coulomb/key-cape
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

KEY-WP-0045, KEY-WP-0046: hub IDs written back by fix-consistency

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 896183@bnt-lap001
Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2
This commit is contained in:
tegwick 2026-10-31 10:25:35 +01:00
parent e2b5fa1442
commit 731a6d7096
2 changed files with 7 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
workplans/KEY-WP-0045-service-identity-facts-export.md
View file

@ -11,6 +11,7 @@ created: "2026-10-28"
updated: "2026-10-28"
flavor: extension
depends_on: []
state_hub_workstream_id: "7758f8d8-98be-5d0d-9d68-eba3ba34bc56"
---
Accepted from net-kingdom NK-WP-0054-T04 (State Hub message 74fdd863). NetKingdom's
@ -25,6 +26,7 @@ deployment or registers anything.
id: KEY-WP-0045-T01
status: done
priority: high
state_hub_task_id: "0e6052f1-ff8f-58e3-b071-f1fd3ac243b2"
```
`keycape identity-facts --config PATH` (`src/cmd/keycape/identityfacts.go`) and
@ -44,6 +46,7 @@ surfaces. Credential fields and secret reference names are never copied. Tests:
id: KEY-WP-0045-T02
status: wait
priority: medium
state_hub_task_id: "8734e8a5-cc0b-5024-8647-8edcfb51dfe0"
```
The deployed config is the `config.yaml` key of Secret `sso/keycape-config`, and the
@ -63,6 +66,7 @@ The output is value-safe and can be handed to NetKingdom. Waiting on the founder
id: KEY-WP-0045-T03
status: todo
priority: medium
state_hub_task_id: "966a1e75-a6b9-56bd-bc8a-7a53b9eac7bf"
```
The NetKingdom reference config binds LLDAP as `uid=admin,ou=people,...`, the

3
workplans/KEY-WP-0046-directory-bind-password-env.md
View file

@ -11,6 +11,7 @@ created: "2026-10-31"
updated: "2026-10-31"
flavor: extension
depends_on: []
state_hub_workstream_id: "6feba59b-cd6f-5903-bc73-ed0241ce7f45"
---
Accepted from net-kingdom NK-WP-0056-T04 (founder decision 2026-10-31: environment override, implemented by
@ -25,6 +26,7 @@ key, as client secrets already are (`secretRef: env:...`).
id: KEY-WP-0046-T01
status: done
priority: high
state_hub_task_id: "abc4b0d0-3b65-5dbb-9900-80ca17b9932a"
```
`config.Load` applies `KEYCAPE_LLDAP_BIND_PW` (the name `lldap-export` already reads): used when `bindPW` is
@ -41,6 +43,7 @@ with an error that names neither value. `Config.LLDAPBindPWSource` records the s
id: KEY-WP-0046-T02
status: todo
priority: high
state_hub_task_id: "16e60917-d760-50b8-94b6-32b947f37dd9"
```
The Forgejo workflow builds the image from `main`. Record the digest here and in net-kingdom NK-WP-0056-T04;