bstein/titan-iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feature/sso-hardening #9

Merged
bstein merged 685 commits from feature/sso-hardening into main 2026-01-13 20:23:26 +00:00
Conversation 0 Commits 685 Files Changed 325 +6 -2
2 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit 6eeff1271c - Show all commits

6
scripts/tests/test_portal_onboarding_flow.py
View File

@ -387,9 +387,13 @@ def main() -> int:
if isinstance(required_actions, list): if isinstance(required_actions, list):
required = {a for a in required_actions if isinstance(a, str)} required = {a for a in required_actions if isinstance(a, str)}
missing = [name for name in ("UPDATE_PASSWORD", "VERIFY_EMAIL", "CONFIGURE_TOTP") if name not in required] missing = [name for name in ("UPDATE_PASSWORD", "VERIFY_EMAIL") if name not in required]
if missing: if missing:
raise SystemExit(f"Keycloak user missing required actions {missing}: requiredActions={sorted(required)}") raise SystemExit(f"Keycloak user missing required actions {missing}: requiredActions={sorted(required)}")
if "CONFIGURE_TOTP" in required:
raise SystemExit(
f"Keycloak user should not require CONFIGURE_TOTP at first login: requiredActions={sorted(required)}"
)
print(f"PASS: onboarding provisioning completed for {request_code} ({username})") print(f"PASS: onboarding provisioning completed for {request_code} ({username})")
return 0 return 0

2
services/bstein-dev-home/portal-onboarding-e2e-test-job.yaml
View File

@ -2,7 +2,7 @@
apiVersion: batch/v1 apiVersion: batch/v1
kind: Job kind: Job
metadata: metadata:
name: portal-onboarding-e2e-test-10 name: portal-onboarding-e2e-test-11
namespace: bstein-dev-home namespace: bstein-dev-home
spec: spec:
backoffLimit: 0 backoffLimit: 0