tegwick 329a03d149 Roll back Authelia to pinned 4.38 after 4.39.28 broke KeyCape token exchange ... 4.39 rejects KeyCape's in-cluster http back-channel token call (invalid X-Forwarded-Proto 'http'). Operator restored the pre-upgrade DB and the 4.38 digest; incident recorded in NK-WP-0041-T02. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 299762@bnt-lap001 Assistant-Session: d3d3cea1-869c-44f1-be2a-3d6d3550e72e		2026-09-24 01:54:12 +02:00
..
bootstrap	NET-WP-0020 finished: attended-ceremony + auto-unseal-transit profiles, greenfield init/unseal proof	2026-07-02 22:08:33 +02:00
k8s	Roll back Authelia to pinned 4.38 after 4.39.28 broke KeyCape token exchange	2026-09-24 01:54:12 +02:00
WORKPLAN.md	docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)	2026-03-20 17:16:35 +00:00