tegwick
b690ce03fa
The openbao-activity-core store has used OpenBao Kubernetes auth since 2026-09-21 and synced cleanly for more than 24 hours. Remove the openbao-eso-token-apply script and Makefile target, point the manifest comments and runbooks at the Kubernetes-auth store, and guard against reintroducing the script. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 151606@bnt-lap001 Assistant-Session: 3c0a4ad5-bb8b-4bf7-b9f0-fa5f29204e48
18 lines
790 B
Python
18 lines
790 B
Python
from pathlib import Path
|
|
|
|
|
|
ROOT = Path(__file__).resolve().parents[1]
|
|
|
|
|
|
def test_static_eso_token_bootstrap_stays_retired():
|
|
# RPF-WP-0045 moved the store to OpenBao Kubernetes auth; a static token
|
|
# would expire again and must not be reintroduced.
|
|
assert not (ROOT / "scripts" / "openbao-eso-token-apply.sh").exists()
|
|
makefile = (ROOT / "Makefile").read_text(encoding="utf-8")
|
|
assert "openbao-eso-token-apply" not in makefile
|
|
|
|
|
|
def test_railiance_runbook_applies_and_waits_for_llm_connect_external_secret():
|
|
runbook = (ROOT / "k8s" / "railiance" / "README.md").read_text(encoding="utf-8")
|
|
assert "llm-connect/deploy/k8s/activity-core-llm-connect/externalsecret.yaml" in runbook
|
|
assert "externalsecret/llm-connect-provider-secrets --timeout=120s" in runbook
|