Mint Google access tokens in the Kubernetes credential provider - #47

Open

dhaifley wants to merge 21 commits into

kagent-dev:mainfrom

dhaifley:dhaifley/google-access-token-provider

Commits on Sep 20, 2026

Publish release artifacts
EItanya
committed
fe051a9
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
77da59b
Bound actor workflows and refresh worker state after pause
EItanya
committed
e2709d5
Accept RSA and EC private keys in credential bundles
EItanya
committed
5f6b100
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
a41bd08
Add Helm deployment with agentgateway and CRD verification

committed
61400db
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
a284ae3
Configure API server object storage in the Helm chart
EItanya
committed
35f7783
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
87a3e8a
Make local verification independent of registry and filesystem timing
EItanya
committed
f598aae
Keep the gVisor sandbox alive until application containers are deleted
EItanya
committed
db8789e
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
9aeae39
Align Helm E2E with the canonical installation
EItanya
committed
0be5954
Allow extra ateapi arguments in the Helm chart
EItanya
committed
42a6b1b
Retry layer pulls that join an eviction flight
EItanya
committed
0eb90e7
Align Helm egress readiness with the metrics endpoint
EItanya
committed
3771be0
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
df5265f
Add a standalone Kubernetes credential provider for AGW egress

EItanya
and
yufan-su
committed
655b74b
Publish the Kubernetes credential provider in releases
EItanya
committed
300be0c

Navigation Menu

Mint Google access tokens in the Kubernetes credential provider - #47

Mint Google access tokens in the Kubernetes credential provider#47
dhaifley wants to merge 21 commits into
kagent-dev:mainfrom
dhaifley:dhaifley/google-access-token-provider

Commits on Sep 20, 2026

Publish release artifacts

Support deployment namespaces and opt-in local atelet transport

Bound actor workflows and refresh worker state after pause

Accept RSA and EC private keys in credential bundles

Validate agentgateway across gVisor and microVM runtimes

Add Helm deployment with agentgateway and CRD verification

Expose PostgreSQL migration settings in the Helm chart

Configure API server object storage in the Helm chart

Configure per-signal OTLP export and agentgateway access logs

Make local verification independent of registry and filesystem timing

Keep the gVisor sandbox alive until application containers are deleted

Add fork synchronization skill with temporary asset cleanup

Align Helm E2E with the canonical installation

Allow extra ateapi arguments in the Helm chart

Retry layer pulls that join an eviction flight

Align Helm egress readiness with the metrics endpoint

feat(helm): global image values, and the registry/repository split

Add a standalone Kubernetes credential provider for AGW egress

Publish the Kubernetes credential provider in releases

Commits on Sep 21, 2026

fix(helm): let the chart turn on actor lifecycle events (#45)

feat(credprovider): mint Google access tokens from service account key Secrets