tegwick
098c2c7810
Founder-run steps 1-10, verify --old-admin-retired pass. Evidence and deviations in docs/evidence/2026-10-30-nk54-bind-split/. Runbook: export the admin KUBECONFIG and decrypt the sealed custody copy first. Finding: custody AUTHELIA_KEYCAPE_CLIENT_SECRET is stale against the live hash. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 620478@bnt-lap001 Assistant-Session: 944e8353-7102-4bc8-affe-84586a10f2d0
59 lines
1.3 KiB
JSON
59 lines
1.3 KiB
JSON
{
|
|
"command": "verify",
|
|
"endpoint_sha256": "21b7c63da95eb01178305e49af9b3143295607b8ad68c522d1fa9545b7ef4d9f",
|
|
"observed_at": "2026-10-30T17:46:48.728129+00:00",
|
|
"result": {
|
|
"accounts": {
|
|
"admin": {
|
|
"exists": true,
|
|
"in_lldap_admin": true
|
|
},
|
|
"ld-admin": {
|
|
"action": "ok",
|
|
"exists": true,
|
|
"groups": [
|
|
"lldap_admin"
|
|
]
|
|
},
|
|
"svc-authelia": {
|
|
"action": "ok",
|
|
"exists": true,
|
|
"groups": [
|
|
"lldap_strict_readonly"
|
|
]
|
|
},
|
|
"svc-keycape": {
|
|
"action": "ok",
|
|
"exists": true,
|
|
"groups": [
|
|
"lldap_strict_readonly"
|
|
]
|
|
},
|
|
"svc-privacyidea": {
|
|
"action": "ok",
|
|
"exists": true,
|
|
"groups": [
|
|
"lldap_strict_readonly"
|
|
]
|
|
},
|
|
"svc-provisioner": {
|
|
"action": "ok",
|
|
"exists": true,
|
|
"groups": [
|
|
"lldap_admin"
|
|
]
|
|
}
|
|
},
|
|
"signs_in": {
|
|
"ld-admin": true,
|
|
"svc-authelia": true,
|
|
"svc-keycape": true,
|
|
"svc-privacyidea": true,
|
|
"svc-provisioner": true
|
|
},
|
|
"verdict": "pass"
|
|
},
|
|
"schema": "netkingdom.lldap-bind-split.v1",
|
|
"task": "NK-WP-0054-T05",
|
|
"values_recorded": false
|
|
}
|