Opt-in, API-key-authenticated LAN access to the compatibility endpoints - #38

Open

CryptoJones wants to merge 6 commits into

NVIDIA:developfrom

CryptoJones:feat/opt-in-authenticated-lan-ingress

Commits on Sep 22, 2026

Add nvpair-shared/ingressauth, an opt-in API-key gate for non-loopback plaintext callers

CryptoJones
and
claude
committed
19af3d4
Port the authenticated LAN ingress onto the unified nvpair-proxy
CryptoJones
committed
751f98e

Commits on Sep 23, 2026

Answer LAN preflights from the engine's CORS policy

CryptoJones
and
claude
committed
3908a9d
Accept a Kubernetes fsGroup Secret mount as the key file

CryptoJones
and
claude
committed
f61aa4b
Refuse keyless LAN preflights and group-readable key files

CryptoJones
and
claude
committed
e65ea8a
Scope the OpenAPI credential to the proxy operations; test a keyed preflight

CryptoJones
and
claude
committed
a76b22b