rock/homelab-frontend
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: use in-cluster JWKS URL for auth
CI / Vet, test, build (push) Successful in 3m41s
Details
CI / Build and push image (push) Canceled after 0s
Details

Browse Source
This commit is contained in:
Admin Bot
2026-09-03 20:38:28 -07:00
parent 2370a5ae7c
commit b86c69cee0
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/configmap.yaml
+2 -1
View File
@@ -14,9 +14,10 @@ data:
# All Authentik providers share same signing key, so any JWKS URL works. # All Authentik providers share same signing key, so any JWKS URL works.
# Issuer varies per provider (portfolio-agent, memory-agent, local-llm, etc.) # Issuer varies per provider (portfolio-agent, memory-agent, local-llm, etc.)
# Gateway validates: signature + roles claim contains requiredCapability # Gateway validates: signature + roles claim contains requiredCapability
# Use in-cluster URL to avoid external DNS/network issues
auth: auth:
enabled: true enabled: true
jwksUrl: "https://authentik.riotpiao.com/application/o/local-llm/jwks/" jwksUrl: "http://authentik-server.iam.svc.cluster.local/application/o/local-llm/jwks/"
requiredCapability: "llm:inference" requiredCapability: "llm:inference"
# Routes: standard HTTP proxy routes (not LLM-specific) # Routes: standard HTTP proxy routes (not LLM-specific)