chrisfu 1417bc51f0 feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests ... Java implementation of the knoe-auth identity backbone (Round 1): authority/.../admin/ user admin REST endpoints (list, deactivate, reset-totp, role management) authority/.../enroll/ invite-OTP web enrollment flow — accepts invite token, creates Kerberos principal via kadmin, seeds TOTP secret, returns keytab authority/.../provisioning/ contributor provisioning service — orchestrates invite generation, principal lifecycle, role grants authority/.../kerberos/ KadminClient.java typed wrapper around the kadmin(1) subprocess; create/delete/get-keytab/change-password GKE manifests: deploy/gcp/gke/knoe-auth-deployment.yaml two-container Pod (knoe-auth HTTP + kdc sidecar) with keytab-bootstrap initContainer deploy/gcp/gke/knoe-kdc-configmap.yaml krb5.conf, kdc.conf, kadm5.acl and entrypoint for the embedded KDC deploy/gcp/gke/knoe-kdc-secrets.yaml placeholder template — real values created by init_knoe_auth.sh via 1Password See docs/plans/knoe-auth-round-1.md for full architectural narrative. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-04-27 14:47:27 -07:00
..
src	feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests	2026-04-27 14:47:27 -07:00
Dockerfile	Refactor project structure and update initialization scripts	2026-02-14 13:44:49 -08:00
pom.xml	Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces.	2026-04-22 15:08:35 -07:00