Merge branch 'main' into feat/demo-otp-autofill

refactor(k8s): keep the big-demo theme as real files under infra/keycloak/themes (refs #177 )
The theme was inline text in a Helm template. It now lives next to the realms and is seeded as rr-kc-theme by seed-configmaps.sh, like every other file input, so it can be edited as a normal Keycloak theme. demo.otpAutofill now only decides whether KC_SPI_THEME_DEFAULT is set (big.env skips values that render empty); off, Keycloak keeps its stock theme. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-09-25 11:12:17 +00:00 · 2026-09-25 12:15:35 +02:00 · 2026-09-25 12:02:46 +02:00 · 2026-09-25 11:52:29 +02:00
1 changed files with 0 additions and 5 deletions
@@ -286,11 +286,6 @@ workloads:
      # Only rendered with demo.otpAutofill (big.env skips empty values); off, Keycloak
      # keeps its stock theme and the mounted big-demo theme is unused.
      KC_SPI_THEME_DEFAULT: '{{ if .Values.demo.otpAutofill }}big-demo{{ end }}'
-      # Behind a TLS proxy (keycloakUrl) the dynamic backchannel URLs — token,
-      # userinfo, certs — take their scheme from the request, which reaches Keycloak
-      # as plain http; trusting X-Forwarded-Proto keeps them https so the browser
-      # doesn't block them as mixed content. In-cluster calls send no such header.
-      KC_PROXY_HEADERS: xforwarded
    ports: [{ name: http, port: 8080 }]
    # TCP, not /health/ready on the management port: nothing here gates on realm
    # import, and a wrong health path would leave the Service with no endpoints.
Author	SHA1	Message	Date
not	408cc32594	Merge branch 'main' into feat/demo-otp-autofill CI / lint (pull_request) Successful in 1m44s Details CI / k8s (pull_request) Successful in 12s Details CI / build (pull_request) Successful in 1m17s Details CI / unit (pull_request) Successful in 1m43s Details CI / frontend (pull_request) Successful in 2m47s Details CI / mutation (pull_request) Successful in 5m2s Details CI / verify-stack (pull_request) Successful in 9m14s Details	2026-09-25 11:12:17 +00:00
notandClaude Opus 5.5	0ea562db52	refactor(k8s): keep the big-demo theme as real files under infra/keycloak/themes (refs #177 ) CI / lint (pull_request) Successful in 1m55s Details CI / k8s (pull_request) Successful in 9s Details CI / build (pull_request) Successful in 1m27s Details CI / unit (pull_request) Successful in 1m51s Details CI / frontend (pull_request) Successful in 3m24s Details CI / mutation (pull_request) Successful in 6m40s Details CI / verify-stack (pull_request) Failing after 1m1s Details The theme was inline text in a Helm template. It now lives next to the realms and is seeded as rr-kc-theme by seed-configmaps.sh, like every other file input, so it can be edited as a normal Keycloak theme. demo.otpAutofill now only decides whether KC_SPI_THEME_DEFAULT is set (big.env skips values that render empty); off, Keycloak keeps its stock theme. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 12:15:35 +02:00
notandClaude Opus 5.5	6cd2268be9	fix(k8s): declare every theme type in big-demo so the account console loads (refs #177 ) CI / lint (pull_request) Successful in 2m0s Details CI / k8s (pull_request) Successful in 9s Details CI / build (pull_request) Successful in 1m22s Details CI / unit (pull_request) Successful in 1m34s Details CI / verify-stack (pull_request) Canceled after 0s Details CI / frontend (pull_request) Canceled after 3m8s Details CI / mutation (pull_request) Canceled after 8m10s Details KC_SPI_THEME_DEFAULT applies to all theme types and Keycloak does not fall back for one the theme lacks: the account console returned 500 (NPE on a null theme). The theme is now one ConfigMap mounted as a directory with login, account, admin and email types; the podspec gains `items` for that. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 12:02:46 +02:00
notandClaude Opus 5.5	1cc04de630	feat(k8s): optionally auto-fill the medewerker OTP step for the public demo (refs #177 ) CI / k8s (pull_request) Successful in 13s Details CI / build (pull_request) Successful in 5m36s Details CI / unit (pull_request) Successful in 6m18s Details CI / frontend (pull_request) Successful in 3m12s Details CI / verify-stack (pull_request) Canceled after 0s Details CI / mutation (pull_request) Canceled after 8m0s Details CI / lint (pull_request) Canceled after 21m26s Details A `big-demo` Keycloak login theme (keycloak.v2 + one script) is always mounted and set as default. With demo.otpAutofill (repo variable OTP_AUTOFILL=true) the script computes the code from the committed fixture secret and submits it, so the demo shows MFA enforced without an authenticator. Off by default: the script is empty and the login is plain keycloak.v2. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 11:52:29 +02:00