feat(k8s): optionally auto-fill the medewerker OTP step for the public demo (refs #177) #181

Merged

not merged 4 commits from feat/demo-otp-autofill into main 2026-09-25 11:34:31 +00:00

Conversation 0 Commits 4 Files Changed 10

+102 -4

4 Commits

Author	SHA1	Message	Date
not	408cc32594	Merge branch 'main' into feat/demo-otp-autofill	2026-09-25 11:12:17 +00:00
notandClaude Opus 5.5	0ea562db52	refactor(k8s): keep the big-demo theme as real files under infra/keycloak/themes (refs #177) ... The theme was inline text in a Helm template. It now lives next to the realms and is seeded as rr-kc-theme by seed-configmaps.sh, like every other file input, so it can be edited as a normal Keycloak theme. demo.otpAutofill now only decides whether KC_SPI_THEME_DEFAULT is set (big.env skips values that render empty); off, Keycloak keeps its stock theme. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 12:15:35 +02:00
notandClaude Opus 5.5	6cd2268be9	fix(k8s): declare every theme type in big-demo so the account console loads (refs #177) ... KC_SPI_THEME_DEFAULT applies to all theme types and Keycloak does not fall back for one the theme lacks: the account console returned 500 (NPE on a null theme). The theme is now one ConfigMap mounted as a directory with login, account, admin and email types; the podspec gains `items` for that. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 12:02:46 +02:00
notandClaude Opus 5.5	1cc04de630	feat(k8s): optionally auto-fill the medewerker OTP step for the public demo (refs #177) ... A `big-demo` Keycloak login theme (keycloak.v2 + one script) is always mounted and set as default. With demo.otpAutofill (repo variable OTP_AUTOFILL=true) the script computes the code from the committed fixture secret and submits it, so the demo shows MFA enforced without an authenticator. Off by default: the script is empty and the login is plain keycloak.v2. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>	2026-09-25 11:52:29 +02:00