coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin attended OpenBao login to the operator tunnel.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Public Ingress is gone, so BAO_ADDR=https://bao.coulomb.social fails
before command handoff. The wrapper now uses 127.0.0.1:18200.

Assistant: grok
Assistant-Session: 01a0a23b-3bf0-7341-b4e5-9dc05f72573a
This commit is contained in:
codex 2026-09-15 20:27:35 +02:00
parent 4b34c239bc
commit 75e5c1af65
4 changed files with 37 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/openbao-public-listener-transition.md
View file

@ -55,7 +55,9 @@ Warden's contained child inherits the caller's cwd, so a relative `scripts/...`
path raises OSError, prints `attended command could not start`, and revokes a
successful login without applying the callback. Do not run the owner command
directly with a persistent token. The wrapper also supplies the WSL browser
launcher when native `xdg-open` is absent.
launcher when native `xdg-open` is absent, and pins `BAO_ADDR` to
`http://127.0.0.1:18200`. After public Ingress retraction, CLI login against
`https://bao.coulomb.social` fails before command handoff.
## Guarded sequence