Admin Bot c14b9650cd feat(gateway): allow the two machine callers, in the source of truth ...

The live Secret carried a hand-written entry for poimen-llm, which a reconcile would
have dropped: the config Secret is managed from this file.

Add poimen-llm and paperless-llm to zitadelClientIds, and switch on
allowListedMachineIdentities so an allow-listed caller is admitted without a roles
claim. ZITADEL does not put roles in a machine-user token on this instance, so the
allow-list entry is what authorises the caller; the caller still proves possession of a
registered private key.

2026-10-28 00:13:10 -07:00

..

tekton

fix(ci): relax namespace validation test + add webhook endpoint test (#30)

2026-09-16 03:08:20 +00:00

deployment.yaml

fix(proxy): admission-control review fixes missing from the #65 merge (#66)

2026-09-30 12:19:24 +00:00

gateway-config-secret.yaml

feat(gateway): allow the two machine callers, in the source of truth

2026-10-28 00:13:10 -07:00

grafana-dashboard-llm-metrics.yaml

Add TTFT & ITL Metrics for LLM Inference (#28)

2026-09-15 08:53:58 +00:00

integration-test-job.yaml

feat: add comprehensive integration tests and CI pipeline

2026-09-13 11:42:55 +09:00

kustomization.yaml

feat(webhook): Forgejo package webhook → ArgoCD image promotion (#55)

2026-09-28 02:45:41 +00:00

kustomization.yaml.bak

feat(network): SSE optimization for local LLM streaming (#31 #32 #33) (#26)

2026-09-13 23:37:33 +00:00

network-policy.yaml

fix(gateway): allow egress to ingress-nginx for JWKS

2026-10-27 01:37:08 -07:00

rbac.yaml

feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4)

2026-09-28 19:53:37 +08:00

service.yaml

chore: initial commit of Go API gateway

2026-08-19 20:54:34 -07:00

serviceaccount.yaml

fix: add serviceaccount manifest (was in deleted rbac.yaml)

2026-08-26 19:49:11 -07:00

smtp-secrets.example.yaml

feat(network): SSE optimization for local LLM streaming (#31 #32 #33) (#26)

2026-09-13 23:37:33 +00:00