diff --git a/src/data/playground-configs.ts b/src/data/playground-configs.ts
index c81fbdc..8bb670e 100644
--- a/src/data/playground-configs.ts
+++ b/src/data/playground-configs.ts
@@ -1354,7 +1354,7 @@ export const chartConfigs: Record<string, ChartConfig> = {
           key: 'ingress.ingressClassName',
           type: 'select',
           default: 'traefik',
-          options: ['traefik', 'nginx'],
+          options: ['', 'traefik', 'nginx'],
           description: 'Ingress controller class',
         },
       ],
@@ -1379,6 +1379,20 @@ export const chartConfigs: Record<string, ChartConfig> = {
         },
       ],
     },
+    {
+      name: 'NetworkPolicy',
+      collapsible: true,
+      gateField: 'networkPolicy.enabled',
+      fields: [
+        {
+          label: 'DNS Egress',
+          key: 'networkPolicy.extraEgress[0].ports[0].port',
+          type: 'number',
+          default: '53',
+          description: 'Example extra egress DNS port',
+        },
+      ],
+    },
   ],
   'envoy-gateway': [
     {
diff --git a/src/pages/docs/charts/github-mcp-server.mdx b/src/pages/docs/charts/github-mcp-server.mdx
index 8c36d57..23f0dac 100644
--- a/src/pages/docs/charts/github-mcp-server.mdx
+++ b/src/pages/docs/charts/github-mcp-server.mdx
@@ -47,16 +47,20 @@ Storage and scaling:
 - `persistence.enabled`: optional data volume. The server is stateless by default.
 - `persistence.size`, `persistence.storageClass`, `persistence.accessModes`: generated PVC settings.
 - `persistence.existingClaim`, `persistence.mountPath`: existing claim and mount path.
-- `replicaCount > 1` with persistence requires `ReadWriteMany` or `persistence.enabled=false`.
+- `replicaCount > 1` with chart-created persistence requires `ReadWriteMany` or `persistence.enabled=false`.
+  When `persistence.existingClaim` is set, the external claim controls access modes.
 
 Exposure and operations:
 
 - `serviceAccount.create`, `serviceAccount.name`, `serviceAccount.annotations`, `serviceAccount.automountServiceAccountToken`.
 - `service.type`, `service.port`, `service.annotations`, `service.ipFamilyPolicy`, `service.ipFamilies`.
-- `ingress.enabled`, `ingress.ingressClassName`, `ingress.annotations`, `ingress.hosts`, `ingress.tls`.
+- `ingress.enabled`, `ingress.ingressClassName`, `ingress.annotations`, `ingress.hosts`, `ingress.tls`. Set
+  `ingress.ingressClassName: ""` to omit `spec.ingressClassName`.
 - `gateway.enabled`, `gateway.parentRefs`, `gateway.hostnames`, `gateway.path`, `gateway.pathType`.
 - `pdb.enabled`, `pdb.minAvailable`.
-- `networkPolicy.enabled`, `networkPolicy.ingressFrom`.
+- `networkPolicy.enabled`, `networkPolicy.ingressFrom`, `networkPolicy.extraEgress`.
+  Enabling only `networkPolicy.enabled` creates an ingress-only policy.
+  Setting `networkPolicy.extraEgress` adds egress isolation with built-in DNS and HTTPS allowances before appending the supplied rules.
 - `probes.startup`, `probes.liveness`, `probes.readiness`: enable flags and timing values.
 - `resources`, `podSecurityContext`, `securityContext`, `nodeSelector`, `tolerations`, `affinity`.
 - `topologySpreadConstraints`, `priorityClassName`, `terminationGracePeriodSeconds`.
diff --git a/src/pages/playground.astro b/src/pages/playground.astro
index 9940824..57856ec 100644
--- a/src/pages/playground.astro
+++ b/src/pages/playground.astro
@@ -47,6 +47,7 @@ const siteSyncPlaygroundConfigs: Record<string, string> = {
   'fastmcp-server': 'src/data/playground-configs.ts',
   flowise: 'src/data/playground-configs.ts',
   generic: 'src/data/playground-configs.ts',
+  'github-mcp-server': 'src/data/playground-configs.ts',
   medikeep: 'src/data/playground-configs.ts',
   memcached: 'src/data/playground-configs.ts',
   notediscovery: 'src/data/playground-configs.ts',