From 87d7f7ef44704d3bee5a5f33d1c28cba328ea428 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?St=C3=A9phane=20Tailland?= Date: Sat, 29 Aug 2026 07:40:12 +0200 Subject: [PATCH] refactor: rename the token-exchange broker to drop the middleware's name Every agent has to name this client in the audience scopes it requests, so the one thing an agent cannot avoid naming was the very thing it should know nothing about. The gateway is replaceable; the contract should not say otherwise. token-exchange-broker, same credential, same behaviour. The old client stays in the realm until every consumer has moved. Co-Authored-By: Claude Opus 5 --- dev/flux-kustomization.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/dev/flux-kustomization.yaml b/dev/flux-kustomization.yaml index 643879b..77f59ae 100644 --- a/dev/flux-kustomization.yaml +++ b/dev/flux-kustomization.yaml @@ -31,7 +31,7 @@ spec: # record `workforce` and turns that into the Loki label domain=workforce. AUDIT_LOG_ENDPOINT: http://audit-log-collector.observability.svc.cluster.local/workforce REST_HOSTNAME: workforce-dev.sttlab.local - TOKEN_EXCHANGE_CLIENT_ID: kong-token-exchange-broker + TOKEN_EXCHANGE_CLIENT_ID: token-exchange-broker substituteFrom: - kind: Secret name: workforce-token-exchange-broker