Bernd Worsch 880f89bf98 fix(keycape): NK-WP-0003-T07 — fix deployment image + add demo-app client ...

- deployment.yaml: image → 92.205.130.254:32166/coulomb/key-cape:latest
  (Gitea OCI registry, delivered by KEY-WP-0002; imagePullPolicy: Always)
- k3s insecure registry hosts.toml: fixed server endpoint to http:// so
  containerd does not attempt HTTPS against the plain-HTTP Gitea NodePort
- create-secrets.sh: add demo-app OIDC client (required for KeyCape to
  start; also needed for T08 acceptance tests)
- keycape-config Secret updated in-place (no re-bootstrap needed)

KeyCape pod 1/1 Running; /healthz OK; OIDC discovery live at
https://kc.coulomb.social/.well-known/openid-configuration

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-03-22 00:30:58 +00:00

..

bootstrap

fix(creds-bootstrap): harden agent bootstrap for non-interactive execution

2026-03-21 12:11:13 +00:00

k8s

fix(keycape): NK-WP-0003-T07 — fix deployment image + add demo-app client

2026-03-22 00:30:58 +00:00

WORKPLAN.md

docs(sso-mfa): record T04 blocker — wrong image reference (ImagePullBackOff)

2026-03-20 17:16:35 +00:00