Commit graph

  • a826d789ee chore(consistency): sync task status from DB [auto] tegwick 2026-05-17 12:24:35 +02:00
  • 5c21cd7b18 chore(consistency): sync task status from DB [auto] tegwick 2026-05-17 12:24:35 +02:00
  • 81fe5b7381 chore(consistency): sync task status from DB [auto] tegwick 2026-05-17 12:24:35 +02:00
  • 3cffff1d42 chore(consistency): sync task status from DB [auto] tegwick 2026-05-17 12:23:12 +02:00
  • 64a112f70c Document recursive platform security architecture tegwick 2026-05-17 12:18:29 +02:00
  • 88fdb89e7d Formalized repo intent to INTENT.md tegwick 2026-05-03 19:38:55 +02:00
  • fafa3c83d1 chore(consistency): sync task status from DB [auto] tegwick 2026-05-02 17:32:24 +02:00
  • 9009ca6b56 Net Kingdom cluster deployment finished tegwick 2026-05-02 17:28:44 +02:00
  • 576cf0d95b Local Identity OICD bootstrap tegwick 2026-05-02 16:58:44 +02:00
  • d8fea09de7 chore(consistency): sync task status from DB [auto] tegwick 2026-05-01 23:20:21 +02:00
  • f172f50f95 chore(consistency): sync task status from DB [auto] tegwick 2026-05-01 23:05:42 +02:00
  • d13a2b9b39 Scope update from repo-scoping refactor tegwick 2026-05-01 12:28:04 +02:00
  • 69763056fa chore(session): read .custodian-brief.md before MCP call in session init tegwick 2026-03-26 17:48:52 +01:00
  • 4942ee1bba chore(consistency): sync task status from DB [auto] tegwick 2026-03-26 17:47:51 +01:00
  • 8612e6b8a2 Decision for KeyCape Implementation Language Go tegwick 2026-03-26 09:21:17 +01:00
  • c054241a5c feat(t09): backup, break-glass, DR drill — NK-WP-0003-T09 done Bernd Worsch 2026-03-25 23:56:40 +00:00
  • 4c47c9035f chore(workplan): NK-WP-0003 T04+T08 — testuser provisioned, pi-admin TOTP deferred Bernd Worsch 2026-03-25 02:54:11 +00:00
  • 331eeaf378 fix(lldap): fix gql() brace bug + use LDAP for password setting Bernd Worsch 2026-03-25 02:42:15 +00:00
  • 3a76774dec feat(lldap): add --test flag to create-user.sh for auto-derived passwords Bernd Worsch 2026-03-25 02:29:58 +00:00
  • ca69f6bb73 fix(lldap): use env vars in create-user.sh to avoid shell injection Bernd Worsch 2026-03-25 02:27:01 +00:00
  • e802fe3a9d feat(lldap): add create-user.sh for user provisioning Bernd Worsch 2026-03-25 02:14:42 +00:00
  • 35fa3a5767 fix(privacyidea): create pi-admin-all-rights policy in bootstrap-admin.sh Bernd Worsch 2026-03-25 02:11:39 +00:00
  • afbf968c76 fix(privacyidea): bootstrap-realm scope fixes + netpol for PI→LLDAP Bernd Worsch 2026-03-25 02:10:53 +00:00
  • 88bbd585fd fix(privacyidea): rename realm netkingdom → coulomb in bootstrap-realm.sh Bernd Worsch 2026-03-25 02:03:38 +00:00
  • c0e330ee4e fix(privacyidea): disable response signing + raise rate limit to unblock login Bernd Worsch 2026-03-25 01:55:10 +00:00
  • 23e0b43318 fix(netpol): allow Traefik→ACME solver pods; mark T02–T07 done on RAILIANCE01 Bernd Worsch 2026-03-25 00:56:53 +00:00
  • df09dd42f4 feat(close): mark NK-WP-0003 T08/T08a/T08b done — acceptance tests passing tegwick 2026-03-25 11:52:11 +01:00
  • eebaa4fc81 chore(workplan): add T08a (DNS records) and T08b (Go install) tasks Bernd Worsch 2026-03-22 00:40:40 +00:00
  • d1fd73e7ed chore(workplan): NK-WP-0003-T08 blocked — DNS records + Go missing Bernd Worsch 2026-03-22 00:36:56 +00:00
  • c8c6efbc55 chore(workplan): NK-WP-0003-T07 done — KeyCape running Bernd Worsch 2026-03-22 00:32:45 +00:00
