Founder-run steps 1-10, verify --old-admin-retired pass. Evidence and deviations in docs/evidence/2026-10-30-nk54-bind-split/. Runbook: export the admin KUBECONFIG and decrypt the sealed custody copy first. Finding: custody AUTHELIA_KEYCAPE_CLIENT_SECRET is stale against the live hash. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 620478@bnt-lap001 Assistant-Session: 944e8353-7102-4bc8-affe-84586a10f2d0
17 lines
430 B
JSON
17 lines
430 B
JSON
{
|
|
"command": "prepare-custody",
|
|
"endpoint_sha256": null,
|
|
"observed_at": "2026-10-30T17:39:01.128334+00:00",
|
|
"result": {
|
|
"changed_keys": [
|
|
"LLDAP_LDAP_USER_PASS",
|
|
"LLDAP_SVC_AUTHELIA_PASS",
|
|
"LLDAP_SVC_KEYCAPE_PASS",
|
|
"LLDAP_SVC_PRIVACYIDEA_PASS",
|
|
"LLDAP_SVC_PROVISIONER_PASS"
|
|
]
|
|
},
|
|
"schema": "netkingdom.lldap-bind-split.v1",
|
|
"task": "NK-WP-0054-T05",
|
|
"values_recorded": false
|
|
}
|