Wire service token provider for all services
Table of Contents
This page is a capture in the next bucket of the product backlog — a pre-sprint idea, not yet pulled into a sprint as a story.
What
(One paragraph: the idea.)
Why
(Motivation, problem being solved, related context.)
References
See also
Only ores.reporting.service has make_service_token_provider wired up so it can authenticate outbound NATS calls as a service principal. Every service that makes outbound NATS calls needs the same wiring:
- Add
ores.iam.client.libas a dependency. - Call
make_service_token_providerin the service initialisation. - Pass the resulting provider to any NATS client or service stub that makes authenticated calls.
At the time of capture, the other services make no outbound NATS calls, so this can be deferred until each service grows outbound calls.