From 33910fe8e9bc22643725b4208ae375e16b77d7e4 Mon Sep 17 00:00:00 2001 From: Admin Bot Date: Fri, 4 Sep 2026 21:52:36 -0700 Subject: [PATCH] fix: update gateway auth to use api-gw provider with llm:inference permission --- k8s/configmap.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml index b5848b3..0714348 100644 --- a/k8s/configmap.yaml +++ b/k8s/configmap.yaml @@ -13,10 +13,10 @@ data: # JWT Authentication for /v1/* endpoints (LLM API) auth: enabled: true - issuer: "https://authentik.riotpiao.com/application/o/portfolio-agent/" - audience: "portfolio-agent" - jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/portfolio-agent/jwks/" - requiredCapability: "" + issuer: "https://authentik.riotpiao.com/application/o/api-gw/" + audience: "api-gw" + jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/api-gw/jwks/" + requiredCapability: "llm:inference" # Routes: standard HTTP proxy routes (not LLM-specific) # These are for non-LLM services (agent-pod/console, etc.)