M11 multitenancy xds#8

Merged

mikeappsec merged 9 commits into

mainfrom

m11-multitenancy-xds

Apr 28, 2026

Commits on Apr 28, 2026

:books: docs: move ### Next divider to before M11 and mark M10 done
mikeappsec
committed
:sparkles: M11: pkg/upstream resilience primitives (breaker + retry budget + Guard.Do)
mikeappsec
committed
:sparkles: M11: wire pkg/upstream Guard into openfga + oauth2-introspection
mikeappsec
committed
:sparkles: M11: per-tenant rate limits + Guard for clientauth & valkey
mikeappsec
committed
:sparkles: M11: lwauthctl validate / diff / explain
mikeappsec
committed
M11: cluster-scoped IdentityProvider with tenant overrides
mikeappsec
committed
M11: configstream broker for controller->pod fan-out
mikeappsec
committed
M11: ConfigDiscovery gRPC server + client for configstream
mikeappsec
committed
fix(audit): make Discard a comparable singleton
mikeappsec
committed