jschoubben
0 Followers · 0 Following
  • Joined on 2020-06-18
Repositories
4
 Projects Packages Public Activity Starred Repositories
jschoubben deleted branch multiple-fixes from novox/mesh-catalog 2026-09-21 20:58:26 +00:00
jschoubben deleted branch multiple-fixes from novox/mesh-lab 2026-09-21 20:58:26 +00:00
jschoubben pushed to main at novox/mesh-lab 2026-09-21 20:58:26 +00:00
e1739b1caf Merge pull request 'The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first' (#46) from multiple-fixes into main
b0eddd28d8 build-route-proxy-image.sh builds FROM the bases the manifest declares
2ce130c256 whole-mesh-full: an own-secret is declared under own-secrets
e64d296c80 whole-mesh-full: issue a module with an own-secret, not only one with a broker account
acb8d3da88 whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098)
Compare 10 commits »
jschoubben pushed to main at novox/mesh-catalog 2026-09-21 20:58:25 +00:00
64d62978f6 Merge pull request 'Multiple fixes: five modules keep their secrets from the vault (ADR 0094), the authority makes its own root (076), the builder on the host network, route-proxy declares its bases' (#34) from multiple-fixes into main
ac651c7ac2 route-proxy: the trust container names its artifact
1c964cd571 route-proxy: the trust gate retries with a timeout and checks for a certificate; its images are declared artifacts (ADRs 0096, 0097, 0098)
28b8feebfc The authority makes its own root at first start, and the proxy fetches it through a gate
82256fcdb0 The builder runs on the machine's network: it copies images into the mesh's registry itself now
Compare 6 commits »
jschoubben merged pull request novox/mesh-lab#46 2026-09-21 20:58:25 +00:00
The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first
jschoubben pushed to main at novox/mesh-controller 2026-09-21 20:58:24 +00:00
52d39f0740 Merge pull request 'The control plane's recipe declares its base, and an undeclared FROM is refused (ADR 0097 live)' (#39) from multiple-fixes into main
b3486270d1 The control plane's recipe starts FROM the base its manifest declares, and an undeclared base is refused
Compare 2 commits »
jschoubben deleted branch multiple-fixes from novox/mesh-controller 2026-09-21 20:58:24 +00:00
jschoubben pushed to main at novox/mesh-tools 2026-09-21 20:58:24 +00:00
6b380b67e0 Merge pull request 'The tool runtime's recipe starts FROM the base its manifest declares (ADR 0097)' (#12) from multiple-fixes into main
2990b2d5a4 The tool runtime's recipe starts FROM the base its manifest declares (novox/hq ADR 0097)
Compare 2 commits »
jschoubben deleted branch multiple-fixes from novox/mesh-tools 2026-09-21 20:58:24 +00:00
jschoubben merged pull request novox/mesh-catalog#34 2026-09-21 20:58:24 +00:00
Multiple fixes: five modules keep their secrets from the vault (ADR 0094), the authority makes its own root (076), the builder on the host network, route-proxy declares its bases
jschoubben merged pull request novox/mesh-tools#12 2026-09-21 20:58:23 +00:00
The tool runtime's recipe starts FROM the base its manifest declares (ADR 0097)
jschoubben merged pull request novox/mesh-controller#39 2026-09-21 20:58:22 +00:00
The control plane's recipe declares its base, and an undeclared FROM is refused (ADR 0097 live)
jschoubben pushed to multiple-fixes at novox/mesh-lab 2026-09-21 20:56:26 +00:00
b0eddd28d8 build-route-proxy-image.sh builds FROM the bases the manifest declares
jschoubben pushed to multiple-fixes at novox/mesh-catalog 2026-09-21 20:55:37 +00:00
ac651c7ac2 route-proxy: the trust container names its artifact
jschoubben pushed to multiple-fixes at novox/hq 2026-09-21 20:55:12 +00:00
6bc9df4b49 Review corrections: 076 and ADR 0098 say what the authority could and could not do; issues 077 (a fetched fact is fetched once) and 078 (secret accept takes any name) opened
jschoubben pushed to multiple-fixes at novox/mesh-lab 2026-09-21 20:55:03 +00:00
2ce130c256 whole-mesh-full: an own-secret is declared under own-secrets
jschoubben pushed to multiple-fixes at novox/mesh-lab 2026-09-21 20:54:12 +00:00
e64d296c80 whole-mesh-full: issue a module with an own-secret, not only one with a broker account
jschoubben pushed to multiple-fixes at novox/mesh-lab 2026-09-21 20:53:31 +00:00
acb8d3da88 whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098)
jschoubben pushed to multiple-fixes at novox/mesh-catalog 2026-09-21 20:53:31 +00:00
1c964cd571 route-proxy: the trust gate retries with a timeout and checks for a certificate; its images are declared artifacts (ADRs 0096, 0097, 0098)
jschoubben pushed to multiple-fixes at novox/hq 2026-09-21 20:44:25 +00:00
6d3cb60949 Issue 076: the route-forwarding bed proves ADR 0098; what the run taught about the overlay