Skip to main content
Each registry provider is a JSON file in registry/ that conforms to the registry-provider.schema.json schema.

Top-level fields

vaultSecrets

Maps the secret names operators use with secrets create --name to template placeholders in the auth configuration.
This means: when someone stores OPENAI_API_KEY, it maps to {{secret}} in the auth template. For multi-secret providers:

auth

The auth field supports these variants:

query

path

multi_header

multi_query

o_auth2

aws_sig_v4

hmac

basic / mtls

hosts

Array of allowed upstream hostnames. Wildcards are supported for per-tenant providers:

capabilities

Each capability defines:

Full example

Next: Operations