coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Prepare the openbao-admin signInDiagnosis flag rollout (NK-WP-0051-T02).
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
One-line, byte-preserving edit of sso/keycape-config with inspect, server
dry-run, attended apply and an exact rollback. No values are emitted.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1041694@bnt-lap001
Assistant-Session: 7af0bb68-ac4a-4ce3-8639-24ddd84c0b52
This commit is contained in:
tegwick 2026-10-15 00:16:15 +02:00
parent 916bc7d5b8
commit c7ad8a5bf0
4 changed files with 355 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

5
workplans/NK-WP-0051-sign-in-diagnosis.md
View file

@ -113,6 +113,11 @@ current flow. The page has one action, continue, and a line that says how
to sign in as someone else. A groups
refusal from OpenBao then follows a screen that already named the uid.
The live flag is set with
`sso-mfa/k8s/keycape/openbao-signin-diagnosis-rollout.py` (inspect, server
dry-run, attended apply on the observed uid/resourceVersion; `--operation
remove` is the rollback), followed by an issuer restart.
Acceptance is a deployed key-cape image. The log line contains no token,
code, email, or one-time password. This repo records the image digest in
the T01 document.