 Seth Jennings
|
4c1b16a4a1
|
feat(server): add operator-only provider credential retrieval (#4357)
* feat(server): add operator-only provider credential retrieval
Authenticate operators exclusively through verified direct gateway mTLS. Export selected runtime credentials with freshness validation and all-or-nothing delivery.
Coordinate refresh across callers and replicas, preserve rotated grants across RPC cancellation, and fence credential delivery against reconfiguration. Add generated bindings, security and regression tests, and operator documentation.
Signed-off-by: Seth Jennings <sjenning@redhat.com>
* feat(sdk): add curated operator credential retrieval
Expose provider credential clients in Python and TypeScript with explicit workspace and key selection, freshness options, optional expiration, and preserved gateway errors. Reuse existing mTLS transports without introducing retries or secret caching.
Add generated-wire and error-mapping tests, SDK package validation, and operator usage documentation.
Signed-off-by: Seth Jennings <sjenning@redhat.com>
* fix(server): honor recovery state for queued automatic refreshes
Signed-off-by: Seth Jennings <sjenning@redhat.com>
---------
Signed-off-by: Seth Jennings <sjenning@redhat.com>
|
2026-10-09 16:16:47 +00:00 |
|