homelab-frontend

riotpiao-poimen/homelab-frontend

Fork 0

...

Author	SHA1	Message	Date
Admin Bot	c14b9650cd	feat(gateway): allow the two machine callers, in the source of truth CI / CI (pull_request) Successful in 2m45s Details CI / CI (push) Successful in 3m32s Details The live Secret carried a hand-written entry for poimen-llm, which a reconcile would have dropped: the config Secret is managed from this file. Add poimen-llm and paperless-llm to zitadelClientIds, and switch on allowListedMachineIdentities so an allow-listed caller is admitted without a roles claim. ZITADEL does not put roles in a machine-user token on this instance, so the allow-list entry is what authorises the caller; the caller still proves possession of a registered private key.	2026-10-28 00:13:10 -07:00

Author

SHA1

Message

Date

Admin Bot

c14b9650cd

feat(gateway): allow the two machine callers, in the source of truth

CI / CI (pull_request) Successful in 2m45s

Details

CI / CI (push) Successful in 3m32s

Details

The live Secret carried a hand-written entry for poimen-llm, which a reconcile would
have dropped: the config Secret is managed from this file.

Add poimen-llm and paperless-llm to zitadelClientIds, and switch on
allowListedMachineIdentities so an allow-listed caller is admitted without a roles
claim. ZITADEL does not put roles in a machine-user token on this instance, so the
allow-list entry is what authorises the caller; the caller still proves possession of a
registered private key.

2026-10-28 00:13:10 -07:00

1 changed files with 1 additions and 1 deletions

k8s/gateway-config-secret.yaml

+1 -1

View File

File diff suppressed because one or more lines are too long

Compare commits