coulomb/audit-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin attended sender mint to the operator OpenBao tunnel

Browse source 
Public bao.coulomb.social was retracted today and now presents
Traefik's default certificate. Login must use http://127.0.0.1:18200
via openbao-attended-exec.py, matching the sitting-requester path.

Assistant: grok
Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082
This commit is contained in:
tegwick 2026-09-15 21:59:28 +02:00
parent 7c0f270b44
commit ede59ba8fb
3 changed files with 44 additions and 14 deletions
Download patch file Download diff file Expand all files Collapse all files

5
scripts/mint-tenant-engine-sender.py
View file

@ -4,10 +4,7 @@
Silent: warden access --exec fails closed on any child stdout/stderr.
Never prints token values. Persist metadata evidence only.
warden access openbao-platform-admin-login --exec -- \
env RAILIANCE01_KUBECONFIG="$HOME/.kube/config-railiance01" \
BAO_ADDR="${BAO_ADDR:-https://bao.coulomb.social}" \
/home/worsch/audit-core/scripts/mint-tenant-engine-sender.py
./scripts/attended-mint-tenant-engine-sender.sh
"""
from __future__ import annotations