audit-core/scripts/attended-mint-tenant-engine-sender.sh
tegwick 5649ef90c4 ADHOC-2026-11-07: adopt NK-WP-0058-T07 runbook conventions; unstale CCR seed test
One cluster route (NK_KUBECONFIG, default ~/.kube/config-railiance01) and
server-side apply throughout. Fixes the Makefile dry-run defaulting to the
coulombcore kubeconfig. Lane-run scripts take no default and fail closed when
NK_KUBECONFIG is unset. net-kingdom convention lint: 14 findings -> 0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 73091@bnt-lap001
Assistant-Session: 9f48906c-6737-449f-8b97-fb86877ca59a
2026-11-07 13:25:02 +01:00

12 lines
599 B
Bash
Executable file

#!/usr/bin/env bash
# Parent-env wrapper for the attended tenant-engine sender mint.
#
# Public https://bao.coulomb.social was retracted 2026-09-15
# (RMASTER-WP-0020-T09). Operator login is the named tunnel
# openbao-ui-railiance01 → http://127.0.0.1:18200. railiance-platform's
# openbao-attended-exec.py pins that address for both OIDC and the child.
set -euo pipefail
export NK_KUBECONFIG="${NK_KUBECONFIG:-$HOME/.kube/config-railiance01}"
cd "$(dirname "$0")/.."
exec python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py -- \
"$PWD/scripts/mint-tenant-engine-sender.py"