  • 880f89bf98 fix(keycape): NK-WP-0003-T07 — fix deployment image + add demo-app client Bernd Worsch 2026-03-22 00:30:58 +00:00
  • d0629e7f20 chore(workplan): NK-WP-0003-T07 blocked — awaiting GHCR image from key-cape Bernd Worsch 2026-03-21 22:24:32 +00:00
  • f2f07871eb fix(sso-mfa): commit T02–T06 fixes and workplan status updates Bernd Worsch 2026-03-21 20:25:03 +00:00
  • a60f4fc834 chore(workplan): NK-WP-0003-T04 done — privacyIDEA deployed and bootstrapped Bernd Worsch 2026-03-21 12:13:52 +00:00
  • 59ba9e6fe1 fix(creds-bootstrap): harden agent bootstrap for non-interactive execution Bernd Worsch 2026-03-21 12:11:13 +00:00
  • 56036cd4be chore(creds): bootstrap complete [agent NK-WP-0005] Bernd Worsch 2026-03-21 12:10:53 +00:00
  • 329f086743 chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 12:09:53 +00:00
  • aa0edabb81 chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 11:43:02 +00:00
  • 49ded70e4b chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 11:37:13 +00:00
  • eb7c21a00c chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 11:34:50 +00:00
  • 152c2aac72 chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 11:24:38 +00:00
  • daeeb863cb chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 11:22:53 +00:00
  • ca853a84b7 chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 10:59:13 +00:00
  • 5d032db3dd chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 10:51:47 +00:00
  • 0ea05b302c chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 10:50:22 +00:00
  • 963a4700ef chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 10:44:37 +00:00
  • 33b9b93dba chore(creds): encrypted secrets [agent NK-WP-0005] Bernd Worsch 2026-03-21 10:42:39 +00:00
  • f227dfbd3d fix(privacyidea): add PI_ADDRESS/PI_PORT; switch readiness probe to tcpSocket Bernd Worsch 2026-03-21 10:41:13 +00:00
  • 9587d14803 fix(privacyidea): override PRIVACYIDEA_CONFIGFILE to use mounted pi.cfg Bernd Worsch 2026-03-21 09:43:35 +00:00
  • bececac7b8 fix(privacyidea): correct image to ghcr.io/gpappsoft, port 5001→8080 Bernd Worsch 2026-03-21 09:37:38 +00:00
  • bcae4bc6dd fix(workplans): portable key-cape path in NK-WP-0003-T08; add /creds-init skill tegwick 2026-03-21 10:01:14 +01:00
  • 0670e17b42 chore(workplans): revise workplans post NK-WP-0005 Bernd Worsch 2026-03-21 08:47:44 +00:00
  • 95656f2324 feat(creds): NK-WP-0005 — agent-driven credential bootstrap Bernd Worsch 2026-03-21 08:38:52 +00:00
  • 8db000e5f0 feat(workplan): NK-WP-0005 — agent-driven credential bootstrap tegwick 2026-03-21 09:25:36 +01:00
  • b4a3a5966f chore(consistency): NK-WP-0004 complete — correct regressed task statuses tegwick 2026-03-21 09:19:37 +01:00
  • 6fdfe8a669 chore Bernd Worsch 2026-03-21 00:15:58 +00:00
  • 01c8a07f3a fix(sso-mfa): NK-WP-0003-T04 — correct privacyIDEA image and port Bernd Worsch 2026-03-20 23:54:18 +00:00
  • c10d7d2f8a feat(creds): implement NK-WP-0004 Credential Management Foundation Bernd Worsch 2026-03-20 23:39:35 +00:00
  • a96d72193c New Workplans tegwick 2026-03-21 00:23:19 +01:00
  • 2bbe328aec docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff) Bernd Worsch 2026-03-20 17:16:35 +00:00
  • bee0936d5d docs(sso-mfa): fix stale Keycloak refs and add T04 apply section to WORKPLAN Bernd Worsch 2026-03-20 07:33:47 +00:00
  • a375b3814d fix(sso-mfa): use ipWhiteList for Traefik v2 in LLDAP and privacyIDEA middleware Bernd Worsch 2026-03-20 07:28:06 +00:00
