coulomb/key-cape
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Admit operator-tunneled OpenBao callback
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 23s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02e3f-7301-7622-9be1-12e5f352881c
This commit is contained in:
tegwick 2026-08-23 13:16:21 +02:00
parent 34fadae1c1
commit f5cf77fa0c
3 changed files with 64 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

24
src/internal/config/config_test.go
View file

@ -409,6 +409,30 @@ func TestServiceClientExampleContracts(t *testing.T) {
}
}
func TestDevConfigOpenBaoAdminAdmitsOperatorTunnelCallback(t *testing.T) {
cfg, err := config.Load(filepath.Join("..", "..", "..", "config", "dev-config.yaml"))
if err != nil {
t.Fatalf("load dev config: %v", err)
}
if errs := config.ValidateConfig(cfg); len(errs) != 0 {
t.Fatalf("dev config must validate: %v", errs)
}
const callback = "http://127.0.0.1:18200/ui/vault/auth/netkingdom/oidc/callback"
for _, client := range cfg.Clients {
if client.ClientID != "openbao-admin" {
continue
}
for _, redirectURI := range client.RedirectURIs {
if redirectURI == callback {
return
}
}
t.Fatalf("openbao-admin redirectUris missing exact operator tunnel callback %q", callback)
}
t.Fatal("dev config missing openbao-admin client")
}
// ---------------------------------------------------------------------------
// Env var loading test
// ---------------------------------------------------------------------------