agentrouter.admin.v1.GatewayAuthPolicyService
GatewayAuthPolicyService is the control-plane API for gateway authentication config: what authn runs on a project gateway and how a verified identity maps to an Agent Router principal. Agent Router reconciles these into Envoy Gateway SecurityPolicies.
Introduction
DeleteClaimProjectBinding
Delete a claim-to-project binding.
ListGatewayAuthPolicies
List gateway auth policies for a (customer, project, gateway) scope.
CreateGatewayAuthPolicy
Create a gateway auth policy (one authentication mechanism on a gateway).
GetGatewayAuthPolicy
Get a gateway auth policy by id.
DeleteGatewayAuthPolicy
Delete (soft) a gateway auth policy.
UpdateGatewayAuthPolicy
Update a gateway auth policy's provider config + enabled flag.
ListClaimProjectBindings
List the claim-to-project bindings of a policy.
CreateClaimProjectBinding
Bind a claim value to a project under a policy. A token call that sends no x-tars-project acts in that project when the token the policy verified carries the value in the claim.
ListIdentityMappingRules
List identity mapping rules for a policy.
CreateIdentityMappingRule
Create an identity mapping rule under a policy.
DeleteIdentityMappingRule
Delete an identity mapping rule.