Open security core for dev sec ops on kubernetes
Find a file
Bernd Worsch 59ba9e6fe1 fix(creds-bootstrap): harden agent bootstrap for non-interactive execution
- creds-bootstrap-agent.sh: skip Phase 3 if all secrets already applied
  (avoids CNPG SSL connection drops from repeated reconciliation)
- creds-bootstrap-agent.sh: wait for rollout to complete after restart
  before running enckey/admin bootstrap (fixes race with old pod)
- creds-bootstrap-agent.sh: only restart privacyIDEA when Phase 3 ran
- create-pi-token.sh: use env-var + retry for token fetch (no heredoc
  stdin; handles transient 500 from idle connection pool)
- create-pi-token.sh: create keycape-pi-token K8s Secret after fetching
- creds-verify.sh: map keycape-pi-token to secrets_applied.keycape
  (not pi_admin_created, which caused spurious Phase 5 re-runs)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-21 12:11:13 +00:00
.claude/commands fix(workplans): portable key-cape path in NK-WP-0003-T08; add /creds-init skill 2026-03-21 10:01:14 +01:00
.githooks feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
canon/standards feat(creds): NK-WP-0005 — agent-driven credential bootstrap 2026-03-21 08:38:52 +00:00
docs feat(local-identity): Stage 4 — security hardening (NK-WP-0002-T04) 2026-03-02 08:06:56 +01:00
keys feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
local-identity refactor(local-identity): post-Stage4 cleanups and micro-fixes 2026-03-02 08:25:21 +01:00
sso-mfa fix(creds-bootstrap): harden agent bootstrap for non-interactive execution 2026-03-21 12:11:13 +00:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans fix(workplans): portable key-cape path in NK-WP-0003-T08; add /creds-init skill 2026-03-21 10:01:14 +01:00
.gitignore feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
.sops.yaml feat(creds): implement NK-WP-0004 Credential Management Foundation 2026-03-20 23:39:35 +00:00
CLAUDE.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
CONFIG.md feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05) 2026-03-19 08:31:51 +00:00
DECISIONS.md docs(decisions): record D4 (ESO) and D5 (local-identity in-repo) 2026-03-02 01:06:58 +01:00
LICENSE Initial commit 2026-02-28 09:41:41 +00:00
Makefile feat(creds): NK-WP-0005 — agent-driven credential bootstrap 2026-03-21 08:38:52 +00:00
README.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
SCOPE.md Added provided capabilities section 2026-03-20 01:01:52 +01:00

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.