diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 310fdce..869409a 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -56,7 +56,7 @@ | workplan | KEY-WP-0043 | proposed | — | workplans/KEY-WP-0043-per-run-agent-identity.md | | workplan | KEY-WP-0044 | proposed | — | workplans/KEY-WP-0044-audit-correlation-and-intake.md | | workplan | KEY-WP-0045 | active | — | workplans/KEY-WP-0045-service-identity-facts-export.md | -| workplan | KEY-WP-0046 | active | — | workplans/KEY-WP-0046-directory-bind-password-env.md | +| workplan | KEY-WP-0046 | finished | — | workplans/KEY-WP-0046-directory-bind-password-env.md | | task | ADHOC-2026-09-05-T01 | done | — | workplans/ADHOC-2026-09-05.md | | task | ADHOC-2026-09-07-T01 | done | — | workplans/ADHOC-2026-09-07.md | | task | ADHOC-2026-09-27-T01 | done | — | workplans/ADHOC-2026-09-27.md | diff --git a/workplans/KEY-WP-0046-directory-bind-password-env.md b/workplans/KEY-WP-0046-directory-bind-password-env.md index 8b77d74..a9db471 100644 --- a/workplans/KEY-WP-0046-directory-bind-password-env.md +++ b/workplans/KEY-WP-0046-directory-bind-password-env.md @@ -4,7 +4,7 @@ type: workplan title: "Directory bind password from the environment (KEYCAPE_LLDAP_BIND_PW)" domain: infotech repo: key-cape -status: active +status: finished owner: claude-code topic_slug: custodian created: "2026-10-31" @@ -55,3 +55,7 @@ net-kingdom pins it in `sso-mfa/k8s/keycape/deployment.yaml` together with the n `sha256:9e082dca78f65a4af3e92d3de3705b99e49ca9b298d9562ad0d37511c4306f8d`, pinned in net-kingdom `sso-mfa/k8s/keycape/deployment.yaml` (6c7c37a), not yet deployed. The `acceptance` job failed on this commit as it did on `a1ab8ff`; `provider-contract` passed. + +**Deployed 2026-10-31:** net-kingdom rolled out `main-e2b5fa1` with `KEYCAPE_LLDAP_BIND_PW` from the ESO Secret +`keycape-lldap-bind`, then cleared `bindPW` from `keycape-config`; KeyCape runs on the environment value alone and +`admin` signs in (net-kingdom `a656739`, railiance-platform CCR-2026-0054). Workplan finished.