net-kingdom

Files

tegwick ab79a32eba Cancel NK-WP-0001-T04; extract Keycloak federation into NK-WP-0011

NK-WP-0001-T04 (privacyIDEA, Keycloak path) -> cancelled, superseded by
NK-WP-0003-T04 in the deployed KeyCape stack. T05-T08 (Keycloak SSO,
realm/MFA flow, user mgmt, DR) -> cancelled and migrated to NK-WP-0011.

NK-WP-0011 reframes the deferred Keycloak work as expanded-mode enterprise
federation: Keycloak as an identity broker for Entra ID / AD / SAML that
issues IAM Profile-conformant tokens, refined against the current stack
(OpenBao runtime secrets, CloudNativePG, flex-auth/Topaz PDP, recursive
platform/tenant model) rather than the original greenfield assumptions.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-20 23:48:51 +02:00

NK-WP-0001-sso-mfa-platform.md

Cancel NK-WP-0001-T04; extract Keycloak federation into NK-WP-0011

2026-05-20 23:48:51 +02:00

NK-WP-0002-local-identity.md

feat(sso-mfa): T03 PostgreSQL manifests (NK-WP-0001-T03)

2026-03-05 09:22:13 +01:00

NK-WP-0003-keycape-privacyidea-cluster-deployment.md

Net Kingdom cluster deployment finished

2026-05-02 17:28:44 +02:00

NK-WP-0004-credential-management-foundation.md

Add OpenBao runtime secret authority; complete NK-WP-0006/0007/0008