OpenBao login: token file with renewal, Kubernetes auth #2
Labels
No labels
wayfinder:task
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Blocks
Depends on
#3 baox run: an op run equivalent
mikluko/baox
#5 baox github: git credential helper and run
mikluko/baox
#1 Skeleton: module, config file, CI
mikluko/baox
Reference
mikluko/baox#2
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Question
How baox gets its OpenBao token. Laptop: a periodic token read from a file and renewed before it lapses. Pod: login through the kubernetes auth method with the pod's service account token. BAO_TOKEN in the environment wins over both. Done when every other subcommand obtains a client through this one path, with tests for each source.