Add KeyCape login overlay gateway for OpenBao browser UI

Streamline bao.coulomb.social login as "Sign in with KeyCape" via a versioned
nginx gateway that injects overlay assets and proxies to OpenBao. Disable chart
ingress in favor of the overlay ingress, wire make openbao-deploy, and add
openbao-verify-login-overlay with upstream drift detection.
This commit is contained in:
2026-06-19 20:28:16 +02:00
parent 665d43386f
commit 6ddf4e56b4
14 changed files with 728 additions and 22 deletions

View File

@@ -0,0 +1,9 @@
{
"namespace": "",
"method": "oidc",
"mount": "netkingdom",
"role": "platform-admin",
"title": "Sign in with KeyCape",
"signInLabel": "Sign in with KeyCape",
"banner": "Platform operators authenticate through KeyCape at kc.coulomb.social."
}