Issue 179: an adopted identity provider's admin never took the secret the mesh minted #242

2026-10-01T09:02:30Z

mesh-admin commented

2026-10-01 09:02:30 +00:00

The hq record for forge issue 228. Fixed by hand 2026-10-01: keycloak's own bootstrap command made a temporary admin, which set admin's password to the value the mesh minted, read from the sidecar's mounted secret on the machine and never printed; the temporary admin was removed. Verified through the console: keycloak_list_realms answers and both mesh_ace_* clients exist. The design question — whether an own-secret should be acceptable the way a pair secret is for adopted software — is left open in the record. Checks pass.

The hq record for forge issue 228. Fixed by hand 2026-10-01: keycloak's own bootstrap command made a temporary admin, which set `admin`'s password to the value the mesh minted, read from the sidecar's mounted secret on the machine and never printed; the temporary admin was removed. Verified through the console: `keycloak_list_realms` answers and both `mesh_ace_*` clients exist. The design question — whether an own-secret should be acceptable the way a pair secret is for adopted software — is left open in the record. Checks pass.

mesh-admin added 1 commit 2026-10-01 09:02:30 +00:00

Issue 179: an adopted identity provider's admin never took the minted secret (fixed by hand through the server's bootstrap; the design question left open) 79d1619f16

mesh-admin merged commit 027e5b8d73 into main

2026-10-01 09:02:37 +00:00

mesh-admin deleted branch issue/179-an-adopted-identity-providers-admin-never-took-the-minted-secret

2026-10-01 09:02:37 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/hq#242