From 482cd2e81f3ea4512030d46e9d9798b3dec76f04 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Tailland?= Date: Sat, 29 Aug 2026 07:40:10 +0200 Subject: [PATCH] refactor: rename the token-exchange broker to drop the middleware's name Every agent has to name this client in the audience scopes it requests, so the one thing an agent cannot avoid naming was the very thing it should know nothing about. The gateway is replaceable; the contract should not say otherwise. token-exchange-broker, same credential, same behaviour. The old client stays in the realm until every consumer has moved. Co-Authored-By: Claude Opus 5 --- dev/flux-kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dev/flux-kustomization.yaml b/dev/flux-kustomization.yaml index f7eaabd..2e94d42 100644 --- a/dev/flux-kustomization.yaml +++ b/dev/flux-kustomization.yaml @@ -31,7 +31,7 @@ spec: # record `sales` and turns that into the Loki label domain=sales. AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/sales REST_HOSTNAME: sales-dev.sttlab.local - TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker + TOKEN_EXCHANGE_CLIENT_ID: token-exchange-broker substituteFrom: - kind: Secret name: sales-token-exchange-broker