Open security core for dev sec ops on kubernetes
Find a file
Bernd Worsch 1d94652ba1 feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04)
Deploy privacyIDEA (MFA core) in the mfa namespace:
- pvc.yaml: privacyidea-data (5Gi) and privacyidea-logs (2Gi)
- configmap.yaml: pi.cfg reading secrets from env vars
- deployment.yaml: Deployment + ClusterIP Service (port 8080)
- middleware.yaml: Traefik RateLimit + admin IP AllowList
- ingress.yaml: pink.coulomb.social (portal + admin), pink-account.coulomb.social (self-service)
- create-secrets.sh: creates privacyidea-config Secret
- enckey-bootstrap.sh: post-deploy key extraction + DR Secrets
- bootstrap-admin.sh: pi-admin, trigger-admin, privacyidea-trigger-admin Secret
- verify-t04.sh: 8-section done-criteria checker

Config points CP-NK-002 (pink.coulomb.social) and CP-NK-003
(pink-account.coulomb.social) registered in CONFIG.md.

pink = PrivacyIDEA Net Knights (project mnemonic).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 01:22:41 +00:00
docs feat(local-identity): Stage 4 — security hardening (NK-WP-0002-T04) 2026-03-02 08:06:56 +01:00
local-identity refactor(local-identity): post-Stage4 cleanups and micro-fixes 2026-03-02 08:25:21 +01:00
sso-mfa feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) 2026-03-19 01:22:41 +00:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) 2026-03-19 01:22:41 +00:00
.gitignore feat(sso-mfa): Phase 0a bootstrap tooling (NK-WP-0001-T01) 2026-03-02 09:01:50 +01:00
CLAUDE.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
CONFIG.md feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) 2026-03-19 01:22:41 +00:00
DECISIONS.md docs(decisions): record D4 (ESO) and D5 (local-identity in-repo) 2026-03-02 01:06:58 +01:00
LICENSE Initial commit 2026-02-28 09:41:41 +00:00
README.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
SCOPE.md docs: add SCOPE.md for rapid orientation 2026-03-17 23:10:45 +01:00

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.