tegwick
ff74dbce63
T09/T11 remaining gate: a formerly valid T1 is 401 after drop, while the production T0 still 202. Does not replace live factory tokens. Assistant: grok Assistant-Session: 01a0a182-bab7-7f11-b32b-d06f3af52082
8 lines
436 B
Bash
Executable file
8 lines
436 B
Bash
Executable file
#!/usr/bin/env bash
|
|
# Attended overlap-then-drop proof that a formerly valid audit bearer is 401.
|
|
# Uses the operator OpenBao tunnel. Production tokens are not replaced.
|
|
set -euo pipefail
|
|
export RAILIANCE01_KUBECONFIG="${RAILIANCE01_KUBECONFIG:-$HOME/.kube/config-railiance01}"
|
|
cd "$(dirname "$0")/.."
|
|
exec python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py -- \
|
|
"$PWD/scripts/prove-sender-bearer-revocation.py"
|