net-kingdom/sso-mfa
tegwick 387f8b1c8b
All checks were successful
Build and Publish bounded-executor / build-and-push (push) Successful in 6s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Identity provider journey acceptance / provider (push) Successful in 37s
NK-WP-0056: sso ingress for the bounded executor; README and handoff follow-up
netpol-sso.yaml admits only executor pods to LLDAP 17170, KeyCape 8080 and
Authelia 9091 (never LDAP 3890); test_netpol.py pins it. Prepared, not
applied. README reflects T13. Live reads: OpenBao open to all namespaces;
approval-engine and audit-core need pod-scoped rules (requested: hub messages
39a3bffa, deea5bf8).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5502@bnt-lap001
Assistant-Session: 68b3b02f-5d0f-4e71-8421-796f62e50196
2026-10-31 18:27:30 +01:00
..
bootstrap NK-WP-0056-T04 done: svc-privacyidea written through from OpenBao; all four binds in platform custody 2026-10-31 11:19:21 +01:00
k8s NK-WP-0056: sso ingress for the bounded executor; README and handoff follow-up 2026-10-31 18:27:30 +01:00
WORKPLAN.md security: repair LDAP group callers and fail incomplete T07 acceptance 2026-10-14 01:17:35 +02:00