activity-core

Author	SHA1	Message	Date
tegwick	fee89c4ea1	Finish ACTIVITY-WP-0025 after NK-WP-0021 group allowlist. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Close T06: LLDAP activity-core-operators and Authelia domain rules are live in net-kingdom. Mark the workplan finished, update G10/runbook/SSO design with membership pointers, and clear residual handoff notes.	2026-07-22 17:47:57 +02:00
tegwick	652e799969	Link WP-0025 T06 residual to net-kingdom intakes NK-IN-0001/0002. All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 7s Details Point residual and ops-sso-access design at the file-backed work records in net-kingdom rather than informal coordination notes.	2026-07-22 10:47:25 +02:00
tegwick	91353df7d0	Finish WP-0025 SSO cutover except group allowlist residual. All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 2s Details Build and Publish Container Image / build-and-push (push) Successful in 29s Details Mark T03–T05 and T07–T08 done after live Authelia/TLS verification, prefer SSO principal in ops UI copy and audits, and document break-glass port-forward. Leave T06 waiting on net-kingdom LLDAP/Authelia group rules.	2026-07-22 10:23:36 +02:00
tegwick	54431db583	Use temporal.coulomb.social for Temporal UI SSO host All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 5s Details Build and Publish Container Image / build-and-push (push) Successful in 1m12s Details Prefer clean short hostname temporal.coulomb.social instead of activity-temporal.coulomb.social for Ingress, CORS, and ops UI links.	2026-07-22 01:17:52 +02:00
tegwick	f885697e96	Activate ACTIVITY-WP-0025: Authelia SSO ingress for ops and Temporal UI All checks were successful CI Smoke / host-smoke (push) Successful in 0s Details CI Smoke / container-smoke (push) Successful in 54s Details Build and Publish Container Image / build-and-push (push) Successful in 1m47s Details Mark workplan active. Add Traefik ForwardAuth middleware and Ingress manifests for activity.coulomb.social and activity-temporal.coulomb.social. Prefer Authelia SSO identity for ops mutations; document DNS gate and fleet pattern (docs/ops-sso-access.md).	2026-07-22 00:47:29 +02:00
tegwick	7e71c0c837	chore: hub IDs for ACTIVITY-WP-0025 after fix-consistency All checks were successful CI Smoke / host-smoke (push) Successful in 3s Details CI Smoke / container-smoke (push) Successful in 9s Details	2026-07-22 00:33:34 +02:00
tegwick	7761acf86a	Link Temporal UI from ops console; propose SSO access WP-0025 All checks were successful CI Smoke / host-smoke (push) Successful in 1s Details CI Smoke / container-smoke (push) Successful in 5s Details Build and Publish Container Image / build-and-push (push) Successful in 1m45s Details Add nav/deep link to Temporal Web UI (configurable URL, default 127.0.0.1:8080 for port-forward). Document dual port-forward and draft ACTIVITY-WP-0025 for Keycloak SSO ingress without port-forward.	2026-07-22 00:30:17 +02:00

7 commits