From 57d64039d545c8ead2d6d6fd422caedbcb8536c8 Mon Sep 17 00:00:00 2001
From: Admin Bot <admin@riotpiao.com>
Date: Thu, 27 Aug 2026 11:11:37 -0700
Subject: [PATCH] config: set memory to public (no JWT required), only iam
 protected

- sqs, s3, memory: public APIs (auth not required)
- memory: uses static API key internally, no JWT validation needed
- iam: protected by JWT validation + iam:admin capability check
- revoked tokens detected via JWKS key rotation (15min cache TTL)
---
 k8s/configmap.yaml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/k8s/configmap.yaml b/k8s/configmap.yaml
index 425a15d..2925a32 100644
--- a/k8s/configmap.yaml
+++ b/k8s/configmap.yaml
@@ -71,8 +71,7 @@ data:
         url: http://poimen-memory.poimen.svc.cluster.local:8080
         timeoutSeconds: 30
       auth:
-        required: true
-        capability: "memory:read"
+        required: false
       resources:
       - name: query
         methods: