Bernd Worsch 331eeaf378 fix(lldap): fix gql() brace bug + use LDAP for password setting ...

Three fixes:
1. gql() default vars '${2:-{}}' — bash parsed first '}' as closing the
   parameter expansion, appending a stray '}' to every caller's vars.
   Fixed by storing '{}' in a local variable first.
2. make_vars() — add VAR_INT_KEYS support so groupId is emitted as a
   JSON integer (Int!) rather than a string, matching LLDAP's schema.
3. Password setting — LLDAP has no GraphQL mutation for admin password
   reset. Replace the broken resetUserPasswordFromAdmin mutation with
   an RFC 3062 LDAP Password Modify operation via kubectl port-forward
   to the in-cluster LLDAP service, using ldap3.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-25 11:49:26 +00:00

..

bootstrap

fix(creds-bootstrap): harden agent bootstrap for non-interactive execution

2026-03-21 12:11:13 +00:00

k8s

fix(lldap): fix gql() brace bug + use LDAP for password setting

2026-03-25 11:49:26 +00:00

WORKPLAN.md

docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)

2026-03-20 17:16:35 +00:00