kevinveenbirkenbachandClaude Opus 5.5 b2350162a5 fix(web-app-keycloak): pass kcadm payloads on stdin, not in a heredoc ...

keycloak_kcadm_update built `cat <<'JSON' | kcadm update|create ... -f -`
with the JSON payload inside the command it hands to sh -c, and the
reCAPTCHA task did the same in its shell script. Client secrets, the SMTP
password, the LDAP bindCredential and the reCAPTCHA secret therefore sat
in a host process argument (#1213).

The library now sends the payload as subprocess input, also on its lock
and dead-container retries, and the reCAPTCHA task uses the shell
module's stdin. Every caller's kcadm_exec already runs `container exec -i`.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-25 13:03:38 +01:00

..

cli

fix(docs): quote the country placeholder in the deploy instructions

2026-10-25 10:57:17 +01:00

group_vars

Merge branch 'main' into feature/store-i18n

2026-10-19 01:54:37 +02:00

library

Merge branch 'feature/updater' into feature/store-i18n

2026-10-24 17:37:48 +02:00

plugins

Merge branch 'feature/updater' into feature/store-i18n

2026-10-25 09:32:11 +01:00

roles

fix(web-app-keycloak): pass kcadm payloads on stdin, not in a heredoc

2026-10-25 13:03:38 +01:00

scripts

Merge branch 'feature/network/multi-network-serving' into feature/store-i18n

2026-10-23 09:53:41 +02:00

tests

test(images): require a mount for every VOLUME an image declares

2026-10-17 21:17:25 +02:00

utils

fix(i18n): remove the staging file when a catalogue write fails

2026-10-25 11:49:50 +01:00

__init__.py

…