Epic: Credential Management

[shaneutt]

Upstream credential injection and lifecycle management for multi-provider AI gateway deployments. Workloads never handle provider API keys or cloud credentials. The gateway strips client-supplied credentials and injects the correct provider-specific credential.

Scope

• Per-cluster API key injection and client credential stripping (shipped via credential_injection filter)
• AWS SigV4 per-request signing for Bedrock
• Azure AD / Entra ID token exchange
• GCP Workload Identity with OAuth2 token refresh
• Automatic short-lived token rotation
• Dynamic runtime credential injection
• Credential redaction in observability

Related

• AWS SigV4 request signing for upstream auth ai#801 - AWS SigV4 request signing
• Azure AD / Entra ID upstream authentication ai#811 - Azure AD / Entra ID
• Spike: GCP Workload Identity for upstream auth #554 - GCP Workload Identity
• Spike: Short-lived upstream credential auto-rotation #555 - Short-lived credential auto-rotation