feat(kernos): implement optional API key authentication for MCP

Added kernos_api_keys configuration variable to enable optional
request authentication via Bearer or X-Api-Key headers. Updated
Kernos documentation with setup instructions and usage examples.
Also corrected FastAPI project port assignments in Ouranos docs.
This commit is contained in:
2026-04-07 14:12:48 +00:00
parent 2ffcf00570
commit b01cfe7430
3 changed files with 87 additions and 4 deletions

View File

@@ -19,4 +19,9 @@ ENVIRONMENT={{ kernos_environment | default('production') }}
# ============================================================================
# Comma-separated whitelist of allowed commands
# Commands after shell operators (;, &&, ||, |) are also validated
ALLOW_COMMANDS={{ kernos_allow_commands }}
ALLOW_COMMANDS={{ kernos_allow_commands }}
# Optional API keys for authentication (comma-separated)
# When set, all MCP requests require authentication
# Leave empty to disable authentication
API_KEYS={{ kernos_api_keys | default('') }}