Issue 041: mongodb names its secrets' owner; the three conversions are proven

2026-09-21 13:47:39 +02:00
parent 198e4db0a3
commit ea42b00d0a
1 changed files with 4 additions and 1 deletions
@@ -81,7 +81,10 @@ convertible (baserow, mssql, only-office, umami, mailu's initial admin), 9 read
 Novox's own applications outside the mesh repositories (amqp-email-forwarder, de-spiegel,
 invoicing, photos), 4 unverifiable (keycloak's admin, letta, mailu's other containers), and 2
 dead deliveries that nothing read. Converted and proven in a bed: amqp-ping, minio, mongodb,
-mesh-catalog and model-usage; the two dead deliveries removed. The 25 that remain carry the
+mesh-catalog and model-usage; the two dead deliveries removed. One image, mongodb's, drops to its
+own user before it reads the file, so its manifest names that user as the owner of its secrets — the
+first use of the owner field outside the controller, and the check any converted image needs: run it
+with a file its user cannot read. The 25 that remain carry the
 surveyed reason on the container. Gitea, nextcloud, mailu-admin, influxdb, step-ca and n8n are
 convertible and wait for a bed that exercises their credential
 ([issue 073](../073-beds-carry-copies-of-catalogue-manifests/00-report.md)); icecast, keycloak's