coulomb/coulomb-social
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Complete flex-auth PEP and document railiance packaging path

Browse source 
Local + HTTP POST /v1/check PEP with fail-closed transport errors;
shell:view enforced on /app/. Vocabulary docs for T07. Helm chart lives
in railiance-apps; Dockerfile already present for T08.
This commit is contained in:
tegwick 2026-08-09 02:00:12 +02:00
parent 0e973a91aa
commit 44439f8d8d
8 changed files with 273 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/CSOC-WP-0002-netkingdom-user-management-reestablish.md
View file

@ -227,7 +227,7 @@ Ship a minimal product surface that proves user management works:
```task
id: CSOC-WP-0002-T07
status: progress
status: done
priority: medium
state_hub_task_id: "04c13dad-1c6e-45b9-96ba-438458e2c388"
```
@ -244,6 +244,8 @@ If cluster flex-auth is not yet available for this app, deliver:
**Done when:** at least one protected action is decided via the authz port;
docs record system id and vocabulary.
2026-08-09: Local vocabulary + HTTP PEP (`POST /v1/check`) implemented; `shell:view` enforced on `/app/`. General flex-auth check Service still absent in-cluster — leave `FLEX_AUTH_BASE_URL` empty for local mode.
## T08 — Delivery-lane packaging stub
```task
@ -264,7 +266,7 @@ Align with business-app delivery lane without full production cutover:
**Done when:** image builds in CI or documented local script; deploy notes in
`docs/deploy.md`.
2026-08-09: `Dockerfile` added (uv sync, gunicorn, non-root, healthcheck). railiance-apps values still open.
2026-08-09: `Dockerfile` added; `railiance-apps` chart + values + ingress stub + Makefile targets. Image publish and env Secret still operator steps.
---