  • 6d25d088d7 feat(sso-mfa): T02/T03 live apply — age-encrypted secrets, CNPG cluster (NK-WP-0001-T02/T03) Bernd Worsch 2026-03-20 02:57:41 +00:00
  • 0d5d12cb67 Added provided capabilities section tegwick 2026-03-20 01:01:52 +01:00
  • 6c062e1295 feat(sso-mfa): T07/T08 user mgmt, backups, DR & break-glass (NK-WP-0001-T07/T08) Bernd Worsch 2026-03-19 09:17:03 +00:00
  • 69e900ddb1 feat(sso-mfa): T06 realm config & MFA flow manifests (NK-WP-0001-T06) Bernd Worsch 2026-03-19 09:04:07 +00:00
  • c0e17611cc chore(sso-mfa): mark T05 complete in WORKPLAN.md Bernd Worsch 2026-03-19 08:32:35 +00:00
  • 0754dc32e6 feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05) Bernd Worsch 2026-03-19 08:31:51 +00:00
  • d0ed7d9cd6 feat(sso-mfa): T05 Keycloak manifests (NK-WP-0001-T05) Bernd Worsch 2026-03-19 02:00:51 +00:00
  • 1d94652ba1 feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) Bernd Worsch 2026-03-19 01:22:41 +00:00
  • 87d85261ca docs: add SCOPE.md for rapid orientation tegwick 2026-03-17 23:10:45 +01:00
  • 8929bf65bc feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03) tegwick 2026-03-05 09:22:13 +01:00
  • 2ebb231f19 custodian integration and some cleanuo tegwick 2026-03-04 23:31:28 +01:00
  • 7c3cde06b5 docs: introduce CONFIG.md config point registry (CP-NK-001) tegwick 2026-03-02 11:47:14 +01:00
  • ee794a61ab feat(sso-mfa): T02 K8s foundations manifests (NK-WP-0001-T02) tegwick 2026-03-02 09:49:39 +01:00
  • c5761884f4 feat(sso-mfa): Phase 0a bootstrap tooling (NK-WP-0001-T01) tegwick 2026-03-02 09:01:50 +01:00
  • 52d44daec2 refactor(local-identity): post-Stage4 cleanups and micro-fixes tegwick 2026-03-02 08:25:21 +01:00
  • 3890dca25d chore(workplan): mark NK-WP-0002 fully complete (all 4 stages done) tegwick 2026-03-02 08:07:20 +01:00
  • e7bafd69fc feat(local-identity): Stage 4 — security hardening (NK-WP-0002-T04) tegwick 2026-03-02 08:06:56 +01:00
  • ae348d0e54 docs(decisions): record D4 (ESO) and D5 (local-identity in-repo) tegwick 2026-03-02 01:06:58 +01:00
  • ec4626fb84 chore(workplan): mark NK-WP-0002-T03 done, record commit hash tegwick 2026-03-02 01:06:01 +01:00
  • d35823df08 feat(local-identity): Stage 3 — minimal native OIDC provider (NK-WP-0002-T03) tegwick 2026-03-02 01:05:50 +01:00
  • 25c92863cf chore(workplan): mark NK-WP-0002-T02 done, record commit hash tegwick 2026-03-02 00:24:04 +01:00
  • dad8365e6a feat(local-identity): Stage 2 — Keycloak export & bootstrap integration (NK-WP-0002-T02) tegwick 2026-03-02 00:23:39 +01:00
  • 666a56f4ed feat(local-identity): add --username and --fullname overrides to init tegwick 2026-03-02 00:11:04 +01:00
  • 45cba35054 chore(workplan): mark NK-WP-0002-T01 done (Stage 1 complete) tegwick 2026-03-02 00:02:40 +01:00
  • 4491beaffe feat(local-identity): implement Stage 1 — core file store (NK-WP-0002-T01) tegwick 2026-03-02 00:01:54 +01:00
  • 6ed0061962 feat(local-identity): add NK-WP-0002 workplan and LocalIdentity.md tegwick 2026-03-01 23:49:06 +01:00
  • 873fbcf052 docs(workplan): add D4/D5 decisions, T02 prerequisite, EP-NK-001 reference tegwick 2026-03-01 23:11:51 +01:00
  • 534906d509 docs(workplan): update NK-WP-0001 with resolved decisions D1/D2/D3 tegwick 2026-03-01 22:51:11 +01:00
  • 004a8d6e6b Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan tegwick 2026-02-28 17:21:51 +01:00
  • a852627f0c Initial commit Coulomb Social 2026-02-28 09:41:41 +00:00