Kubernetes ServiceAccount Tokens Used as Forgejo Identities via oauth2-proxy

·1 views

A developer running a coding-agent platform on Kubernetes replaced per-agent Personal Access Tokens with workload identity. Each agent runs as a Kubernetes Job and needs to authenticate to the Forgejo Git host to push branches and open pull requests. Instead of storing a long-lived token, the agent pod mounts a projected ServiceAccount token scoped to an audience that only the gate in front of Forgejo accepts. The gate, built on oauth2-proxy, verifies the JWT and forwards the identity to Forgejo, making each run traceable to its ServiceAccount. The article also covers how the Kubernetes API server acts as a verification-only OIDC issuer, which complicates standard client libraries.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Chrome's Prompt API now runs on-device AI without API keys or per-token billing

Chrome's Prompt API, backed by the Gemini Nano model, is now stable for extensions from Chrome 138 and for web pages from Chrome 148. It lets a page ask the browser to summarize, classify, or rewrite text locally, with no server round-trip. Developers treat this as a browser capability much like storage or notifications, though the model must first download and may be unavailable on some hardware. The guide stresses feature detection and a backend fallback, since users lacking the model would otherwise hit a dead feature. It also notes that the API surface differs between web and extension contexts and corrects an earlier streaming example that wrongly treated each chunk as cumulative text.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Mr. Pending, a Snail Engineer, Tests AI-Designed Machines to Press One Button

A developer built The Department of Unnecessary Engineering, a playful project in which a snail character named Mr. Pending must press a blue button through an elaborate chain of machines. Behind the joke, a small open-weight AI model, Gemma, designs contraptions from parts like ramps and conveyors, and a deterministic simulator checks whether they actually work. When a machine fails, the AI proposes repairs and tries again. In a small test, the E2B model succeeded in 2 of 15 builds with an improved prompt, while the larger E4B model succeeded 4 of 15 but used considerably more memory. The project was released as open source on GitHub, with the simulator, evaluation results and local setup instructions included.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Student Proposes LazyStudy, an Offline AI Tool That Turns PDFs into Study Aids

A student has proposed LazyStudy, a study assistant designed to reduce the time spent preparing revision materials from lengthy PDFs. The tool would produce short notes, flashcards, practice quizzes, and revision plans from an uploaded document. The author plans to run an open-weight language model locally through Ollama, so students' files would not need to go to a third-party AI service. Benefits cited include privacy, offline access, flexibility in model choice, and avoiding recurring API costs. The project remains at the proposal stage, and the author has not yet measured any time savings.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Home Product Photo Tips for Getting Clean AI Video Results

The author, who builds the reference-to-video tool RefVid, argues that most AI video distortions such as melting logos or shifting colors stem from poor input photos rather than the model itself. Reference-to-video models build new scenes from several consistent photos of an object, so the reference set needs three to five images of the same item from different angles under identical lighting and background. The guidance covers using soft window or two-lamp lighting without mixed color temperatures, a seamless white or gray backdrop, and a light box for small items. It also recommends phone settings such as the 1x or 2x main lens, locked exposure and white balance, and a steady mount. A suggested shooting order runs from front and three-quarter views to side, back, and a detail close-up, with an optional in-use shot to show scale.

0 comments Read more at DEV Community