feat(realm): add the llm-proxy audience so agents can authenticate to the AI gateway

Browse Source

The AI gateway's openid-connect plugin requires audience ["llm-proxy"], but no
client or client scope in the realm could mint it, so every OIDC call fell
through to the anonymous consumer and was terminated with 401 "Authentication
required". Adds the bearer-only llm-proxy client, the llm-proxy-audience scope,
and grants it to the catalogue agent.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

...

This commit is contained in:

Stéphane Tailland

2026-08-28 10:49:19 +02:00

parent f9900a5fb9

commit 6c89f6124d

1 changed files with 1 additions and 1 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

k8s/keycloak/configmap-realm.yaml

+1 -1

File diff suppressed because one or more lines are too long