bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

agent(openclaw): trust oauth proxy identity

Browse Source
This commit is contained in:
jenkins 2026-05-20 18:35:08 -03:00
parent af8a163e70
commit 1fc7233267
2 changed files with 4 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
services/openclaw/configmap.yaml
View File

@ -30,11 +30,9 @@ data:
"gateway": { "gateway": {
"mode": "local", "mode": "local",
"auth": { "auth": {
"mode": "token", "mode": "trusted-proxy",
"token": { "trustedProxy": {
"source": "env", "userHeader": "x-forwarded-email"
"provider": "default",
"id": "OPENCLAW_GATEWAY_TOKEN"
} }
}, },
"port": 18789, "port": 18789,

7
services/openclaw/deployment.yaml
View File

@ -23,7 +23,7 @@ spec:
ai.bstein.dev/instructions: kubectl-field-selectors ai.bstein.dev/instructions: kubectl-field-selectors
ai.bstein.dev/role: testing-triage ai.bstein.dev/role: testing-triage
ai.bstein.dev/placement: arm64 gateway lane (jetson preferred) ai.bstein.dev/placement: arm64 gateway lane (jetson preferred)
ai.bstein.dev/config-rev: "20260520-agent-origin" ai.bstein.dev/config-rev: "20260520-agent-trusted-proxy"
spec: spec:
serviceAccountName: openclaw-triage serviceAccountName: openclaw-triage
automountServiceAccountToken: true automountServiceAccountToken: true
@ -187,11 +187,6 @@ spec:
value: https://scm.bstein.dev value: https://scm.bstein.dev
- name: GRAFANA_BASE_URL - name: GRAFANA_BASE_URL
value: https://metrics.bstein.dev value: https://metrics.bstein.dev
- name: OPENCLAW_GATEWAY_TOKEN
valueFrom:
secretKeyRef:
name: openclaw-secrets
key: OPENCLAW_GATEWAY_TOKEN
volumeMounts: volumeMounts:
- name: home - name: home
mountPath: /home/node/.openclaw mountPath: /home/node/.openclaw