fix: route OpenBao platform administration login
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a0290b-3241-74c3-b868-6049545af836
This commit is contained in:
tegwick 2026-08-22 19:08:21 +02:00
parent e24d2d5bd0
commit 8280c0b7b7
10 changed files with 170 additions and 5 deletions

View file

@ -160,6 +160,16 @@ def test_generic_and_template_lanes_not_resolvable():
assert catalog.get("key-cape-oidc-login").resolvable is False
def test_platform_admin_login_lane_is_exact_and_non_value_bearing():
entry = load_catalog(_repo_catalog()).get("openbao-platform-admin-login")
assert entry.lane == "login"
assert entry.risk == "high"
assert entry.fetch_command == (
"bao login -no-print -method=oidc -path=netkingdom role=platform-admin"
)
assert entry.workload_ref.resolution == "not-applicable"
def test_find_exact_id_wins_over_keyword_collision():
catalog = load_catalog(_repo_catalog())
# "npm" alone collides with openbao-api-key; the exact id must resolve uniquely.