Follow Discord
Sweep 22 Oct 2026 · 21:04Z Build v2.1.309 528 read Stable v2.1.308 Latest v2.1.309 Next v2.1.309 Feeds RSS JSON llms.txt llms-full.txt Unofficial
HomeDocsClaude Developer Platform 23 Oct 2026
One change · api

kubernetes changedmanage-claude/wif-providers/kubernetes

Nearest release: v2.1.309, published 3 hours before this site recorded the change. Shown because the two are within 24 hours of each other. Nothing here says the release caused the edit.

Recorded here
Lines+44added
Lines−44removed
From line 155 where the diff opens
First seen 14 Aug 2026 this site's first read of the page
Recorded edits10to this page, all time

The whole hunk

from line 155, old and new numbered
/
lines
from line 155
155155 }'
156156 ```
157157 
158 ```bash CLI
159 # Reads ANTHROPIC_FEDERATION_RULE_ID, ANTHROPIC_ORGANIZATION_ID,
160 # ANTHROPIC_SERVICE_ACCOUNT_ID, ANTHROPIC_WORKSPACE_ID, and ANTHROPIC_IDENTITY_TOKEN_FILE
161 ant messages create \
162 --model claude-opus-5-5 \
163 --max-tokens 1024 \
164 --message '{role: user, content: "Hello, Claude"}'
165 ```
166 
158167 ```python Python
159168 import anthropic
160169 
from line 200
191200 }
192201 ```
193202 
203 ```csharp C#
204 // Reads ANTHROPIC_IDENTITY_TOKEN_FILE, ANTHROPIC_FEDERATION_RULE_ID,
205 // ANTHROPIC_ORGANIZATION_ID, ANTHROPIC_SERVICE_ACCOUNT_ID, and ANTHROPIC_WORKSPACE_ID
206 // from the pod's environment.
207 using var client = new AnthropicClient();
208 
209 var message = await client.Messages.Create(new()
210 {
211 Model = Model.ClaudeOpus5_5,
212 MaxTokens = 1024,
213 Messages = [new UserMessageParam { Content = "Hello, Claude" }],
214 });
215 foreach (var block in message.Content)
216 {
217 if (block.Value is TextBlock textBlock)
218 {
219 Console.WriteLine(textBlock.Text);
220 }
221 }
222 ```
223 
194224 ```go Go
195225 // Reads ANTHROPIC_IDENTITY_TOKEN_FILE, ANTHROPIC_FEDERATION_RULE_ID,
196226 // ANTHROPIC_ORGANIZATION_ID, ANTHROPIC_SERVICE_ACCOUNT_ID, and ANTHROPIC_WORKSPACE_ID
from line 249
219249 AnthropicClient client = AnthropicOkHttpClient.fromEnv();
220250 
221251 var message = client.messages().create(MessageCreateParams.builder()
222 .model(Model.CLAUDE_OPUS_5_5)
223 .maxTokens(1024)
224 .addUserMessage("Hello, Claude")
225 .build());
252 .model(Model.CLAUDE_OPUS_5_5)
253 .maxTokens(1024)
254 .addUserMessage("Hello, Claude")
255 .build());
226256 
227257 IO.println(message.content());
228258 ```
229259 
230 ```csharp C#
231 // Reads ANTHROPIC_IDENTITY_TOKEN_FILE, ANTHROPIC_FEDERATION_RULE_ID,
232 // ANTHROPIC_ORGANIZATION_ID, ANTHROPIC_SERVICE_ACCOUNT_ID, and ANTHROPIC_WORKSPACE_ID
233 // from the pod's environment.
234 using var client = new AnthropicClient();
235 
236 var message = await client.Messages.Create(new()
237 {
238 Model = Model.ClaudeOpus5_5,
239 MaxTokens = 1024,
240 Messages = [new UserMessageParam { Content = "Hello, Claude" }],
241 });
242 foreach (var block in message.Content)
243 {
244 if (block.Value is TextBlock textBlock)
245 {
246 Console.WriteLine(textBlock.Text);
247 }
248 }
249 ```
250 
251 ```bash CLI
252 # Reads ANTHROPIC_FEDERATION_RULE_ID, ANTHROPIC_ORGANIZATION_ID,
253 # ANTHROPIC_SERVICE_ACCOUNT_ID, ANTHROPIC_WORKSPACE_ID, and ANTHROPIC_IDENTITY_TOKEN_FILE
254 ant messages create \
255 --model claude-opus-5-5 \
256 --max-tokens 1024 \
257 --message '{role: user, content: "Hello, Claude"}'
258 ```
259 
260260 ```php PHP
261261 use Anthropic\Client;
262262 
from line 291
291291 
292292## Verify the setup
293293 
294A successful exchange returns an `access_token` beginning with `sk-ant-oat01-` and an `expires_in` value in seconds. If the exchange fails with the opaque `401` `authentication_error` response (message `Authentication failed`), check the [authentication history page](https://platform.claude.com/settings/workload-identity-federation?tab=history) in the Claude Console for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-a-failed-exchange); the most common Kubernetes-side cause is a JWKS key mismatch (for `inline` mode, re-fetch with `kubectl get --raw /openid/v1/jwks` and update the issuer).
294A successful exchange returns an `access_token` starting with `sk-ant-oat01-` and an `expires_in` value in seconds. If the exchange fails with the opaque `401` `authentication_error` response (message `Authentication failed`), check the [authentication history page](https://platform.claude.com/settings/workload-identity-federation?tab=history) in the Claude Console for the deny reason and see [Troubleshoot a failed exchange](https://platform.claude.com/docs/en/manage-claude/wif-reference#troubleshoot-a-failed-exchange); the most common Kubernetes-side cause is a JWKS key mismatch (for `inline` mode, re-fetch with `kubectl get --raw /openid/v1/jwks` and update the issuer).
295295 
296296## Scope your rule
297297 
Feedback