feat(api): add Kong key-auth for the model API — static API key (ksops-managed model-invoke-apikey) via KongConsumer model-invoker + key-auth plugin on all 5 model routes, OpenAI-SDK compatible (Authorization: Bearer <key>)

2026-08-13 20:28:32 -07:00
parent c52b4acc74
commit a118195b6f
6 changed files with 155 additions and 5 deletions
@@ -7,6 +7,7 @@ kind: Kustomization
 resources:
  - ingress.yaml
  - llm-routes.yaml
+  - model-auth.yaml
 # No top-level `namespace:` transformer on purpose: ingress.yaml sets its own
 # namespace, and the transformer rewrites metadata.namespace on every resource
 # it builds, which is a trap for anything cross-namespace added later.