Skip to content

v5.1.0

Choose a tag to compare

View all tags
@placerda placerda released this 06 Oct 00:30
· 117 commits to main since this release
v5.1.0
f439120
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Added

  • Keyless service authentication (ADR-0019). The orchestrator now accepts
    a Microsoft Entra access token in the X-Service-Authorization: Bearer
    header, validated against ORCHESTRATOR_AUTH_AUDIENCE, the tenant issuer,
    and the ORCHESTRATOR_ALLOWED_CALLER_IDS allow list (oid/azp/appid).
    Callers authenticate with their managed identity; no shared secret is
    needed. The Authorization header stays reserved for the user OBO token.
    The Dapr token and X-API-KEY remain as fallbacks.
Assets 2
Loading