coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs(sso-mfa): fix stale Keycloak refs and add T04 apply section to WORKPLAN

Browse source 
- README.md: ipAllowList → ipWhiteList (match Traefik v2 fix)
- verify-t04.sh: update success message (Keycloak → LLDAP+Authelia+KeyCape)
- WORKPLAN.md: add full T04 section with deliverables, pending steps, done-criteria

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Bernd Worsch 2026-03-20 07:33:47 +00:00
parent a375b3814d
commit bee0936d5d
3 changed files with 33 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
sso-mfa/k8s/privacyidea/README.md
View file

@ -149,7 +149,7 @@ cluster-internal and not subject to the Ingress middleware.
### Admin WebUI IP restriction
Update `middleware.yaml` `privacyidea-admin-allowlist.spec.ipAllowList.sourceRange`
Update `middleware.yaml` `privacyidea-admin-allowlist.spec.ipWhiteList.sourceRange`
to your actual VPN/office CIDRs and reapply:
```bash

2
sso-mfa/k8s/verify-t04.sh
View file

@ -212,6 +212,6 @@ elif [[ "$WARN" -gt 0 ]]; then
echo " Result: PARTIAL — T04 core is up; WARN items should be resolved before T05"
exit 0
else
echo " Result: COMPLETE — T04 done-criteria met; proceed to T05 (Keycloak)"
echo " Result: COMPLETE — T04 done-criteria met; proceed to T05 (SSO core: LLDAP+Authelia+KeyCape)"
exit 0
fi