stack/docs/onboarding.md

sops

Add the user to the list of PGP keys in .sops.yaml. Run:

find . -name '*.enc.*' -exec sops updatekeys {} \;

Keycloak

Once authenticated to Keycloak (the password is encrypted in the Keycloak configuration kustomization), switch from the Master realm to the realm you wish to add a user to. From there, navigate to Users and select "Add user". Select a combination of options to be performed upon login, such as "Update Password" if setting up a user that is not yourself. Enter any necessary information and select "Create". A temporary password can be generated by using pwgen -s 24 1.

To log in and manage your account, visit the realm login page, such as https://keycloak.distrust.co/realms/distrust/account.