fix(infra): repair gateway route ownership and add JobEngine/pack-registry scopes

- Route /api/v1/jobengine to jobengine service (was orchestrator)
- Route /api/v1/sources and /api/v1/witnesses to scanner service
- Add orch:quota and pack-registry scopes to platform OIDC token
- Align compose-local manifests with gateway appsettings.json

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
master
2026-03-09 07:52:46 +02:00
parent 841add4f27
commit 69923b648c
5 changed files with 13 additions and 12 deletions

View File

@@ -277,7 +277,7 @@
{
"Type": "ReverseProxy",
"Path": "/api/v1/sources",
"TranslatesTo": "http://sbomservice.stella-ops.local/api/v1/sources",
"TranslatesTo": "http://scanner.stella-ops.local/api/v1/sources",
"PreserveAuthHeaders": true
},
{
@@ -289,7 +289,7 @@
{
"Type": "ReverseProxy",
"Path": "/api/v1/witnesses",
"TranslatesTo": "http://attestor.stella-ops.local/api/v1/witnesses",
"TranslatesTo": "http://scanner.stella-ops.local/api/v1/witnesses",
"PreserveAuthHeaders": true
},
{