Secure stingray

[jacobsalmela]

Summary and Scope

• removes a fake testdata fixture in favor of the more realistic ones we have now
• gives better advice when an inventory is unstable (you cannot currently run validate without an active session as the previous advice would suggest`
• simplifies ux by having the user pass in a host instead of multiple urls

Tested on vshasta that passing the single host worked.

ncn-m002:~/jsalmela/cani # bin/cani alpha session start csm   --csm-keycloak-username vshasta   --csm-keycloak-password vshasta --csm-api-host api-gw-service-nmn.local
12:57PM INF /root/.cani/canidb.json does not exist, creating default datastore
12:57PM INF No API Gateway token provided, getting one from provider api-gw-service-nmn.local
2023/06/30 12:57:23 [DEBUG] POST https://api-gw-service-nmn.local/keycloak/realms/shasta/protocol/openid-connect/token
12:57PM INF Validated CANI inventory
2023/06/30 12:57:23 [DEBUG] GET https://api-gw-service-nmn.local/apis/sls/v1/dumpstate
12:57PM INF Validated external inventory provider
12:57PM INF Session is now ACTIVE with provider csm and datastore /root/.cani/canidb.json

Risks and Mitigations