MCPKernel {{ .Chart.AppVersion }} installed.

Get the application URL:
{{- if .Values.ingress.enabled }}
{{- range $host := .Values.ingress.hosts }}
  http://{{ $host.host }}
{{- end }}
{{- else if eq .Values.service.type "NodePort" }}
  export NODE_PORT=$(kubectl get --namespace {{ .Release.Namespace }} -o jsonpath="{.spec.ports[0].nodePort}" services {{ include "mcpkernel.fullname" . }})
  export NODE_IP=$(kubectl get nodes --namespace {{ .Release.Namespace }} -o jsonpath="{.items[0].status.addresses[0].address}")
  echo http://$NODE_IP:$NODE_PORT
{{- else if contains "LoadBalancer" .Values.service.type }}
  kubectl get --namespace {{ .Release.Namespace }} svc -w {{ include "mcpkernel.fullname" . }}
{{- else }}
  kubectl --namespace {{ .Release.Namespace }} port-forward svc/{{ include "mcpkernel.fullname" . }} 8080:{{ .Values.service.port }}
  Then point your MCP client at http://localhost:8080/mcp
{{- end }}

Smoke test:
  curl -fsS http://<host>:{{ .Values.service.port }}/health

Health-secret (HMAC-gated):
  curl -H "Authorization: Bearer $TOKEN" http://<host>:{{ .Values.service.port }}/health/secret
