coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin KeyCape main-11ce29a (fresh-login fix) as deployed
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Operator-run rollout 2026-09-23 of key-cape@11ce29a (KEY-WP-0033-T02):
prompt=login now reaches Authelia as max_age=10 and KeyCape enforces
freshness itself. Post-rollout: verify-openbao-client PASS; Vergabe
callback+PKCE 302, wrong callback 400, missing PKCE 400.
Rollback digest: sha256:db2c5a13a47839049349e881c8d19bc39f720ee69d8518f9f2eba2b1f98af9d5

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 299762@bnt-lap001
Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
This commit is contained in:
tegwick 2026-09-23 22:12:14 +02:00
parent 352bc6737a
commit 8ee0f8bf04
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sso-mfa/k8s/keycape/deployment.yaml
View file

@ -52,7 +52,7 @@ spec:
- name: keycape
# Image published to the self-hosted Forgejo OCI registry (KEY-WP-0002).
# KEY-WP-0012: canonical OIDC subject resolution for /userinfo.
image: forgejo.coulomb.social/coulomb/key-cape@sha256:db2c5a13a47839049349e881c8d19bc39f720ee69d8518f9f2eba2b1f98af9d5
image: forgejo.coulomb.social/coulomb/key-cape@sha256:8dc35801d1d2b0905a43530c40b1fed0107fc179141fe5b2b614c52c01714fc9
imagePullPolicy: IfNotPresent
ports: