agentrouter.admin.v1.GatewayAuthPolicyService
GatewayAuthPolicyService is the control-plane API for gateway authentication config: what authn runs on a project gateway and how a verified identity maps to an Agent Router principal. Agent Router reconciles these into Envoy Gateway SecurityPolicies.
Introduction
DeleteClaimProjectBinding
Delete a claim-to-project binding.
GetPrivateAddressSettings
Read one organization's private-address settings: whether the management plane accepts a gateway auth policy's jwks_uri, and a project OIDC contract's issuer and discovered jwks_uri, on a non-public address for that organization. INHERIT means the organization follows the deployment's own setting.
SetPrivateAddressSettings
Change one organization's private-address settings. ALLOW lets the management plane accept a non-public address for that organization, DENY refuses one even while the deployment allows it, and INHERIT follows the deployment's own setting. A field left UNSPECIFIED keeps its stored value. The settings change what the management plane accepts only, so a data plane that fetches keys from a private address still needs its own environment variable. Refused with FAILED_PRECONDITION on SaaS.
ListGatewayAuthPolicies
List gateway auth policies for a (customer, project, gateway) scope.
CreateGatewayAuthPolicy
Create a gateway auth policy (one authentication mechanism on a gateway).
GetGatewayAuthPolicy
Get a gateway auth policy by id.
DeleteGatewayAuthPolicy
Delete (soft) a gateway auth policy.
UpdateGatewayAuthPolicy
Update a gateway auth policy's provider config + enabled flag.
ListClaimProjectBindings
List the claim-to-project bindings of a policy.
CreateClaimProjectBinding
Bind a claim value to a project under a policy. A token call that sends no x-tars-project acts in that project when the token the policy verified carries the value in the claim.
ListIdentityMappingRules
List identity mapping rules for a policy.
CreateIdentityMappingRule
Create an identity mapping rule under a policy.
DeleteIdentityMappingRule
Delete an identity mapping rule.