Skip to content

feat: manage MakeItWork MCP hostnames - #29

Merged
xnoto merged 1 commit into
mainfrom
feat/add-makeitwork-mcp-hostnames
Aug 27, 2026
Merged

feat: manage MakeItWork MCP hostnames#29
xnoto merged 1 commit into
mainfrom
feat/add-makeitwork-mcp-hostnames

Conversation

@xnoto

@xnoto xnoto commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Replace legacy MCP hostname resources with the live mcp-makeitwork-* hostnames.
  • Add the GitHub xnoto endpoint to Terraform-managed DNS and Access applications.

Validation

  • make test

@xnoto
xnoto requested a review from a team as a code owner August 27, 2026 01:48
@github-actions

github-actions Bot commented Aug 27, 2026

Copy link
Copy Markdown
Contributor

OpenTofu Plan

      + name             = "mcp-makeitwork-kubernetes"
      + proxiable        = (known after apply)
      + proxied          = true
      + settings         = (known after apply)
      + tags             = (known after apply)
      + tags_modified_on = (known after apply)
      + ttl              = 1
      + type             = "CNAME"
      + zone_id          = (sensitive value)
    }

  # cloudflare_dns_record.cluster_apps["mcp-makeitwork-parallel-search"] will be created
  + resource "cloudflare_dns_record" "cluster_apps" {
      + content          = "7a3b548e-734f-427c-bd37-b360199f5433.cfargotunnel.com"
      + created_on       = (known after apply)
      + id               = (known after apply)
      + meta             = (known after apply)
      + modified_on      = (known after apply)
      + name             = "mcp-makeitwork-parallel-search"
      + proxiable        = (known after apply)
      + proxied          = true
      + settings         = (known after apply)
      + tags             = (known after apply)
      + tags_modified_on = (known after apply)
      + ttl              = 1
      + type             = "CNAME"
      + zone_id          = (sensitive value)
    }

  # cloudflare_dns_record.cluster_apps["mcp-makeitwork-terraform-docs"] will be created
  + resource "cloudflare_dns_record" "cluster_apps" {
      + content          = "7a3b548e-734f-427c-bd37-b360199f5433.cfargotunnel.com"
      + created_on       = (known after apply)
      + id               = (known after apply)
      + meta             = (known after apply)
      + modified_on      = (known after apply)
      + name             = "mcp-makeitwork-terraform-docs"
      + proxiable        = (known after apply)
      + proxied          = true
      + settings         = (known after apply)
      + tags             = (known after apply)
      + tags_modified_on = (known after apply)
      + ttl              = 1
      + type             = "CNAME"
      + zone_id          = (sensitive value)
    }

  # cloudflare_dns_record.cluster_apps["mcp-parallel-search"] will be destroyed
  # (because key ["mcp-parallel-search"] is not in for_each map)
  - resource "cloudflare_dns_record" "cluster_apps" {
      - content     = "7a3b548e-734f-427c-bd37-b360199f5433.cfargotunnel.com" -> null
      - created_on  = "2026-08-26T17:56:30Z" -> null
      - id          = "b4a1c7975893d0308ae433316a263df7" -> null
      - meta        = jsonencode({})
      - modified_on = "2026-08-26T17:56:30Z" -> null
      - name        = "mcp-parallel-search.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = true -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

