Open security core for dev sec ops on kubernetes
Find a file
Bernd Worsch d0ed7d9cd6 feat(sso-mfa): T05 Keycloak manifests (NK-WP-0001-T05)
Deploys Keycloak (SSO core) in the sso namespace.

Files:
  sso-mfa/k8s/keycloak/pvc.yaml          — keycloak-data PVC (build cache)
  sso-mfa/k8s/keycloak/middleware.yaml   — rate-limit, admin-allowlist, HSTS
  sso-mfa/k8s/keycloak/deployment.yaml   — Deployment + Service; init container
                                           downloads privacyIDEA provider JAR
  sso-mfa/k8s/keycloak/ingress.yaml      — Ingress for kc.coulomb.social (CP-NK-004)
  sso-mfa/k8s/keycloak/create-secrets.sh — keycloak-config Secret
  sso-mfa/k8s/keycloak/bootstrap-realm.sh— hardens master realm, creates net-kingdom realm
  sso-mfa/k8s/keycloak/README.md         — apply order, custom image guide, DR
  sso-mfa/k8s/verify-t05.sh              — T05 done-criteria verification script

Config points added: CP-NK-004 (kc.coulomb.social), CP-NK-005 (provider JAR URL).
CP-NK-005 must be set before applying deployment.yaml.

Pending: apply to live cluster, set CP-NK-005, run bootstrap-realm.sh, verify-t05.sh.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-19 02:00:51 +00:00
docs feat(local-identity): Stage 4 — security hardening (NK-WP-0002-T04) 2026-03-02 08:06:56 +01:00
local-identity refactor(local-identity): post-Stage4 cleanups and micro-fixes 2026-03-02 08:25:21 +01:00
sso-mfa feat(sso-mfa): T05 Keycloak manifests (NK-WP-0001-T05) 2026-03-19 02:00:51 +00:00
wiki Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
workplans feat(sso-mfa): T04 privacyIDEA manifests (NK-WP-0001-T04) 2026-03-19 01:22:41 +00:00
.gitignore feat(sso-mfa): Phase 0a bootstrap tooling (NK-WP-0001-T01) 2026-03-02 09:01:50 +01:00
CLAUDE.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
CONFIG.md feat(sso-mfa): T05 Keycloak manifests (NK-WP-0001-T05) 2026-03-19 02:00:51 +00:00
DECISIONS.md docs(decisions): record D4 (ESO) and D5 (local-identity in-repo) 2026-03-02 01:06:58 +01:00
LICENSE Initial commit 2026-02-28 09:41:41 +00:00
README.md Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan 2026-02-28 17:21:51 +01:00
SCOPE.md docs: add SCOPE.md for rapid orientation 2026-03-17 23:10:45 +01:00

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.