Runbooks

The runbooks live in the repository, outside this site, under docs/runbooks/ and docs/security/. They are Markdown files, so open them in the repository. This site does not copy them.

File	What it is
docs/runbooks/keycloak-client-secret-rotation.md	Blue/green swap from the legacy service client to startupos-services, with verification and rollback.
docs/runbooks/keycloak-fix-final-report.md	Keycloak high availability, the least-privilege identity admin client, and the rehearsal evidence.
docs/runbooks/prod-out-of-band-resources.md	Production resources that live in OCI or as Secrets rather than in infra/, with the commands to recreate them. Names only.
.kiro/steering/auth-rollout.md	Why authentication was staged the way it was.
infra/keycloak/rehearsal/README.md	A local two-node Keycloak rehearsal harness.