net-kingdom/sso-mfa
tegwick 8ee0f8bf04
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s
Pin KeyCape main-11ce29a (fresh-login fix) as deployed
Operator-run rollout 2026-09-23 of key-cape@11ce29a (KEY-WP-0033-T02):
prompt=login now reaches Authelia as max_age=10 and KeyCape enforces
freshness itself. Post-rollout: verify-openbao-client PASS; Vergabe
callback+PKCE 302, wrong callback 400, missing PKCE 400.
Rollback digest: sha256:db2c5a13a47839049349e881c8d19bc39f720ee69d8518f9f2eba2b1f98af9d5

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 299762@bnt-lap001
Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e
2026-09-23 22:12:14 +02:00
..
bootstrap NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof 2026-07-02 22:08:33 +02:00
k8s Pin KeyCape main-11ce29a (fresh-login fix) as deployed 2026-09-23 22:12:14 +02:00
WORKPLAN.md docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff) 2026-03-20 17:16:35 +00:00