add security policy

2026-05-07 11:58:37 -05:00
parent eca316efa4
commit 138ebc8f61
1 changed files with 20 additions and 0 deletions
--- a/clusters/k3s-dgx/nim-service/qwen.yaml
+++ b/clusters/k3s-dgx/nim-service/qwen.yaml
@@ -88,3 +88,23 @@ spec:
      timeouts:
        request: 600s
        backendRequest: 600s
+---
+apiVersion: gateway.envoyproxy.io/v1alpha1
+kind: SecurityPolicy
+metadata:
+  name: llm-bearer-auth
+  namespace: nim-service
+spec:
+  targetRefs:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+      name: llm-route
+
+  apiKeyAuth:
+    credentialRefs:
+    - group: ""
+      kind: Secret
+      name: mcp-bearer-token
+    extractFrom:
+    - headers:
+      - authorization