config/crd/bases/ contains generated CRDs for MCPServer, MCPAccessGrant, and MCPAgentSession. Regenerate them with make -f Makefile.operator generate manifests after API type changes.
config/default/ is the Kustomize entrypoint for operator deployment assets.
config/manager/ holds the controller-manager Deployment and PodDisruptionBudget manifests.
config/rbac/ contains service account, role, and binding definitions used by the operator.
config/ingress/ provides Traefik ingress controller manifests and overlays, including the HTTP dev overlay used by local and e2e setup.
config/registry/ contains the bundled Docker distribution registry manifests plus TLS/hostpath overlays.
config/cert-manager/ contains sample issuer/certificate resources for registry and ingress TLS.
hack/dev/dev-setup.sh automates local dev environment prep (kind cluster, registry, ingress installation, CRD apply) with informative logging.
test/e2e/kind.sh creates a kind cluster, builds/pushes test images through the registry flow, and runs e2e validation; test/e2e/run-in-docker.sh runs e2e flows inside Docker.