coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enable KeyCape bootstrap MFA mode

Browse source
This commit is contained in:
tegwick 2026-05-25 00:16:05 +02:00
parent 4cc22bec9e
commit 5af876eb8c
4 changed files with 17 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

3
sso-mfa/k8s/keycape/create-secrets.sh
View file

@ -94,7 +94,8 @@ authelia:
privacyidea:
baseURL: "http://privacyidea.mfa.svc.cluster.local:8080"
adminToken: "${PI_ADMIN_TOKEN}"
realm: "netkingdom"
realm: "coulomb"
requireForAll: true
# ── OIDC client registrations ─────────────────────────────────────────────────
# clientType: "public" for SPAs/native apps (PKCE, no client secret)

2
sso-mfa/k8s/keycape/deployment.yaml
View file

@ -54,7 +54,7 @@ spec:
# 2026-05-24: direct-imported into railiance01 k3s for the
# bootstrap-console OIDC/MFA rollout. Use IfNotPresent while the
# HTTP registry push/pull path is being cleaned up.
image: 92.205.130.254:32166/coulomb/key-cape:main-56d279a
image: 92.205.130.254:32166/coulomb/key-cape:main-937cb39
imagePullPolicy: IfNotPresent
ports: