tegwick
5649ef90c4
One cluster route (NK_KUBECONFIG, default ~/.kube/config-railiance01) and server-side apply throughout. Fixes the Makefile dry-run defaulting to the coulombcore kubeconfig. Lane-run scripts take no default and fail closed when NK_KUBECONFIG is unset. net-kingdom convention lint: 14 findings -> 0. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 73091@bnt-lap001 Assistant-Session: 9f48906c-6737-449f-8b97-fb86877ca59a
8 lines
418 B
Bash
Executable file
8 lines
418 B
Bash
Executable file
#!/usr/bin/env bash
|
|
# Attended overlap-then-drop proof that a formerly valid audit bearer is 401.
|
|
# Uses the operator OpenBao tunnel. Production tokens are not replaced.
|
|
set -euo pipefail
|
|
export NK_KUBECONFIG="${NK_KUBECONFIG:-$HOME/.kube/config-railiance01}"
|
|
cd "$(dirname "$0")/.."
|
|
exec python3 /home/worsch/railiance-platform/scripts/openbao-attended-exec.py -- \
|
|
"$PWD/scripts/prove-sender-bearer-revocation.py"
|