Give the agent a door a human can reach

Nothing outside the cluster could talk to it: every conversation went through
kubectl run curl, which makes an agent that works and nobody can use.

The same authentication subrequest that guards the n8n endpoints guards this
one. The agent forwards and exchanges the caller's token, so a forged one
fails at the realm — but failing downstream is not refusing, and an
unauthenticated caller could still make it do inference.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

This commit is contained in:

Stéphane Tailland

2026-08-31 09:00:25 +02:00

parent b04c5cbb11

commit a64f5026e3

2 changed files with 71 additions and 0 deletions

									
										deploy/agents/kustomization.yaml
									
		+1
		
												View File
												
				@@ -2,3 +2,4 @@ apiVersion: kustomize.config.k8s.io/v1beta1

				kind: Kustomization

				resources:

				  - approvisionnement.yaml

				  - ingress.yaml