riotpiao-poimen/homelab-frontend
2
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

feat(gateway): allow the two machine callers in git #72

Merged
rock merged 1 commits from feat/gateway-clef-flash into main 2026-10-28 07:13:31 +00:00
Conversation 0 Commits 1 Files Changed 1
+1 -1
rock commented 2026-10-28 07:13:12 +00:00
Owner
Copy Link
Copy Source

The live config Secret carried a hand-written poimen-llm entry that a reconcile would drop. Add poimen-llm and paperless-llm plus allowListedMachineIdentities to the source of truth.

The live config Secret carried a hand-written poimen-llm entry that a reconcile would drop. Add poimen-llm and paperless-llm plus allowListedMachineIdentities to the source of truth.
rock added 1 commit 2026-10-28 07:13:13 +00:00
feat(gateway): allow the two machine callers, in the source of truth
CI / CI (pull_request) Successful in 2m45s
Details
CI / CI (push) Successful in 3m32s
Details
c14b9650cd 
The live Secret carried a hand-written entry for poimen-llm, which a reconcile would
have dropped: the config Secret is managed from this file.

Add poimen-llm and paperless-llm to zitadelClientIds, and switch on
allowListedMachineIdentities so an allow-listed caller is admitted without a roles
claim. ZITADEL does not put roles in a machine-user token on this instance, so the
allow-list entry is what authorises the caller; the caller still proves possession of a
registered private key.
rock merged commit c14b9650cd into main 2026-10-28 07:13:31 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
area/auth
Authentication & authorization
 area/authentik
Authentik OIDC provider config
 area/downstream
Downstream service changes
 area/gateway
API gateway code
 priority/high
Must have
 priority/low
Nice to have
 priority/medium
Should have
 status/blocked
Blocked by dependency
 status/done
Completed
 status/in-progress
Currently being worked on
 status/review
Ready for review
 status/todo
Not started
 type/docs
Documentation
 type/feature
New feature
 type/infra
Infrastructure change
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
poimen rock (Rock)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: riotpiao-poimen/homelab-frontend#72