tegwick
4a915ce6c7
T02 done. Deployed user-engine digest c501aeb2 reads the projected flex-auth token per decision (verified in the running container); flex-auth-user-engine 138aa347 serves with caller-auth enforce. Probes: valid 200 decision:d9aef25f08e17b84, missing token 401, wrong-system 403. Closes manifest drift: runtime.yaml pinned e3b5f65b, the digest T01 warned against, while the cluster ran c501aeb2. Re-applying it would have rolled the portal back to an image that cannot authenticate to a PDP now in enforce. kubectl diff is now empty. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| archived | ||
| ADHOC-2026-07-02.md | ||
| ADHOC-2026-08-14.md | ||
| NET-WP-0020-openbao-unseal-custody-and-ssh-automation.md | ||
| NK-WP-0009-netkingdom-security-pattern-tutorials.md | ||
| NK-WP-0011-enterprise-federation-saml.md | ||
| NK-WP-0021-activity-core-ops-sso-operators.md | ||
| NK-WP-0022-railiance01-identity-cutover-and-coulombcore-retirement.md | ||
| NK-WP-0023-user-engine-portal-platform-integration.md | ||
| NK-WP-0024-user-engine-portal-integration-expansion.md | ||
| NK-WP-0025-public-self-registration-and-application-jit.md | ||
| NK-WP-0026-flex-auth-caller-identity-rollout.md | ||