Repository navigation

feat: add OpenAICredentials with workload identity federation - #2815

Merged

aabchoo merged 17 commits into

theagentrouter:mainfrom

junfeiliu531:spiffe-token-provider-3

Oct 27, 2026

Merged

feat: add OpenAICredentials with workload identity federation#2815
aabchoo merged 17 commits into
theagentrouter:mainfrom
junfeiliu531:spiffe-token-provider-3

Commits on Oct 26, 2026
- controller: add SPIFFE JWT-SVID token provider
  
  Junfei Liu
  and
  claude
  committed
  6a40e1a
- api: add OpenAICredentials BackendSecurityPolicy
  
  Junfei Liu
  and
  claude
  committed
  b5c1835
- api: reuse BackendSecurityPolicyOIDC for OpenAI
  
  Junfei Liu
  and
  claude
  committed
  2daa9fb
- api: flatten OpenAI subject token, add spiffeJWTSVID
  
  Junfei Liu
  and
  claude
  committed
  b20a090
- api: restore subjectToken wrapper for OpenAI
  
  Junfei Liu
  and
  claude
  committed
  2419a96
- controller: reject OpenAICredentials explicitly
  
  Junfei Liu
  and
  claude
  committed
  7eb77b0
- backendauth: add OpenAI access token handler
  
  Junfei Liu
  and
  claude
  committed
  5d8522f
- controller: rotate OpenAICredentials access tokens
  
  Junfei Liu
  and
  claude
  committed
  63c4e68
- test: cover OpenAICredentials with SPIFFE in envtest
  
  Junfei Liu
  and
  claude
  committed
  26e4968
- docs: add OpenAICredentials SPIFFE example
  
  Junfei Liu
  and
  claude
  committed
  f76444d
- openai: use OpenAI Workload Identity Federation
  
  Junfei Liu
  and
  claude
  committed
  f417fe8
- controller: add AI_GATEWAY_OPENAI_PROXY_URL
  
  Junfei Liu
  and
  claude
  committed
  e8248e7
- address comments part 1
  Junfei Liu
  committed
  7a5aad7
- add log
  Junfei Liu
  committed
  dfebb2b
- after review part2
  Junfei Liu
  committed
  f2b86b2
- remove log
  Junfei Liu
  committed
  6f544cd
- controller: use configurable preRotationWindow
  
  Junfei Liu
  and
  claude
  committed
  63a7a6f

Commits

Commits on Oct 26, 2026