WIP: keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout #36

Closed

hermes-automation wants to merge 1 commits from fix/hermes-oidc-ensure-rerun-hostname-rollout into main

Author	SHA1	Message	Date
Hermes Agent	c857dbd9e1	keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout PR #34 renamed the public chat/triage hosts in hermes_access_oidc_ensure.sh (chat.bstein.dev, triage.bstein.dev) but the last applied hermes-access-oidc-client-ensure Job predates that change, so Keycloak still has the old redirect_uri/webOrigins/rootUrl registered for hermes-chat-proxy and hermes-triage-proxy. Live check confirms Keycloak returns HTTP 400 Invalid parameter: redirect_uri for both new hosts. Bump the Job name to force Flux to recreate the (immutable) Job and rerun the ensure script, matching this repo's established retry convention for this Job (ensure-7..ensure-10). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>	2026-08-21 08:27:17 +00:00

Author

SHA1

Message

Date

Hermes Agent

c857dbd9e1

keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout

PR #34 renamed the public chat/triage hosts in
hermes_access_oidc_ensure.sh (chat.bstein.dev, triage.bstein.dev) but
the last applied hermes-access-oidc-client-ensure Job predates that
change, so Keycloak still has the old redirect_uri/webOrigins/rootUrl
registered for hermes-chat-proxy and hermes-triage-proxy. Live check
confirms Keycloak returns HTTP 400 Invalid parameter: redirect_uri for
both new hosts. Bump the Job name to force Flux to recreate the
(immutable) Job and rerun the ensure script, matching this repo's
established retry convention for this Job (ensure-7..ensure-10).

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-21 08:27:17 +00:00

WIP: keycloak: rerun Hermes OIDC ensure for chat/triage hostname rollout #36

1 Commits