coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: record verified identity provisioner credential repair
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a07ff8-19d0-7820-b4d0-1353833cb7fc
This commit is contained in:
tegwick 2026-09-11 22:00:37 +02:00
parent 2bc6e37f9f
commit c8ad7a85ea
4 changed files with 41 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

16
docs/evidence/2026-09-11-native-portal-repair.md
View file

@ -60,3 +60,19 @@ seconds; Playwright opened temporary pages for previously visited origins.
After the operator reported the repeated page activity, the helper was stopped
and changed to cookie-only persistence. The confirmed tenant submission was not
repeated. This was helper-induced UI disruption, not evidence of a tenant failure.
A subsequent Create login failed before directory creation because the provisioner's
LLDAP admin login returned 401. Reloading the old credential did not repair it.
The operator then ran the reviewed identity-provisioner-reconcile.py apply with
the current provider password entered only at its hidden terminal prompt. The
sanitized receipt confirms provider_login=true, consumer_login=true and
provider_password_changed=false. Secret UID c6a9e6be-5bb5-47e6-9faa-06b8d72afec3
is unchanged; its resourceVersion advanced 51345775 to 60026132.
Independent verification after the operator receipt returned reloaded-check-passed
for directory authentication and a directory read from the provisioner. Deployment
is ready 1/1 and retains image
sha256:5b460f5ca9e329e287939f4707a2bb8d5674b7f94e24cfb5f6d790f54c3f8d06.
NK-WP-0036-T04 is complete. T05 retains structured dependency errors and functional
preflight; RAPPS-WP-0014 retains the actual native user login/password-setup proof.