  # cloudflare_dns_record.cluster_apps["mcp-terraform-docs"] will be destroyed
  # (because key ["mcp-terraform-docs"] is not in for_each map)
  - resource "cloudflare_dns_record" "cluster_apps" {
      - content     = "7a3b548e-734f-427c-bd37-b360199f5433.cfargotunnel.com" -> null
      - created_on  = "2026-08-26T17:56:30Z" -> null
      - id          = "63931486b63eecd6ffd057e702009f24" -> null
      - meta        = jsonencode({})
      - modified_on = "2026-08-26T17:56:30Z" -> null
      - name        = "mcp-terraform-docs.makeitwork.cloud" -> null
      - proxiable   = true -> null
      - proxied     = true -> null
      - settings    = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags        = [] -> null
      - ttl         = 1 -> null
      - type        = "CNAME" -> null
      - zone_id     = (sensitive value) -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["apify"] will be destroyed
  # (because key ["apify"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "c93635fa47a5810b4e127dc964080295faec0eac896b1bfebf152ba2dbc6dc10" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-apify.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-apify.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "51ddeefd-fa51-4724-a582-f0e232ede309" -> null
      - name                       = "MCP apify" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-apify.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["argocd-makeitwork"] will be destroyed
  # (because key ["argocd-makeitwork"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "23b3889a14a14f26744b234f05614fb2ca893419858d99185ee8b437e6363216" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-argocd-makeitwork.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-argocd-makeitwork.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "295b92e4-5612-4fcd-9151-2825cd9abbcc" -> null
      - name                       = "MCP argocd-makeitwork" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-argocd-makeitwork.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["aws-docs"] will be destroyed
  # (because key ["aws-docs"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "4bea2e7f1cc4c3bdc6c2e460c128b7d695b388fd162098d1a9eb8f4f8ea8a156" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-aws-docs.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-aws-docs.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "1b1f6426-8ad3-45f9-a559-ee21ae649f05" -> null
      - name                       = "MCP aws-docs" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-aws-docs.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["context7"] will be destroyed
  # (because key ["context7"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "2bb19ed1463c4bfaffa613b903cba4c3dcafa8adbf56d501f1997d269369b0d7" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-context7.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-context7.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "a467ed9e-0419-4d0d-8167-7ea1a2d3cf5a" -> null
      - name                       = "MCP context7" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-context7.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["github"] will be destroyed
  # (because key ["github"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "47b184d4995cc0d75e3d8fafc06502870a27ee29c91c871fc08bd2278070e480" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-github.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-github.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "101a948a-fe1b-4ffa-9e7a-dffbfbce2360" -> null
      - name                       = "MCP github" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-github.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["grafana-makeitwork"] will be destroyed
  # (because key ["grafana-makeitwork"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "bea6d0bb3f513a9af865f83bd4c1b51e71cdd6a5cc38df7ccb8f35eaeb1cbf69" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-grafana-makeitwork.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-grafana-makeitwork.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "e321e7de-3d6f-4f94-962c-ef2505ef856f" -> null
      - name                       = "MCP grafana-makeitwork" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-grafana-makeitwork.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["kubernetes"] will be destroyed
  # (because key ["kubernetes"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "54deeeea223f1c04e1adb4f4c3ca1339ca352ed4e94491a2bbdf88efc744a80d" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-kubernetes.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-kubernetes.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "ac1b2e40-b929-4c4a-b6b7-bef709b8affc" -> null
      - name                       = "MCP kubernetes" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-kubernetes.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-apify"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-apify.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-apify"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-argocd"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-argocd.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-argocd"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-aws-docs"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-aws-docs.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-aws-docs"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-context7"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-context7.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-context7"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-github"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-github.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-github"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-github-xnoto"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-github-xnoto.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-github-xnoto"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-grafana"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-grafana.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-grafana"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-kubernetes"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-kubernetes.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-kubernetes"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-parallel-search"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-parallel-search.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-parallel-search"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["makeitwork-terraform-docs"] will be created
  + resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      + account_id                 = (sensitive value)
      + allowed_idps               = [
          + "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ]
      + app_launcher_visible       = true
      + aud                        = (known after apply)
      + destinations               = (known after apply)
      + domain                     = "mcp-makeitwork-terraform-docs.makeitwork.cloud"
      + http_only_cookie_attribute = true
      + id                         = (known after apply)
      + name                       = "MCP makeitwork-terraform-docs"
      + policies                   = [
          + {
              + decision   = "non_identity"
              + include    = [
                  + {
                      + service_token = {
                          + token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495"
                        }
                    },
                ]
              + name       = "mcp-gateway-clients"
              + precedence = 1
            },
          + {
              + decision   = "allow"
              + include    = [
                  + {
                      + group = {
                          + id = "e0d9e873-31d7-4536-9234-3dad8a99d84d"
                        }
                    },
                ]
              + name       = "makeitworkcloud-admins"
              + precedence = 2
            },
        ]
      + self_hosted_domains        = (known after apply)
      + session_duration           = "24h"
      + type                       = "self_hosted"
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["parallel-search"] will be destroyed
  # (because key ["parallel-search"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "a8ea2dbe5b91842e89252b1af9170f887ed5274302edfaff8e71010a8917badc" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-parallel-search.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-parallel-search.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "0f20cc73-5411-4f9f-b7da-b80831fe1dda" -> null
      - name                       = "MCP parallel-search" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-parallel-search.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_application.mcp_gateway_backend["terraform-docs"] will be destroyed
  # (because key ["terraform-docs"] is not in for_each map)
  - resource "cloudflare_zero_trust_access_application" "mcp_gateway_backend" {
      - account_id                 = (sensitive value) -> null
      - allowed_idps               = [
          - "e584ea47-1251-4939-95f4-4daf4a58cd31",
        ] -> null
      - app_launcher_visible       = true -> null
      - aud                        = "0ebe01d1b3e4e16c0863c365f5ac5f9bc8189f5cf1794228ea59696d3a4f7a4e" -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "mcp-terraform-docs.makeitwork.cloud" -> null
            },
        ] -> null
      - domain                     = "mcp-terraform-docs.makeitwork.cloud" -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "8791594d-f012-43d6-ae97-da5c8f4ea7d5" -> null
      - name                       = "MCP terraform-docs" -> null
      - policies                   = [
          - {
              - decision   = "non_identity" -> null
              - include    = [
                  - {
                      - service_token = {
                          - token_id = "96ab3739-d013-45f8-9ee5-f7e2ae003495" -> null
                        } -> null
                    },
                ] -> null
              - name       = "mcp-gateway-clients" -> null
              - precedence = 1 -> null
            },
          - {
              - decision   = "allow" -> null
              - include    = [
                  - {
                      - group = {
                          - id = "e0d9e873-31d7-4536-9234-3dad8a99d84d" -> null
                        } -> null
                    },
                ] -> null
              - name       = "makeitworkcloud-admins" -> null
              - precedence = 2 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "mcp-terraform-docs.makeitwork.cloud",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

Plan: 20 to add, 1 to change, 18 to destroy.

@xnoto
xnoto merged commit 1866dc7 into main Aug 27, 2026
4 checks passed
@xnoto
xnoto deleted the feat/add-makeitwork-mcp-hostnames branch August 27, 2026 01:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@xnoto