|
|
d3c3db612d
|
sso: recheck mas encryption bytes
|
2026-01-08 03:44:54 -03:00 |
|
|
|
8d1284412f
|
sso: validate mas encryption length
|
2026-01-08 03:43:06 -03:00 |
|
|
|
04817691c6
|
sso: strip mas secret newlines
|
2026-01-08 03:38:51 -03:00 |
|
|
|
072af083bc
|
sso: fix mas encryption secret
|
2026-01-08 03:35:40 -03:00 |
|
|
|
6e0b3c43bd
|
keycloak: rerun MAS secrets bootstrap
|
2026-01-08 02:32:31 -03:00 |
|
|
|
9d3b27e567
|
keycloak: rerun MAS secrets bootstrap
|
2026-01-08 02:25:55 -03:00 |
|
|
|
6e7118c14d
|
keycloak: use create for MAS secrets
|
2026-01-08 02:23:40 -03:00 |
|
|
|
6c99eb452e
|
keycloak: make MAS secret job idempotent
|
2026-01-08 02:21:37 -03:00 |
|
|
|
e9fb11af40
|
keycloak: allow MAS secret apply read access
|
2026-01-08 02:19:21 -03:00 |
|
|
|
afce04b9b2
|
keycloak: rerun MAS secrets bootstrap
|
2026-01-08 02:17:04 -03:00 |
|
|
|
2aea7e3601
|
keycloak: retry MAS secret bootstrap
|
2026-01-08 02:12:40 -03:00 |
|
|
|
05848223eb
|
comms: ensure MAS secrets via keycloak admin job
|
2026-01-08 02:09:23 -03:00 |
|
|
|
55606e5b70
|
fix(portal): pin kubectl image digest
|
2026-01-04 03:40:13 -03:00 |
|
|
|
17a9a7e245
|
test(portal): sync e2e client secret
|
2026-01-04 03:35:26 -03:00 |
|
|
|
a7f68ddddb
|
test: ensure smtp probe user has email
|
2026-01-04 01:08:17 -03:00 |
|
|
|
38b4935e1d
|
test: send execute-actions-email to existing mailbox
|
2026-01-04 01:06:05 -03:00 |
|
|
|
7cbbb7e193
|
test: fix keycloak execute-actions-email probe
|
2026-01-04 00:59:24 -03:00 |
|
|
|
eb11eaff4e
|
keycloak: allow e2e client execute-actions-email
|
2026-01-04 00:58:02 -03:00 |
|
|
|
cadb0daba0
|
tests: add Keycloak email probe
|
2026-01-04 00:53:13 -03:00 |
|
|
|
b63b724b52
|
keycloak: rerun realm settings job
|
2026-01-03 18:27:29 -03:00 |
|
|
|
ab658fa064
|
keycloak: allow vaultwarden user attributes
|
2026-01-03 18:25:48 -03:00 |
|
|
|
70980a2ca9
|
keycloak: add token exchange E2E smoke test
|
2026-01-03 15:58:44 -03:00 |
|
|
|
e73baa6ecd
|
keycloak: robust policy lookup for token exchange job
|
2026-01-03 15:50:43 -03:00 |
|
|
|
3f19d01d00
|
keycloak: make token exchange permissions job idempotent
|
2026-01-03 15:48:40 -03:00 |
|
|
|
cb37756f5f
|
keycloak: fix token exchange permission patching
|
2026-01-03 15:46:26 -03:00 |
|
|
|
1f2bddc7fe
|
keycloak: retry token exchange permissions job
|
2026-01-03 15:45:04 -03:00 |
|
|
|
df959ee17d
|
keycloak: enable fine-grained token exchange authz
|
2026-01-03 15:43:07 -03:00 |
|
|
|
b21a79dad7
|
keycloak: allow token exchange to portal
|
2026-01-03 14:48:28 -03:00 |
|
|
|
e09589ec35
|
keycloak: add portal e2e client
|
2026-01-03 14:35:23 -03:00 |
|
|
|
f1d1e1bd7d
|
keycloak: enable token exchange
|
2026-01-03 14:29:28 -03:00 |
|
|
|
c8f9b59e4a
|
keycloak: allow nextcloud mail profile attrs
|
2026-01-03 12:36:23 -03:00 |
|
|
|
747b6aacb6
|
keycloak: set bstein mailu_email
|
2026-01-03 06:15:16 -03:00 |
|
|
|
0b211520cb
|
keycloak: allow mailu_email + groups
|
2026-01-03 03:32:38 -03:00 |
|
|
|
10e322e853
|
keycloak(atlas): default TOTP required action
|
2026-01-03 01:09:14 -03:00 |
|
|
|
5437cebb9e
|
sso: provision vaultwarden users
|
2026-01-02 21:04:12 -03:00 |
|
|
|
0f26bd508e
|
keycloak(atlas): disable browser IdP redirector
|
2026-01-02 20:09:05 -03:00 |
|
|
|
21d8fc3788
|
keycloak(atlas): retry realm settings job
|
2026-01-02 20:04:47 -03:00 |
|
|
|
54d324f555
|
keycloak(atlas): harden realm settings job
|
2026-01-02 20:02:11 -03:00 |
|
|
|
503a9264c5
|
keycloak: cleanup LDAP federation
|
2026-01-02 18:45:45 -03:00 |
|
|
|
2254532642
|
keycloak: roll update with no surge
|
2026-01-02 17:15:37 -03:00 |
|
|
|
22b7e7aa66
|
keycloak: clear rollingUpdate for recreate
|
2026-01-02 17:09:24 -03:00 |
|
|
|
23a9e1ec30
|
keycloak: use recreate strategy with pvc
|
2026-01-02 17:02:59 -03:00 |
|
|
|
e2e76592a0
|
keycloak: enable debug logging
|
2026-01-02 16:57:42 -03:00 |
|
|
|
1346ccd31b
|
keycloak: repair ldap federation parentId
|
2026-01-02 14:12:20 -03:00 |
|
|
|
8a2f3c733e
|
sso: fix keycloak ldap provider parentId
|
2026-01-02 14:02:05 -03:00 |
|
|
|
de14d68fc9
|
sso: codify openldap bootstrap and keycloak federation
|
2026-01-02 13:18:32 -03:00 |
|
|
|
46d4ab6dc8
|
keycloak: apply realm smtp via api
|
2026-01-02 04:03:27 -03:00 |
|
|
|
9fa081ca36
|
keycloak: set realm smtp server
|
2026-01-02 03:58:37 -03:00 |
|
|
|
77beacec53
|
keycloak: switch realm job to kcadm
|
2026-01-02 03:55:28 -03:00 |
|
|
|
816abca2df
|
keycloak: fix realm job service URL
|
2026-01-02 03:49:19 -03:00 |
|