coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record OIDC network policy correction
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source
This commit is contained in:
tegwick 2026-07-29 21:41:20 +02:00
parent 8e7229ae68
commit 00d3a9b508
1 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/NK-WP-0023-user-engine-portal-platform-integration.md
View file

@ -107,6 +107,12 @@ envelope. KeyCape `90a2078` now maps that group explicitly to
tenant-admin mappings remain tenant scoped. The fixed image is Ready on tenant-admin mappings remain tenant scoped. The fixed image is Ready on
railiance01. railiance01.
The subsequent live MFA callback exposed a missing destination-side
NetworkPolicy: user-engine allowed egress to KeyCape, but the SSO default deny
had no matching ingress. Commit `8e7229a` adds the namespace-and-pod-scoped
`:8080` rule plus verifier coverage. After applying it, an in-pod discovery
request from user-engine to KeyCape returns HTTP 200.
## T04 - Integrate authorization, email, audit, and events ## T04 - Integrate authorization, email, audit, and events
```task ```task