Facilitator Guide

./scripts/setup-platform.sh

# MCP Lifecycle Operator pod running
oc get pods -n redhat-ods-applications -l app.kubernetes.io/name=mcp-lifecycle-operator
# Expected: 1/1 Running

# MCPServer CRD exists
oc get crd mcpservers.mcp.x-k8s.io
# Expected: the CRD

# MCP Gateway is programmed
oc get gateway mcp-gateway -n mcp-system
# Expected: PROGRAMMED=True

# MCPGatewayExtension exists
oc get mcpgatewayextension mcp-gateway-extension -n mcp-system
# Expected: the resource

oc patch datasciencecluster default-dsc --type=merge \
  -p '{"spec":{"components":{"mcplifecycleoperator":{"managementState":"Managed"}}}}'

# Verify
oc get pods -n redhat-ods-applications -l app.kubernetes.io/name=mcp-lifecycle-operator
oc get crd mcpservers.mcp.x-k8s.io

oc patch odhdashboardconfig odh-dashboard-config -n redhat-ods-applications \
  --type=merge -p '{"spec":{"dashboardConfig":{"mcpCatalog":true}}}'

oc create ns mcp-system

cat <<EOF | oc apply -n mcp-system -f -
apiVersion: operators.coreos.com/v1alpha1
kind: Subscription
metadata:
  name: mcp-gateway
spec:
  source: redhat-operators
  sourceNamespace: openshift-marketplace
  name: mcp-gateway
  channel: preview
---
apiVersion: operators.coreos.com/v1
kind: OperatorGroup
metadata:
  name: mcp-gateway
spec:
  targetNamespaces:
  - mcp-system
EOF

# Wait for install (up to 5 min)
oc wait csv -n mcp-system -l operators.coreos.com/mcp-gateway.mcp-system="" \
  --for=jsonpath='{.status.phase}'=Succeeded --timeout=5m

oc patch deployment kuadrant-operator-controller-manager -n mcp-system \
  --type=json \
  -p='[{"op":"replace","path":"/spec/template/spec/containers/0/resources/limits/memory","value":"1Gi"},{"op":"replace","path":"/spec/template/spec/containers/0/resources/requests/memory","value":"512Mi"}]'
oc rollout status deployment/kuadrant-operator-controller-manager -n mcp-system --timeout=120s

cat <<EOF | oc apply -f -
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: mcp-gateway
  namespace: mcp-system
  labels:
    istio.io/rev: openshift-gateway
spec:
  gatewayClassName: data-science-gateway-class
  listeners:
    - name: http
      hostname: mcp-gateway.apps.ocp.example.com
      port: 80
      protocol: HTTP
      allowedRoutes:
        namespaces:
          from: All
EOF

# Verify
oc get gateway mcp-gateway -n mcp-system
# Expected: PROGRAMMED=True

cat <<EOF | oc apply -f -
apiVersion: mcp.kuadrant.io/v1alpha1
kind: MCPGatewayExtension
metadata:
  name: mcp-gateway-extension
  namespace: mcp-system
spec:
  targetRef:
    group: gateway.networking.k8s.io
    kind: Gateway
    name: mcp-gateway
    namespace: mcp-system
    sectionName: http
EOF

# For each participant namespace:
for i in $(seq 1 30); do
  NS="user${i}-devspaces"
  cat <<EOF | oc apply -f -
apiVersion: rbac.authorization.k8s.io/v1
kind: Role
metadata:
  name: mcp-workshop-resources
  namespace: ${NS}
rules:
  - apiGroups: ["mcp.x-k8s.io"]
    resources: ["mcpservers"]
    verbs: ["get","list","watch","create","update","patch","delete"]
  - apiGroups: ["gateway.networking.k8s.io"]
    resources: ["httproutes"]
    verbs: ["get","list","watch","create","update","patch","delete"]
  - apiGroups: ["mcp.kuadrant.io"]
    resources: ["mcpserverregistrations"]
    verbs: ["get","list","watch","create","update","patch","delete"]
---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: mcp-workshop-resources
  namespace: ${NS}
subjects:
  - kind: User
    name: user${i}
    apiGroup: rbac.authorization.k8s.io
  - kind: Group
    name: system:serviceaccounts:${NS}
    apiGroup: rbac.authorization.k8s.io
roleRef:
  kind: Role
  name: mcp-workshop-resources
  apiGroup: rbac.authorization.k8s.io
EOF
done

git clone https://github.com/rrbanda/mcp-dev-workshop.git
cd mcp-dev-workshop

# Number of participants
userCount: 30

# Cluster domain (from oc get ingresses.config cluster)
clusterDomain: apps.ocp.example.com

# AI serving namespace
aiNamespace: ai-serving

# MCP system namespace (where the MCP Gateway lives)
mcpNamespace: mcp-system

# Model for inference
model: meta-llama/Llama-3.3-70B-Instruct

helm upgrade --install mcp-workshop chart/ \
  -n mcp-system --create-namespace \
  -f my-values.yaml

# Check all workspaces are running
for i in $(seq 1 30); do
  oc get dw -n user${i}-devspaces
done

# Check the MCP Gateway
oc get gateway mcp-gateway -n mcp-system

./scripts/setup-playground.sh

# Check the dashboard shows Gen AI Studio
oc get odhdashboardconfig odh-dashboard-config -n redhat-ods-applications \
  -o jsonpath='{.spec.dashboardConfig.genAiStudio}'
# Expected: true

# Check the ConfigMap exists
oc get configmap gen-ai-aa-mcp-servers -n redhat-ods-applications
# Expected: the ConfigMap with Stock-Market-MCP-Gateway key

export GATEWAY_HOSTNAME=$(oc get gateway mcp-gateway -n mcp-system \
  -o jsonpath='{.spec.listeners[0].hostname}')

sed "s|GATEWAY_HOSTNAME|$GATEWAY_HOSTNAME|g" \
  deploy/04-playground-mcp-configmap.yaml | oc apply -f -