Skip to content

Support to pass token scopes using CLI parameters

Petr Vokac requested to merge vokac/nagios-plugins-tokens:support-for-token-scopes into master

Original version could used only to get access tokens with compute.* scopes, but ATLAS would like to use same mechanism to get valid tokens also for storage probes. To be able to test access to storage with tokens we need storage.*:$PATH scopes, e.g.

./refresh_token -E oidc-env.sh --token-config etf-atlas-prod \
    --aud /path/to/se/hostnames/for/tokens \
    --scope storage.read:/atlasdatadisk/SAM/ \
    --scope storage.create:/atlasdatadisk/SAM/ \
    --scope storage.modify:/atlasdatadisk/SAM/ \
    --scope storage.read:/atlasscratchdisk/SAM/ \
    --scope storage.create:/atlasscratchdisk/SAM/ \
    --scope storage.modify:/atlasscratchdisk/SAM/

Merge request reports