Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s

Close T06: LLDAP activity-core-operators and Authelia domain rules are live
in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design
with membership pointers, and clear residual handoff notes.
This commit is contained in:
tegwick 2026-07-22 17:47:57 +02:00
parent 6134b82101
commit fee89c4ea1
6 changed files with 49 additions and 32 deletions

View file

@ -129,10 +129,10 @@ kubectl -n activity-core set env deploy/actcore-temporal-ui \
TEMPORAL_CORS_ORIGINS=https://temporal.coulomb.social,http://localhost:8080,http://127.0.0.1:8080
```
- Ops: https://activity.coulomb.social/ops/ui (Authelia SSO)
- Ops: https://activity.coulomb.social/ops/ui (Authelia SSO; group `activity-core-operators`)
- Temporal: https://temporal.coulomb.social
- Design: `docs/ops-sso-access.md`
- Follow-up: LLDAP group `activity-core-operators` + Authelia domain rules (T06)
- Membership: `net-kingdom/sso-mfa/k8s/lldap/OPERATOR-GROUPS.md` (NK-WP-0021)
### Break-glass port-forward