{{- define "kubectl-mcp-server.name" -}}
{{- .Values.fullnameOverride | default .Release.Name }}
{{- end }}

{{- define "kubectl-mcp-server.labels" -}}
app: {{ include "kubectl-mcp-server.name" . }}
{{- with .Values.labels }}
{{ toYaml . }}
{{- end }}
{{- end }}

{{- define "kubectl-mcp-server.serviceAccountName" -}}
{{- if .Values.serviceAccount.name }}{{ .Values.serviceAccount.name }}{{ else }}{{ include "kubectl-mcp-server.name" . }}{{ end }}
{{- end }}

{{- /* Secret synced from Vault by the ExternalSecret; holds all bearer tokens. */ -}}
{{- define "kubectl-mcp-server.credsSecretName" -}}
{{- .Values.externalSecrets.secretName | default (printf "%s-creds" (include "kubectl-mcp-server.name" .)) }}
{{- end }}