feat: gateway fork — compute-driver-socket + credentials-driver-socket flags, OIDC#1

Merged

pdettori merged 15 commits intomvpfrom

feat/gateway-driver-sockets-oidc

Apr 28, 2026

Commits on Apr 28, 2026

feat(auth): add OIDC/Keycloak authentication with RBAC

mrunalp
authored and
pdettori
committed
feat(auth): add OAuth2 scope-based fine-grained permissions

mrunalp
authored and
pdettori
committed
fix(auth): address branch review findings

mrunalp
authored and
pdettori
committed
fix(auth): complete review findings for OIDC auth boundary

mrunalp
authored and
pdettori
committed
refactor(auth): use oauth2 crate for CLI OIDC flows

mrunalp
authored and
pdettori
committed
refactor(auth): move server auth modules into auth/ directory

mrunalp
authored and
pdettori
committed
fix(auth): use RequestBody auth type for client credentials flow

mrunalp
authored and
pdettori
committed
fix(auth): forward OPENSHELL_OIDC_SCOPES through cluster bootstrap

mrunalp
authored and
pdettori
committed
test(auth): add OIDC e2e tests for RBAC, scopes, and client credentials

mrunalp
authored and
pdettori
committed
fix(docs): fix markdown lint errors in OIDC architecture docs

mrunalp
authored and
pdettori
committed
feat: add credentials_driver.proto and wire codegen
pdettori
committed
feat: add --compute-driver-socket flag and External driver variant
pdettori
committed
feat: add credentials driver client and --credentials-driver-socket wiring
pdettori
committed
style: fix cargo fmt formatting in credentials and policy modules
pdettori
committed
fix(e2e): use ObjectMeta wrapper for Provider name in OIDC tests
pdettori
committed