stt/kong-dataplane-payments
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

JWT audience fix

Browse Source
This commit is contained in:
Stéphane Tailland
2026-08-23 17:21:03 +02:00
parent 8596514e42
commit d8fc17ecb2
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
dev/api-gateway/policies-kustomization.yaml
+4 -3
View File
@@ -24,9 +24,10 @@ spec:
# auto-names the mirrored KonnectGatewayControlPlane with a random # auto-names the mirrored KonnectGatewayControlPlane with a random
# suffix, not derivable from NAME. # suffix, not derivable from NAME.
CONTROL_PLANE_REF_NAME: payments-dev-bz6vs CONTROL_PLANE_REF_NAME: payments-dev-bz6vs
# Every audience valid anywhere in the payments domain — grows as the # Every audience valid anywhere in the payments domain. mcp-payments
# domain gains APIs (e.g. mcp-payments, if an MCP layer is ever added). # added 2026-08-23 alongside the payments-mcp Kong layer
JWT_AUDIENCE_WHITELIST: '["payments-api"]' # (payments-api/kong/mcp/).
JWT_AUDIENCE_WHITELIST: '["payments-api", "mcp-payments"]'
# Local in-cluster Keycloak is the platform-wide IdP now (see # Local in-cluster Keycloak is the platform-wide IdP now (see
# ../../../STATUS.md sections 15/16), not dataplane-template-defaults' # ../../../STATUS.md sections 15/16), not dataplane-template-defaults'
# stale VPS value — confirmed reachable in-cluster before wiring this # stale VPS value — confirmed reachable in-cluster before wiring this