From 263d9850259ee010d82ac757350565d75280101a Mon Sep 17 00:00:00 2001 From: Jurie Smit Date: Mon, 31 Aug 2026 01:20:15 +0200 Subject: [PATCH] feat(infra): add Tarmac to the mill.render audience allowlist Adds neuralliquid-tarmac-mill-s2s to mystira_oidc_render_audiences alongside the existing nexamesh-coiltrace-web entry, so Tarmac's new OpenIddict client-credentials client (companion PR in phoenixvc/mystira-workspace) can call Mill's LaTeX-render endpoints with a mill.render-scoped token. No dedicated resource audience was minted on the Mystira side, so this client's own client id is the value to allow here, matching the existing CoilTrace precedent. Co-Authored-By: Claude Sonnet 5 --- infra/env/prod/terraform.tfvars | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/infra/env/prod/terraform.tfvars b/infra/env/prod/terraform.tfvars index 1425cdf..d5e7aac 100644 --- a/infra/env/prod/terraform.tfvars +++ b/infra/env/prod/terraform.tfvars @@ -57,7 +57,7 @@ mystira_oidc_audience = "celladore-xtox" # dedicated scope below. This does not broaden any other XtOX endpoint. mystira_oidc_delegated_audiences = "neuralliquid-convolens-web" mystira_oidc_transcription_scope = "mill.transcribe" -mystira_oidc_render_audiences = "nexamesh-coiltrace-web" +mystira_oidc_render_audiences = "nexamesh-coiltrace-web,neuralliquid-tarmac-mill-s2s" mystira_oidc_render_scope = "mill.render" api_custom_domain = "api.mill.celladoresystems.com"