fix: use in-cluster JWKS URL for auth

2026-09-03 20:38:28 -07:00
parent 2370a5ae7c
commit b86c69cee0
1 changed files with 2 additions and 1 deletions
@@ -14,9 +14,10 @@ data:
    # All Authentik providers share same signing key, so any JWKS URL works.
    # Issuer varies per provider (portfolio-agent, memory-agent, local-llm, etc.)
    # Gateway validates: signature + roles claim contains requiredCapability
+    # Use in-cluster URL to avoid external DNS/network issues
    auth:
      enabled: true
-      jwksUrl: "https://authentik.riotpiao.com/application/o/local-llm/jwks/"
+      jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/local-llm/jwks/"
      requiredCapability: "llm:inference"
    
    # Routes: standard HTTP proxy routes (not LLM-specific)