grs
grs
The auto-configure option was envisaged as an alternative to manually setting the base url. "Automatically configure the URL and TLS credentials for the AccessGrant Server." as described. It would be...
> Is there a way to get the auto-configured TLS credentials without the base url behavior? Not through the auto-configure option, at least at present. You can create a Certificate...
How does the response by the llama-stack server indicate to the client which MCP server requires authorization and where it should get a token from? Is realm in the www-authenticate...
Why does the llama-stack server need to store the tokens on disk? There needs to be a way to indicate to the client that the token has been revoked or...
Initial options that occur: (1) I agree the controller could easily create a client secret with a fixed name that can be used to connect to the router (2) Could...
> (2) This would imply some sort of operator to get the site CA certificate uid to reference in the network-observer's client Certificate, which doesn't lend itself super well to...
--targetnamespace and --headless are not currently compatible options
use options `--annotations traffic.sidecar.istio.io/excludeInboundPorts=5671,45671,55671,8081 --annotations traffic.sidecar.istio.io/excludeOutboundPorts=5671,45671,55671,8081` with skupper init.
Can you give a bit more detail of what you have done and what does not work?
Can you try running curl against the service controller by pod ip, on port 8888, from within the namespace (e.g. with oc exec)? Did you verify that the istio annotations...