Fix OpenBao role payload handoff

2026-06-28 02:33:42 +02:00
parent e3147b7fd5
commit f630d5135e
3 changed files with 31 additions and 26 deletions
--- a/tests/test_credential_change.py
+++ b/tests/test_credential_change.py
@@ -144,8 +144,10 @@ class CredentialChangeTests(unittest.TestCase):
            "bao write auth/netkingdom/role/whynot-design-workload-kv-read",
            rendered,
        )
+        self.assertIn('role_payload_file="$(mktemp)"', rendered)
+        self.assertIn('"bound_claims": {', rendered)
        self.assertIn(
-            'bound_claims={"groups":["whynot-design"]}',
+            'bao write auth/netkingdom/role/whynot-design-workload-kv-read @"$role_payload_file"',
            rendered,
        )
        self.assertIn(