Skip to content

Conversation

@howardjohn
Copy link
Contributor

@howardjohn howardjohn commented Nov 4, 2025

Description

For #12378
For #12786

Change Type

/kind feature

Changelog

Added support for Add JWT, Basic authentication, and API Key authentication to AgentgatewayPolicy

Additional Notes

Signed-off-by: John Howard <[email protected]>
Signed-off-by: John Howard <[email protected]>
@github-actions github-actions bot added do-not-merge/description-invalid kind/feature Categorizes issue or PR as related to a new feature. release-note and removed do-not-merge/description-invalid labels Nov 4, 2025
// backendRef references the remote JWKS server to reach.
//
// Supported types: Service and Backend.
BackendRef gwv1.BackendObjectReference `json:"backendRef"`
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we probably want to have keyset ttl configurable?

Audiences []string `json:"audiences,omitempty"`
// jwks defines the JSON Web Key Set used to validate the signature of the JWT.
JWKS AgentJWKS `json:"jwks"`
}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this skips things like token source (header vs query), claim mapping config, and whether a token should be passed on to the next auth filter.

}
}
for _, pp := range jwt.Providers {
jp := &api.TrafficPolicySpec_JWTProvider{
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

jp is not being added to the list of providers in the policy, but rather discarded

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/feature Categorizes issue or PR as related to a new feature. release-note

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants