tegwick 21c2a2f5d5 Let the account site read an existing Authelia sign-in. ... The account site forwards the caller's session cookie to Authelia GET /api/state. Allow that one path from the user-engine pods to Authelia port 9091. Assistant: grok Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f		2026-09-27 00:22:53 +02:00
..
bootstrap	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof	2026-07-02 22:08:33 +02:00
k8s	Let the account site read an existing Authelia sign-in.	2026-09-27 00:22:53 +02:00
WORKPLAN.md	docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)	2026-03-20 17:16:35 +00:00