feat(gateway): allow the two machine callers, in the source of truth

Browse Source

The live Secret carried a hand-written entry for poimen-llm, which a reconcile would
have dropped: the config Secret is managed from this file.

Add poimen-llm and paperless-llm to zitadelClientIds, and switch on
allowListedMachineIdentities so an allow-listed caller is admitted without a roles
claim. ZITADEL does not put roles in a machine-user token on this instance, so the
allow-list entry is what authorises the caller; the caller still proves possession of a
registered private key.

This commit was merged in pull request #72.

...

This commit is contained in:

Admin Bot

2026-10-28 00:13:10 -07:00

parent f8788335b8

commit c14b9650cd

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

k8s/gateway-config-secret.yaml

+1 -1

File diff suppressed because one or more lines are too long