coulomb/railiance-apps
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Record approved deployment, backup and personal login blocker
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6.1-sol
Assistant-Session: 01a10e2d-a5ef-7e92-b03d-b1694e915680
This commit is contained in:
tegwick 2026-10-06 17:02:15 +02:00
parent 3f5a90995d
commit f713aa90ef
1 changed files with 35 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

36
workplans/RAPPS-WP-0015-coulomb-personal-content-release.md
View file

@ -53,7 +53,7 @@ that coulomb-social is not currently ArgoCD-managed. Publish the review branch.
```task
id: RAPPS-WP-0015-T03
status: wait
status: done
priority: high
state_hub_task_id: "2ce05439-70dc-53cf-b704-5118687857cb"
```
@ -94,3 +94,37 @@ confirms the public coulomb-social client is absent. CSOC-WP-0008-T11 prepares
its restoration and shared KeyCape restart; no live change has been made.
Existing completed apps-pg daily backup is not a paired application restore.
T03/T04 remain waiting for exact live approval and personal acceptance.
## Approved deployment receipt — 2026-10-06
Founder approved explicit proposal; decision 8bbce691-a787-4140-9cd4-df06e8635a27,
ADMINISTER @ realm:kubernetes/railiance01, activation=APPROVED.
Fresh apps-pg Backup csoc-preupgrade-20261006145351 completed 14:54:31Z before
app upgrade. Chart changes pushed to main at3f5a909. Helm atomic upgrade from
railiance01 succeeded: revision10, chart0.2.0, pinned digest above. App1/1 ready,
2Gi PVC Bound, UID/GID10001 write succeeds, zero pending migrations. Dedicated
synthetic content marker survived a fresh pod restart and was removed afterward.
Public health/landing/clipboard asset200; login302 correct issuer/client/PKCE.
Missing public OIDC client restored and KeyCape restart succeeded under same go;
authorization hands off to Authelia. Interactive tegwick sign-in remains pending
user confirmation. T03 done; T04 wait for interactive/product acceptance and
paired recovery. No productive import or apex cutover. Application receipt:
coulomb-social/docs/release/personal-account-deployed-2026-10-06.md.
## User sign-in result — 2026-10-06
The user reaches auth.coulomb.social but tegwick is rejected as wrong username
or password. Read-only directory query through the existing provisioner confirms
tegwick is present. Live Authelia username attribute is uid; its lookup supports
uid or mail. Contained recent-log inspection records a tegwick LDAP invalid-
credentials failure, without backend connection error or regulation-ban evidence
in that entry. This does not establish why the entered credential is rejected.
The app and client restoration are deployed, but personal sign-in is not accepted.
CSOC-WP-0008-T11 remains wait for human credential confirmation/recovery and a
successful fresh sign-in. The user was asked whether the same password works on
another service. No password was requested/read/exported or reset. Authelia's
current notifier is filesystem rather than SMTP: do not promise emailed recovery
or expose reset tokens from notification files. Any credential reset must use
the owning attended recovery/setup lane under a separate exact approved change.