olb042/kubeconform
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

update crds

Browse Source
This commit is contained in:
Nick Gorse
2026-06-17 14:56:34 +01:00
parent 8e57124a0c
commit 3a8c946438
62 changed files with 3942 additions and 400 deletions
Download Patch File Download Diff File Expand all files Collapse all files
crdSchemas/master-standalone/mcpremoteproxy-stable-v1alpha1.json
+1 -1
View File
@@ -238,7 +238,7 @@
"additionalProperties": false
},
"oidcConfigRef": {
"description": "OIDCConfigRef references a shared MCPOIDCConfig resource for OIDC authentication.\nThe referenced MCPOIDCConfig must exist in the same namespace as this MCPRemoteProxy.\nPer-server overrides (audience, scopes) are specified here; shared provider config\nlives in the MCPOIDCConfig resource.",
"description": "OIDCConfigRef references a shared MCPOIDCConfig resource for OIDC authentication.\nThe referenced MCPOIDCConfig must exist in the same namespace as this MCPRemoteProxy.\nPer-server overrides (audience, scopes) are specified here; shared provider config\nlives in the MCPOIDCConfig resource.\n\nSECURITY: if this field is omitted and no other authentication source is configured,\nthe proxy runs UNAUTHENTICATED. It accepts every request that can reach its port and\nforwards it to the remote MCP server under a synthetic local-user identity, with no\ntoken or credential check. Set this field to enforce identity-based access control\nper request.",
"properties": {
"audience": {
"description": "Audience is the expected audience for token validation.\nThis MUST be unique per server to prevent token replay attacks.",