feat(control-plane): replace TokenReview with RSA keypair auth for runner token endpoint#1216

Merged

markturansky merged 3 commits intoalphafrom

fix/cp-runner-rsa-auth

Apr 5, 2026

Commits on Apr 5, 2026

fix(manifests): add NetworkPolicy allowing runner pods to reach CP token server
Ambient Code Bot
committed
feat(control-plane): replace TokenReview with RSA keypair auth for runner token endpoint

Ambient Code Bot
and
claude
committed
test: add unit tests for RSA keypair bootstrap, token server handler, and runner encryption

Ambient Code Bot
and
claude
committed