From a7ed6003f62cd631ca37f7f552d5b0ff229d78f0 Mon Sep 17 00:00:00 2001
From: derhornspieler <15236687+derhornspieler@users.noreply.github.com>
Date: Sat, 29 Aug 2026 16:03:34 -0400
Subject: [PATCH] chore(terraform): allowlist the credential JWKS endpoint in
 the coverage audit

GET /credentials/{credential_name}/jwks serves the public key set of an internal
issuer credential for the Add Provider wizard, a derived read-only view rather
than Terraform-managed state.
---
 terraform/provider/tools/endpointaudit/coverage_allowlist.txt | 1 +
 1 file changed, 1 insertion(+)

diff --git a/terraform/provider/tools/endpointaudit/coverage_allowlist.txt b/terraform/provider/tools/endpointaudit/coverage_allowlist.txt
index d10be89b90c..34c42790e4f 100644
--- a/terraform/provider/tools/endpointaudit/coverage_allowlist.txt
+++ b/terraform/provider/tools/endpointaudit/coverage_allowlist.txt
@@ -35,6 +35,7 @@ GET /user/spend/report
 
 # Admin UI helper endpoints; serve UI forms and caller-scoped views, not desired state
 GET /budget/settings
+GET /credentials/{credential_name}/jwks
 GET /router/fields
 GET /guardrails/ui/add_guardrail_settings
 GET /guardrails/ui/category_yaml/{category_name}