From 83feff9f78df2756e2a61169b9665758c465b037 Mon Sep 17 00:00:00 2001
From: Abdulaziz Alharbi <246710009+abdulaziz-dev-lab@users.noreply.github.com>
Date: Wed, 7 Oct 2026 01:56:28 +0300
Subject: [PATCH] docs: name the Secret in cross-namespace ReferenceGrant
 examples

The aigw cross-namespace Secret fixture and the connect-providers docs example left out to.name, which grants every Secret in the namespace.

Signed-off-by: Abdulaziz Alharbi <246710009+abdulaziz-dev-lab@users.noreply.github.com>
---
 cmd/aigw/testdata/cross_namespace_secret_grant.yaml          | 1 +
 site/docs/capabilities/llm-integrations/connect-providers.md | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/cmd/aigw/testdata/cross_namespace_secret_grant.yaml b/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
index 74e0624852..cc13832352 100644
--- a/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
+++ b/cmd/aigw/testdata/cross_namespace_secret_grant.yaml
@@ -17,3 +17,4 @@ spec:
   to:
     - group: ""
       kind: Secret
+      name: shared-openai-apikey
diff --git a/site/docs/capabilities/llm-integrations/connect-providers.md b/site/docs/capabilities/llm-integrations/connect-providers.md
index eb2ab1d020..cb9f941aeb 100644
--- a/site/docs/capabilities/llm-integrations/connect-providers.md
+++ b/site/docs/capabilities/llm-integrations/connect-providers.md
@@ -256,8 +256,11 @@ spec:
   to:
     - group: ""
       kind: Secret
+      name: openai-secret # the Secret's name
 ```
 
+The `name` field limits the grant to that one Secret. Without it, the grant covers every Secret in the namespace. To allow several Secrets, add a `to` entry for each.
+
 With `aigw run`, put the ReferenceGrant in the configuration file.
 
 #### Security Best Practices