activity-core/tests/test_openbao_eso_token_contract.py

from pathlib import Path


ROOT = Path(__file__).resolve().parents[1]


def test_static_eso_token_bootstrap_stays_retired():
    # RPF-WP-0045 moved the store to OpenBao Kubernetes auth; a static token
    # would expire again and must not be reintroduced.
    assert not (ROOT / "scripts" / "openbao-eso-token-apply.sh").exists()
    makefile = (ROOT / "Makefile").read_text(encoding="utf-8")
    assert "openbao-eso-token-apply" not in makefile


def test_railiance_runbook_applies_and_waits_for_llm_connect_external_secret():
    runbook = (ROOT / "k8s" / "railiance" / "README.md").read_text(encoding="utf-8")
    assert "llm-connect/deploy/k8s/activity-core-llm-connect/externalsecret.yaml" in runbook
    assert "externalsecret/llm-connect-provider-secrets --timeout=120s" in runbook