fix: end-to-end credential flow fixes#1208

Merged

markturansky merged 7 commits intoalphafrom

fix/credential-flow-fixes

Apr 4, 2026

Commits on Apr 4, 2026

fix(cp): credential rolebinding and project delete (#1203)

committed
fix(control-plane): default BackendURL to AMBIENT_API_SERVER_URL (#1204)

committed
fix(control-plane): iterate projects to refresh running session tokens

Ambient Code Bot
and
claude
committed
fix(control-plane): refresh runner tokens immediately on startup

Ambient Code Bot
and
claude
committed
fix(api-server): lowercase session ID in runner service DNS name

Ambient Code Bot
and
claude
committed
fix(control-plane): reduce runner token refresh interval to 4 minutes

Ambient Code Bot
and
claude
committed
fix(api-server): validate user OIDC JWTs in gRPC stream interceptor

Ambient Code Bot
and
claude
committed