hardcoded expiry dates of tokens (at least some)

./run_lab.sh fails at the following place:

image

The problem seems to be Error: failed to add require anchors: verify token: capability expired"

A bit more investigation shows that in the previous step:

image

I actually do not understand how this step passes, as i do not see any delegations on the those machines. In any case, expiry date '2025-01-31' does not feel right in above.

Checking where it is hardcoded (because i saw that the script generates expiry some expiry dates as today + 60 days or so):

kabir@nunet-gpu:~/repos/asi-node/demos/ocap_auth/ansible$ ack "2025-01-31"
delegate-to-nodes.yml
33:        --topic /nunet --expiry 2025-01-31 "{{ organization_did }}"
46:        --topic /nunet --expiry 2025-01-31 "{{ hostvars[item].remote_did }}"

delegate-to-edge-nodes.yml
36:        --topic /nunet --expiry 2025-01-31 "{{ organization_did }}"
53:        --topic /nunet --expiry 2025-01-31 "{{ hostvars[item].remote_did }}"

delegate-to-orchestrator-nodes.yml
37:        --topic /nunet --expiry 2025-01-31 "{{ organization_did }}"
54:        --topic /nunet --expiry 2025-01-31 "{{ hostvars[item].remote_did }}"
kabir@nunet-gpu:~/repos/asi-node/demos/ocap_auth/ansible$

changed all manually to:

kabir@nunet-gpu:~/repos/asi-node/demos/ocap_auth/ansible$ ack "2025-02-28"
delegate-to-nodes.yml
33:        --topic /nunet --expiry 2025-02-28 "{{ organization_did }}"
46:        --topic /nunet --expiry 2025-02-28 "{{ hostvars[item].remote_did }}"

delegate-to-edge-nodes.yml
36:        --topic /nunet --expiry 2025-02-28 "{{ organization_did }}"
53:        --topic /nunet --expiry 2025-02-28 "{{ hostvars[item].remote_did }}"

delegate-to-orchestrator-nodes.yml
37:        --topic /nunet --expiry 2025-02-28 "{{ organization_did }}"
54:        --topic /nunet --expiry 2025-02-28 "{{ hostvars[item].remote_did }}"
kabir@nunet-gpu:~/repos/asi-node/demos/ocap_auth/ansible$

after that change ./run_lab.sh completed sucessfully, so i suppose that was a culprit.

@sam.lake , I think the script has to be changed for using the expiry date calculation trick that you are using elsewhere, so that it is future proof for more than a few days.

Edited by kabir