coulomb/net-kingdom

generated from coulomb/repo-seed

Go to file

Bernd Worsch c054241a5c feat(t09): backup, break-glass, DR drill — NK-WP-0003-T09 done

- Apply SQLite backup CronJobs (LLDAP, Authelia, privacyIDEA) — all verified running
- Fix authelia-backup: remove scale-down/up dance; concurrent local-path PVC mount
  works on single-node k3s, sqlite3 .backup is safe for concurrent access
- Fix privacyidea-backup: add supplementalGroups: [999] so uid=1000 can read enckey
- Add allow-backup-to-kube-api NetworkPolicy (backup pod → 10.43.0.1:443)
- Create break-glass LLDAP account (net-kingdom-admins); fix ((PASS++)) set-e trap
- SQLite restore drill: LLDAP backup valid (2 users, all tables)
- verify-t08.sh: PASS=15, FAIL=0; fix counter bug + enckey PVC path (/etc/privacyidea)
- Update DR-RUNBOOK.md Authelia restore procedure
- T09 deferred: CNPG backup (needs MinIO/S3), Prometheus (needs kube-prometheus-stack)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-25 23:56:40 +00:00

.claude/commands

fix(workplans): portable key-cape path in NK-WP-0003-T08; add /creds-init skill

2026-03-21 10:01:14 +01:00

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

canon/standards

feat(creds): NK-WP-0005 — agent-driven credential bootstrap

2026-03-21 08:38:52 +00:00

feat(local-identity): Stage 4 — security hardening (NK-WP-0002-T04)

2026-03-02 08:06:56 +01:00

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

refactor(local-identity): post-Stage4 cleanups and micro-fixes

2026-03-02 08:25:21 +01:00

feat(t09): backup, break-glass, DR drill — NK-WP-0003-T09 done

2026-03-25 23:56:40 +00:00

Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan

2026-02-28 17:21:51 +01:00

feat(t09): backup, break-glass, DR drill — NK-WP-0003-T09 done

2026-03-25 23:56:40 +00:00

.gitignore

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

.sops.yaml

feat(creds): implement NK-WP-0004 Credential Management Foundation

2026-03-20 23:39:35 +00:00

CLAUDE.md

Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan

2026-02-28 17:21:51 +01:00

CONFIG.md

feat(sso-mfa): T05 SSO stack pivot — Keycloak → Authelia + LLDAP + KeyCape (NK-WP-0001-T05)

2026-03-19 08:31:51 +00:00

DECISIONS.md

docs(decisions): record D4 (ESO) and D5 (local-identity in-repo)

2026-03-02 01:06:58 +01:00

LICENSE

Initial commit

2026-02-28 09:41:41 +00:00

Makefile

feat(creds): NK-WP-0005 — agent-driven credential bootstrap

2026-03-21 08:38:52 +00:00

README.md

Add CLAUDE.md, wiki protoplans, and NK-WP-0001 workplan

2026-02-28 17:21:51 +01:00

SCOPE.md

Added provided capabilities section

2026-03-20 01:01:52 +01:00

README.md

NetKingdom

NetKingdom provides a dynamic self optimizing full circle security-platform for kubernetes deployed IT-infrastructures.