Allowing to have 2 pomerium ICs in a same cluster

[wasaga]

config

apiVersion: ingress.pomerium.io/v1
kind: Pomerium
metadata:
  name: global-mcp
spec:
  secrets: pomerium-mcp/bootstrap
  # persistent data broker is required for MCP
  storage:
    file:
      path: /data/pomerium.db
  runtimeFlags:
    mcp: true
  # specifies the allowed domains for upstream AS/PRM metadata URLs. Supports wildcard patterns like "*.example.com". This restricts which domains Pomerium will contact during upstream OAuth discovery (resource_metadata from WWW-Authenticate, authorization_servers from PRM). 
  mcpAllowedAsMetadataDomains: []
  # specifies the allowed domains for MCP client ID metadata URLs. This is required when MCP is enabled.
  mcpAllowedClientIdDomains: ["vscode.dev", "claude.ai"]