From 3ae18aa24bafab5e988cdb5284671ab7d67f3c57 Mon Sep 17 00:00:00 2001
From: Maicon Berlofa <maicon.berloffa@gmail.com>
Date: Fri, 3 Jul 2026 15:36:44 -0300
Subject: [PATCH 1/2] docs(github-mcp-server): sync template standards updates

---
 src/data/playground-configs.ts              | 16 +++++++++++++++-
 src/pages/docs/charts/github-mcp-server.mdx |  5 +++--
 src/pages/playground.astro                  |  1 +
 3 files changed, 19 insertions(+), 3 deletions(-)

diff --git a/src/data/playground-configs.ts b/src/data/playground-configs.ts
index ddd39839..7f95baa3 100644
--- a/src/data/playground-configs.ts
+++ b/src/data/playground-configs.ts
@@ -1204,7 +1204,7 @@ export const chartConfigs: Record<string, ChartConfig> = {
           key: 'ingress.ingressClassName',
           type: 'select',
           default: 'traefik',
-          options: ['traefik', 'nginx'],
+          options: ['', 'traefik', 'nginx'],
           description: 'Ingress controller class',
         },
       ],
@@ -1229,6 +1229,20 @@ export const chartConfigs: Record<string, ChartConfig> = {
         },
       ],
     },
+    {
+      name: 'NetworkPolicy',
+      collapsible: true,
+      gateField: 'networkPolicy.enabled',
+      fields: [
+        {
+          label: 'DNS Egress',
+          key: 'networkPolicy.extraEgress[0].ports[0].port',
+          type: 'number',
+          default: '53',
+          description: 'Example extra egress DNS port',
+        },
+      ],
+    },
   ],
   'envoy-gateway': [
     {
diff --git a/src/pages/docs/charts/github-mcp-server.mdx b/src/pages/docs/charts/github-mcp-server.mdx
index 8c36d573..8d975bc1 100644
--- a/src/pages/docs/charts/github-mcp-server.mdx
+++ b/src/pages/docs/charts/github-mcp-server.mdx
@@ -53,10 +53,11 @@ Exposure and operations:
 
 - `serviceAccount.create`, `serviceAccount.name`, `serviceAccount.annotations`, `serviceAccount.automountServiceAccountToken`.
 - `service.type`, `service.port`, `service.annotations`, `service.ipFamilyPolicy`, `service.ipFamilies`.
-- `ingress.enabled`, `ingress.ingressClassName`, `ingress.annotations`, `ingress.hosts`, `ingress.tls`.
+- `ingress.enabled`, `ingress.ingressClassName`, `ingress.annotations`, `ingress.hosts`, `ingress.tls`. Set
+  `ingress.ingressClassName: ""` to omit `spec.ingressClassName`.
 - `gateway.enabled`, `gateway.parentRefs`, `gateway.hostnames`, `gateway.path`, `gateway.pathType`.
 - `pdb.enabled`, `pdb.minAvailable`.
-- `networkPolicy.enabled`, `networkPolicy.ingressFrom`.
+- `networkPolicy.enabled`, `networkPolicy.ingressFrom`, `networkPolicy.extraEgress`.
 - `probes.startup`, `probes.liveness`, `probes.readiness`: enable flags and timing values.
 - `resources`, `podSecurityContext`, `securityContext`, `nodeSelector`, `tolerations`, `affinity`.
 - `topologySpreadConstraints`, `priorityClassName`, `terminationGracePeriodSeconds`.
diff --git a/src/pages/playground.astro b/src/pages/playground.astro
index 07b8fe5b..e4a02549 100644
--- a/src/pages/playground.astro
+++ b/src/pages/playground.astro
@@ -24,6 +24,7 @@ const siteSyncPlaygroundConfigs: Record<string, string> = {
   'adguard-home': 'src/data/playground-configs.ts',
   booklore: 'src/data/playground-configs.ts',
   changedetection: 'src/data/playground-configs.ts',
+  'github-mcp-server': 'src/data/playground-configs.ts',
   medikeep: 'src/data/playground-configs.ts',
   memcached: 'src/data/playground-configs.ts',
   notediscovery: 'src/data/playground-configs.ts',

From 7a23e6d01f2962c12555a653e560f3b210f6975f Mon Sep 17 00:00:00 2001
From: Maicon Berlofa <maicon.berloffa@gmail.com>
Date: Fri, 3 Jul 2026 15:53:45 -0300
Subject: [PATCH 2/2] docs(github-mcp-server): clarify network policy behavior

---
 src/pages/docs/charts/github-mcp-server.mdx | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/pages/docs/charts/github-mcp-server.mdx b/src/pages/docs/charts/github-mcp-server.mdx
index 8d975bc1..23f0dace 100644
--- a/src/pages/docs/charts/github-mcp-server.mdx
+++ b/src/pages/docs/charts/github-mcp-server.mdx
@@ -47,7 +47,8 @@ Storage and scaling:
 - `persistence.enabled`: optional data volume. The server is stateless by default.
 - `persistence.size`, `persistence.storageClass`, `persistence.accessModes`: generated PVC settings.
 - `persistence.existingClaim`, `persistence.mountPath`: existing claim and mount path.
-- `replicaCount > 1` with persistence requires `ReadWriteMany` or `persistence.enabled=false`.
+- `replicaCount > 1` with chart-created persistence requires `ReadWriteMany` or `persistence.enabled=false`.
+  When `persistence.existingClaim` is set, the external claim controls access modes.
 
 Exposure and operations:
 
@@ -58,6 +59,8 @@ Exposure and operations:
 - `gateway.enabled`, `gateway.parentRefs`, `gateway.hostnames`, `gateway.path`, `gateway.pathType`.
 - `pdb.enabled`, `pdb.minAvailable`.
 - `networkPolicy.enabled`, `networkPolicy.ingressFrom`, `networkPolicy.extraEgress`.
+  Enabling only `networkPolicy.enabled` creates an ingress-only policy.
+  Setting `networkPolicy.extraEgress` adds egress isolation with built-in DNS and HTTPS allowances before appending the supplied rules.
 - `probes.startup`, `probes.liveness`, `probes.readiness`: enable flags and timing values.
 - `resources`, `podSecurityContext`, `securityContext`, `nodeSelector`, `tolerations`, `affinity`.
 - `topologySpreadConstraints`, `priorityClassName`, `terminationGracePeriodSeconds`.