coulomb/net-kingdom
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

security: retire unsafe legacy LDAP lifecycle callers
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a1346b-72a4-7d40-b8bd-8b8ca346cfa2
This commit is contained in:
tegwick 2026-10-14 00:08:42 +02:00
parent 276b95f6ba
commit 84c5dbeec8
21 changed files with 390 additions and 1023 deletions
Download patch file Download diff file Expand all files Collapse all files

5
tools/security-bootstrap-console/tests/test_security_bootstrap_console.py
View file

@ -134,7 +134,7 @@ def test_lifecycle_flow_template():
tmpl = console.lifecycle_flow_template()
assert "flow_version" in tmpl
assert "onboard_user_supported" in tmpl
assert tmpl["onboard_user_supported"] is True
assert tmpl["onboard_user_supported"] is False
def test_runbook_payloads_includes_dry_run():
# minimal data
@ -143,7 +143,8 @@ def test_runbook_payloads_includes_dry_run():
names = [p["name"] for p in payloads]
assert "User lifecycle dry-run (T06)" in names
dry = next(p for p in payloads if "dry-run" in p["name"].lower())
assert "NET-WP-0019" in dry.get("location", "") or "dry-run-nonroot-user.sh" in dry.get("location", "")
assert dry["state"] == "retired"
assert dry["location"] == "docs/legacy-lldap-lifecycle-retirement.md"
def test_audit_core_posture_ready_with_bootstrap_risk():
data = {