fix: update gateway auth to use api-gw provider with llm:inference permission

2026-09-04 21:52:36 -07:00
parent e7bd818459
commit 33910fe8e9
1 changed files with 4 additions and 4 deletions
@@ -13,10 +13,10 @@ data:
    # JWT Authentication for /v1/* endpoints (LLM API)
    auth:
      enabled: true
-      issuer: "https://authentik.riotpiao.com/application/o/portfolio-agent/"
-      audience: "portfolio-agent"
-      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/portfolio-agent/jwks/"
-      requiredCapability: ""
+      issuer: "https://authentik.riotpiao.com/application/o/api-gw/"
+      audience: "api-gw"
+      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/api-gw/jwks/"
+      requiredCapability: "llm:inference"
    
    # Routes: standard HTTP proxy routes (not LLM-specific)
    # These are for non-LLM services (agent-pod/console, etc.)