-cluster, MCP Optimizer requires appropriate RBAC permissions to read MCPServer resources:
+When running in-cluster, MCP Optimizer requires appropriate RBAC permissions to read MCPServer and VirtualMCPServer resources:
 
 ```yaml
 apiVersion: v1
@@ -529,7 +529,7 @@ metadata:
   name: mcp-optimizer-reader
 rules:
 - apiGroups: ["toolhive.stacklok.dev"]
-  resources: ["mcpservers"]
+  resources: ["mcpservers", "virtualmcpservers"]
   verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1

examples/mcp-servers/mcpserver_mcp-optimizer.yaml

@@ -13,7 +13,7 @@ metadata:
 rules:
   # Allow reading MCPServer CRDs to discover MCP servers in the cluster
   - apiGroups: ["toolhive.stacklok.dev"]
-    resources: ["mcpservers"]
+    resources: ["mcpservers", "virtualmcpservers"]
     verbs: ["get", "list", "watch"]
 ---
 apiVersion: rbac.authorization.k8s.io/v1

helm/mcp-optimizer/values.yaml

@@ -112,7 +112,7 @@ rbac:
   rules:
     # Allow reading MCPServer CRDs
     - apiGroups: ["toolhive.stacklok.dev"]
-      resources: ["mcpservers"]
+      resources: ["mcpservers", "virtualmcpservers"]
       verbs: ["get", "list", "watch"]
 
 # Additional optional configurations

local-values.yaml

@@ -74,7 +74,7 @@ rbac:
   create: true
   rules:
     - apiGroups: ["toolhive.stacklok.dev"]
-      resources: ["mcpservers"]
+      resources: ["mcpservers", "virtualmcpservers"]
       verbs: ["get", "list", "watch"]
 
 database: