From 731a6d709604fde50237776b56a72e056f64e05a Mon Sep 17 00:00:00 2001 From: tegwick Date: Sat, 31 Oct 2026 10:25:35 +0100 Subject: [PATCH] KEY-WP-0045, KEY-WP-0046: hub IDs written back by fix-consistency Co-Authored-By: Claude Opus 5.5 Assistant: claude-code Assistant-Model: opus Assistant-Process: 896183@bnt-lap001 Assistant-Session: 3a18c01a-3205-4d02-94db-9efff25649a2 --- workplans/KEY-WP-0045-service-identity-facts-export.md | 4 ++++ workplans/KEY-WP-0046-directory-bind-password-env.md | 3 +++ 2 files changed, 7 insertions(+) diff --git a/workplans/KEY-WP-0045-service-identity-facts-export.md b/workplans/KEY-WP-0045-service-identity-facts-export.md index 66f7551..9859c52 100644 --- a/workplans/KEY-WP-0045-service-identity-facts-export.md +++ b/workplans/KEY-WP-0045-service-identity-facts-export.md @@ -11,6 +11,7 @@ created: "2026-10-28" updated: "2026-10-28" flavor: extension depends_on: [] +state_hub_workstream_id: "7758f8d8-98be-5d0d-9d68-eba3ba34bc56" --- Accepted from net-kingdom NK-WP-0054-T04 (State Hub message 74fdd863). NetKingdom's @@ -25,6 +26,7 @@ deployment or registers anything. id: KEY-WP-0045-T01 status: done priority: high +state_hub_task_id: "0e6052f1-ff8f-58e3-b071-f1fd3ac243b2" ``` `keycape identity-facts --config PATH` (`src/cmd/keycape/identityfacts.go`) and @@ -44,6 +46,7 @@ surfaces. Credential fields and secret reference names are never copied. Tests: id: KEY-WP-0045-T02 status: wait priority: medium +state_hub_task_id: "8734e8a5-cc0b-5024-8647-8edcfb51dfe0" ``` The deployed config is the `config.yaml` key of Secret `sso/keycape-config`, and the @@ -63,6 +66,7 @@ The output is value-safe and can be handed to NetKingdom. Waiting on the founder id: KEY-WP-0045-T03 status: todo priority: medium +state_hub_task_id: "966a1e75-a6b9-56bd-bc8a-7a53b9eac7bf" ``` The NetKingdom reference config binds LLDAP as `uid=admin,ou=people,...`, the diff --git a/workplans/KEY-WP-0046-directory-bind-password-env.md b/workplans/KEY-WP-0046-directory-bind-password-env.md index ee1af19..710edc6 100644 --- a/workplans/KEY-WP-0046-directory-bind-password-env.md +++ b/workplans/KEY-WP-0046-directory-bind-password-env.md @@ -11,6 +11,7 @@ created: "2026-10-31" updated: "2026-10-31" flavor: extension depends_on: [] +state_hub_workstream_id: "6feba59b-cd6f-5903-bc73-ed0241ce7f45" --- Accepted from net-kingdom NK-WP-0056-T04 (founder decision 2026-10-31: environment override, implemented by @@ -25,6 +26,7 @@ key, as client secrets already are (`secretRef: env:...`). id: KEY-WP-0046-T01 status: done priority: high +state_hub_task_id: "abc4b0d0-3b65-5dbb-9900-80ca17b9932a" ``` `config.Load` applies `KEYCAPE_LLDAP_BIND_PW` (the name `lldap-export` already reads): used when `bindPW` is @@ -41,6 +43,7 @@ with an error that names neither value. `Config.LLDAPBindPWSource` records the s id: KEY-WP-0046-T02 status: todo priority: high +state_hub_task_id: "16e60917-d760-50b8-94b6-32b947f37dd9" ``` The Forgejo workflow builds the image from `main`. Record the digest here and in net-kingdom NK-WP-0056-T04;