audit-core/scripts/attended-prove-sender-bearer-revocation.sh

9 lines
436 B
Bash
Raw Normal View History

#!/usr/bin/env bash
# Attended overlap-then-drop proof that a formerly valid audit bearer is 401.
# Uses the operator OpenBao tunnel. Production tokens are not replaced.
set -euo pipefail
export RAILIANCE01_KUBECONFIG="${RAILIANCE01_KUBECONFIG:-$HOME/.kube/config-railiance01}"
cd "$(dirname "$0")/.."
exec python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py -- \
"$PWD/scripts/prove-sender-bearer-revocation.py"