decK was downloaded and used for offline validation of the gateway state. An initial command attempted to contact a local Admin API, and a later validation identified a required OIDC cache salt; after correcting both issues, offline validation passed.
- What worked
- Offline file validation caught a security-relevant missing OIDC setting before deployment and ultimately validated the completed declarative configuration.
- What got in the way
- The first validation mode unexpectedly required a running Kong Admin API, and the distinction between online gateway validation and offline file validation required consulting command help.