tegwick
41f6916a5d
Assistant: codex Assistant-Model: gpt-5.6-luna Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
133 lines
4.4 KiB
JSON
133 lines
4.4 KiB
JSON
{
|
|
"recorded_at": "2026-09-08T21:50:10.049099+00:00",
|
|
"authorization": {
|
|
"source": "User response in this session: yes, go on",
|
|
"scope": "Prepared ten-minute temporary issuer probe; existing config read in workload, exact-state callback and cleanup",
|
|
"custody_activation_authorized": false
|
|
},
|
|
"source": {
|
|
"repo": "key-cape",
|
|
"code_commit": "6f33abddcff6cbc348ced862057973cdcc4f78ec",
|
|
"published_owner_commit": "7ecc78f4100c04f9b4ea7751240114bcc485de03",
|
|
"packet": "docs/upstream-issuer-proof.md",
|
|
"image": "forgejo.coulomb.social/coulomb/key-cape@sha256:0c85ed377cae7ae6ca5b5c56b1a52930e706b3cb78009747e42f551e869a22e4"
|
|
},
|
|
"proof": {
|
|
"audience_verified": true,
|
|
"downstream_credential_issued": false,
|
|
"issuer": "https://auth.coulomb.social",
|
|
"nonce_verified": true,
|
|
"observed_at": "2026-09-08T21:44:44Z",
|
|
"schema": "keycape.upstream-issuer-proof.v1",
|
|
"signature_verified": true,
|
|
"status": "verified",
|
|
"tokens_retained": false,
|
|
"validity_window_verified": true
|
|
},
|
|
"job": {
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"started_at": "2026-09-08T21:43:34.019545+00:00",
|
|
"created_resources": [
|
|
{
|
|
"kind": "Job",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid": "4e01daef-9184-4866-ac4d-9d61cd8d79ae"
|
|
},
|
|
{
|
|
"kind": "Service",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid": "3359ce09-cbe2-487b-b9d9-a4cc5c484047"
|
|
},
|
|
{
|
|
"kind": "NetworkPolicy",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid": "8940e5b4-3665-4395-8a0d-39b4b08ae12d"
|
|
},
|
|
{
|
|
"kind": "NetworkPolicy",
|
|
"name": "keycape-issuer-proof-532da53dc96a-authelia",
|
|
"uid": "13d72383-0864-4665-af28-eefc76452131"
|
|
},
|
|
{
|
|
"kind": "IngressRoute",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid": "7d705d80-f491-408f-a133-0bc4abd2c867"
|
|
}
|
|
]
|
|
},
|
|
"pod_evidence": [
|
|
{
|
|
"name": "keycape-issuer-proof-532da53dc96a-tgpxh",
|
|
"uid": "c9230c57-0fad-4dcf-b798-d586385db9a2",
|
|
"phase": "Succeeded",
|
|
"containers": [
|
|
{
|
|
"name": "probe",
|
|
"image": "sha256:204d8a4b04f47fa93c508b0a74c600e9954cfeab8e4e6566a8feaab327e8f793",
|
|
"imageID": "forgejo.coulomb.social/coulomb/key-cape@sha256:0c85ed377cae7ae6ca5b5c56b1a52930e706b3cb78009747e42f551e869a22e4",
|
|
"ready": false,
|
|
"state": {
|
|
"terminated": {
|
|
"exitCode": 0,
|
|
"finishedAt": "2026-09-08T21:44:44Z",
|
|
"reason": "Completed",
|
|
"startedAt": "2026-09-08T21:43:37Z"
|
|
}
|
|
}
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"browser": {
|
|
"route_head_status": 405,
|
|
"launcher_exit": 0,
|
|
"url_scope": "exact generated HTTPS issuer-proof start path"
|
|
},
|
|
"cleanup": {
|
|
"completed_at": "2026-09-08T21:45:17.886281+00:00",
|
|
"removed": [
|
|
{
|
|
"kind": "IngressRoute",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid_precondition": true
|
|
},
|
|
{
|
|
"kind": "Job",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"uid_precondition": true
|
|
},
|
|
{
|
|
"kind": "Service",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"already_absent": true
|
|
},
|
|
{
|
|
"kind": "NetworkPolicy",
|
|
"name": "keycape-issuer-proof-532da53dc96a",
|
|
"already_absent": true
|
|
},
|
|
{
|
|
"kind": "NetworkPolicy",
|
|
"name": "keycape-issuer-proof-532da53dc96a-authelia",
|
|
"already_absent": true
|
|
}
|
|
],
|
|
"all_temporary_resources_absent": true,
|
|
"production_metadata_unchanged": true,
|
|
"before": {
|
|
"production_image": "forgejo.coulomb.social/coulomb/key-cape:main-153258b",
|
|
"deployment": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f 55113259 29",
|
|
"secret": "2e94519d-1550-41c7-9701-2efe47fe1fd3 51346058"
|
|
},
|
|
"after": {
|
|
"production_image": "forgejo.coulomb.social/coulomb/key-cape:main-153258b",
|
|
"deployment": "99ddd83c-cb3f-4847-bcf8-35f1aa87627f 55113259 29",
|
|
"secret": "2e94519d-1550-41c7-9701-2efe47fe1fd3 51346058"
|
|
}
|
|
},
|
|
"config_issuer_pinned_by_this_run": false,
|
|
"custody_activated": false,
|
|
"normal_keycape_deployment_changed": false,
|
|
"downstream_mfa_or_application_login_proved": false,
|
|
"next_return": "Configuration owner ensures authelia.issuer equals the verified HTTPS issuer; named CCR reviews and attended custody/compatible image rollout remain open"
|
|
}
|