Stéphane Tailland
8573e300e2
A scope authorises a read and says nothing about volume. An agent reads a thousand records in seconds where a person clicks ten, and until now nothing noticed: the token is valid, the tool is permitted, the ACL passes. That gap stopped being theoretical the day an autonomous run started reading the whole catalog on a schedule. identifier: credential keys the counter on the sub claim — the end user, whoever is asking on their behalf — so an agent looping under one person's identity spends that person's budget and cannot spend everyone's. Verified on catalog: pm-user and ro-user hold separate counters. Per-route namespace, so a busy domain cannot exhaust another's. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
25 lines
678 B
YAML
25 lines
678 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
resources:
|
|
- rest/service.yaml
|
|
- rest/routes.yaml
|
|
- rest/path-rewrite.yaml
|
|
- rest/path-rewrite-bindings.yaml
|
|
- rest/kongplugin.yaml
|
|
- rest/rate-limiting.yaml
|
|
- rest/proxy-cache.yaml
|
|
- rest/audit-log.yaml
|
|
- rest/audit-log-body-capture.yaml
|
|
- rest/audit-log-body-capture-bindings.yaml
|
|
- rest/pluginbindings.yaml
|
|
- mcp/service.yaml
|
|
- mcp/routes.yaml
|
|
- mcp/consumergroups.yaml
|
|
- mcp/ai-mcp-proxy.yaml
|
|
- mcp/openid-connect.yaml
|
|
- mcp/rate-limiting.yaml
|
|
- mcp/audit-log.yaml
|
|
- mcp/audit-log-body-capture.yaml
|
|
- mcp/audit-log-body-capture-bindings.yaml
|
|
- mcp/pluginbindings.yaml
|