Containerization and OpenShift Integration for MCP Servers

Security Recommendation

MCP servers SHOULD run in containers, leveraging container orchestration platform security features (e.g., OpenShift SCCs) for a hardened-by-default posture.

Container Security Requirements

Run as Non-Root

The container MUST run as a non-root user. OpenShift's default Security Context Constraints (SCCs) enforce this automatically.

securityContext:
  runAsNonRoot: true
  runAsUser: 1000

Drop All Capabilities