activity-core

Author	SHA1	Message	Date
tegwick	fee89c4ea1	Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Close T06: LLDAP activity-core-operators and Authelia domain rules are live in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design with membership pointers, and clear residual handoff notes.	2026-07-22 17:47:57 +02:00
tegwick	652e799969	Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002. All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 7s Details Point residual and ops-sso-access design at the file-backed work records in net-kingdom rather than informal coordination notes.	2026-07-22 10:47:25 +02:00
tegwick	91353df7d0	Finish WP-0025 SSO cutover except group allowlist residual. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Build and Publish Container Image / build-and-push (push) Successful in 29s Details Mark T03–T05 and T07–T08 done after live Authelia/TLS verification, prefer SSO principal in ops UI copy and audits, and document break-glass port-forward. Leave T06 waiting on net-kingdom LLDAP/Authelia group rules.	2026-07-22 10:23:36 +02:00
tegwick	3bd005acc9	Prefer temporal.coulomb.social; fix Ingress ACME entrypoints All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 2s Details Document AAAA parking pitfall for activity.coulomb.social. Use web+websecure entrypoints and Authelia middleware on SSO Ingress manifests.	2026-07-22 01:29:23 +02:00
tegwick	54431db583	Use temporal.coulomb.social for Temporal UI SSO host All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 5s Details Build and Publish Container Image / build-and-push (push) Successful in 1m12s Details Prefer clean short hostname temporal.coulomb.social instead of activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.	2026-07-22 01:17:52 +02:00
tegwick	f885697e96	Activate ACTIVITY-WP-0025: Authelia SSO ingress for ops and Temporal UI All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 54s Details Build and Publish Container Image / build-and-push (push) Successful in 1m47s Details Mark workplan active. Add Traefik ForwardAuth middleware and Ingress manifests for activity.coulomb.social and activity-temporal.coulomb.social. Prefer Authelia SSO identity for ops mutations; document DNS gate and fleet pattern (docs/ops-sso-access.md).	2026-07-22 00:47:29 +02:00

6 commits