docs(keycloak-session-store): research the 42 concepts the lab used and write them up

Replaces the to-do list with the work itself. Eight layers, 42 concepts,
1200 lines, each with what it is, why it turns up here, how it fails, and
the command to check it.

Most values were read off the running system rather than recalled:

  conntrack ESTABLISHED timeout   86400s — why A-1's injection sat unmatched
                                  for 25 minutes was normal, not a fault
  FORWARD chain position 1        KUBE-ROUTER-FORWARD — why -I FORWARD 1
                                  counted zero packets
  cgroup version                  v2, and the numbers in systemctl status
                                  are read straight out of those files
  nginx restart policy            on-failure, 100ms, and it gives up after
                                  5 failures in 10 seconds
  Type and KillMode               five units on this host, four different
                                  combinations

Two facts could not be read locally and carry sources: Let's Encrypt
backdates notBefore by exactly one hour to tolerate client clock skew, and
Keycloak invalidates the whole SSO session on refresh token reuse. The
second one explains B-3 — the winning request's new token was not itself
rejected, the session it belonged to had just been deleted.

The systemd layer also explains the one CGroup line in systemctl status that
D-4 spent ps commands establishing: master 585 kept, worker replaced.

One item is marked as read rather than measured. Restart=on-failure comes
from the unit file; nginx has not been killed to watch it come back.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

This commit is contained in:

DongHyeonka

2026-09-07 15:32:54 +09:00

co-authored by

Claude Opus 5

parent f6c825e858

commit fc23660871

2 changed files with 77 additions and 78 deletions

									
										docs/keycloak-session-store/tech-log-studio/tech-log-tree.json
									
		+1
		-1
	
												View File
												
				@@ -7,7 +7,7 @@

				    "revision": "cdac9b8178391311d8eca1ebc6cac15bb62d79af",

				    "verified": "이 커밋이 A-1 부터 D-4a 까지 실험 전량을 병합한 tip 이고 저장소 HEAD 다. git branch --contains 가 experiment 브랜치 26 개를 모두 낸다 (2026-09-07 확인)"

				  },

				  "ssotSha256": "dc7c9d1bddb61fc7e48069a34fbb62bc543e3de2bbd39e1a016f5f2ef7770222",

				  "ssotSha256": "ae0aee375daebc00d72590db8745ff9ef1018911785a80e9fd7b62f893dea19d",

				  "sourceRevision": "keycloak-session-lab@2026-09",

				  "generatedAt": "2026-09-07",

				  "candidateScope": {