coulomb/net-kingdom
Archived
2
0
Fork 0
generated from coulomb/repo-seed
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Enable KeyCape bootstrap MFA mode

Browse Source
This commit is contained in:
Bernd Worsch
2026-05-25 00:16:05 +02:00
parent 4cc22bec9e
commit 5af876eb8c
4 changed files with 17 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
sso-mfa/k8s/keycape/create-secrets.sh
View File

@@ -94,7 +94,8 @@ authelia:
privacyidea:
baseURL: "http://privacyidea.mfa.svc.cluster.local:8080"
adminToken: "${PI_ADMIN_TOKEN}"
realm: "netkingdom"
realm: "coulomb"
requireForAll: true
# ── OIDC client registrations ─────────────────────────────────────────────────
# clientType: "public" for SPAs/native apps (PKCE, no client secret)

2
sso-mfa/k8s/keycape/deployment.yaml
View File

@@ -54,7 +54,7 @@ spec:
# 2026-05-24: direct-imported into railiance01 k3s for the
# bootstrap-console OIDC/MFA rollout. Use IfNotPresent while the
# HTTP registry push/pull path is being cleaned up.
image: 92.205.130.254:32166/coulomb/key-cape:main-56d279a
image: 92.205.130.254:32166/coulomb/key-cape:main-937cb39
imagePullPolicy: IfNotPresent
ports: