coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Stage the KeyCape public-origin headers on Authelia 4.38.
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: grok
Assistant-Session: 01a0e27d-3c2d-7571-a4f8-95442f282b6f
This commit is contained in:
tegwick 2026-09-27 13:52:45 +02:00
parent 928268a479
commit 5385880d19
2 changed files with 13 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

6
sso-mfa/k8s/keycape/deployment.yaml
View file

@ -51,8 +51,10 @@ spec:
containers:
- name: keycape
# Image published to the self-hosted Forgejo OCI registry (KEY-WP-0002).
# KEY-WP-0012: canonical OIDC subject resolution for /userinfo.
image: forgejo.coulomb.social/coulomb/key-cape@sha256:82f1e5ac481e4f963dbd4b05256aee75412c9e9b465d31c9356f5d17f26a6897
# NK-WP-0041-T02 path B, key-cape@3b0446e: the in-cluster token call
# sends the public HTTPS origin. Staged while Authelia stays 4.38.
# Rollback: sha256:82f1e5ac481e4f963dbd4b05256aee75412c9e9b465d31c9356f5d17f26a6897
image: forgejo.coulomb.social/coulomb/key-cape@sha256:7c99cd6c6fdf63afaf22e47dad31e20dcb3a8b2079206f198cb425047be495b3
imagePullPolicy: IfNotPresent
ports: