coulomb/fluid-telegram
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

send-post: read the bot token from the KV v2 path directly

Browse source 
bao kv get preflights sys/internal/ui/mounts, which returned 403.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 5457@bnt-lap001
Assistant-Session: 792bf84a-3783-4f5d-a811-cded61dd2012
This commit is contained in:
tegwick 2026-10-08 09:41:50 +02:00
parent b09a5e21d4
commit e6d80ad69b
1 changed files with 6 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

9
scripts/send-post.sh
View file

@ -30,9 +30,12 @@ TELEGRAM_CHANNEL_ID=$(go run ./cmd/provision adapter-config --spec "$spec" --cha
tmp=$(mktemp -d)
go build -o "$tmp/adapter" ./cmd/adapter
token=$(bao kv get -mount=platform -field=token \
workloads/infotech/fluid-telegram/hall-of-helix/bot-token) \
|| { rm -rf "$tmp"; echo "could not read the bot token from OpenBao (logged in?)" >&2; exit 2; }
# Read the KV v2 data path directly: `bao kv get` first queries
# sys/internal/ui/mounts, which a workload-scoped token may not be allowed to.
token=$(bao read -format=json \
platform/data/workloads/infotech/fluid-telegram/hall-of-helix/bot-token \
| python3 -c 'import sys, json; print(json.load(sys.stdin)["data"]["data"]["token"])') \
|| { rm -rf "$tmp"; echo "could not read the bot token from OpenBao (logged in? read on platform/data/workloads/infotech/fluid-telegram/hall-of-helix/*?)" >&2; exit 2; }
TELEGRAM_BOT_TOKEN=$token TELEGRAM_CHANNEL_ID=$TELEGRAM_CHANNEL_ID \
ADAPTER_LISTEN_ADDR=127.0.0.1:$port "$tmp/adapter" &