feat(privacyidea): add guarded resolver reconciliation helper
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02929-244b-7391-b933-c04010e8eedb
This commit is contained in:
tegwick 2026-08-23 14:43:39 +02:00
parent edee5c28ab
commit f2e578cf3e
3 changed files with 137 additions and 0 deletions

View file

@ -126,6 +126,12 @@ material.
- A named operator window, driver, abort operator, provider authority, and
protected verification method are still required before any live action.
NetKingdom added
`sso-mfa/k8s/privacyidea/update-lldap-resolver-live.sh` as the bounded
resolver-only operation. It requires explicit `--apply` plus an interactive
terminal, passes password files by pathname to a child process, updates only
`lldap-coulomb`, and emits only a boolean result. It has not been run.
## Owner-reported cutover outcome
KeyCape reported on 2026-08-23 that its governed recovery path completed the