28 lines
1.6 KiB
Markdown
28 lines
1.6 KiB
Markdown
|
# Demo-company sign-in live rollout
|
||
|
|
|
||
|
|
Recorded 2026-09-12T01:09:00.835106+00:00
|
||
|
|
|
||
|
|
|
||
|
|
2026-09-12 attended rollout executed after explicit operator approval. KeyCape
|
||
|
|
and password setup are Ready on the prepared digests; exact public client
|
||
|
|
registration was CAS-applied (config resourceVersion 60123977) with unrelated
|
||
|
|
config bytes/Secret data preserved. Existing portal and product client both
|
||
|
|
pass fresh-login forwarding, wrong-callback and missing-PKCE checks (6 checks).
|
||
|
|
Vergabe Helm revision 2 is Ready; identity migration completed, both PVCs remain,
|
||
|
|
and requests remain 60m CPU/256Mi memory. Eleven live product checks pass:
|
||
|
|
company welcome, anonymous gate, no-store, secure scoped CSRF, POST/CSRF-only
|
||
|
|
login start, native issuer redirect, private company/media protection and
|
||
|
|
invalid callback/confirmation rejection. Initial readback showed zero accounts,
|
||
|
|
identity mappings and staff accounts. Native invited-user sign-in/MFA and
|
||
|
|
confirmation are now requested from the operator; no user credential was used
|
||
|
|
by the agent. Recovery and two-user acceptance remain their existing tasks.
|
||
|
|
Evidence: railiance-apps/docs/evidence/2026-09-12-demo-company-sso-live.md.
|
||
|
|
|
||
|
|
| Component | Deployed digest |
|
||
|
|
| --- | --- |
|
||
|
|
| Vergabe | sha256:2cb393608a82be2851adfc27f2bf4d8ef5d709f1b0038be5d0999e38c68b039e |
|
||
|
|
| KeyCape | sha256:5f10f36a5da23ce1aaf3df9b84a8ff98d7926f34ceaa19e63bd3356adb68e01a |
|
||
|
|
| Password setup | sha256:55f744cc9bc2ec3fe23eb7175fa4b7bfcc7a29469d9b9a1a8eaefc75d790dfc6 |
|
||
|
|
|
||
|
|
Cluster UID: a553c742-0115-43d4-99a4-a5ca56fe0786. The operator explicitly approved the prepared attended rollout. Shared issuer startup is proven; authenticated recipient token/account acceptance remains pending.
|