Issue 213: the controller is a Go program and still runs in a container #328

Merged
mesh-admin merged 2 commits from issues/213-the-controller-runs-in-a-container into main 2026-10-03 19:42:32 +00:00
Contributor

Opened at the operator's request. The controller is Go and compiles to one static binary, as the host does, yet ships as an image and runs as a container (host network, user 65534, eight mounts). ADR 0188 §1/§3 say a module's own code is bundles and a service bundle is a process the host runs; the controller is the one piece of the mesh's own Go code still an image, and the registration gate will have to exempt or refuse it. The report names what a fix must settle: a Go bundle + process for its module, mounts replaced by paths, and a handover without a window where the mesh's verbs go unanswered.

Opened at the operator's request. The controller is Go and compiles to one static binary, as the host does, yet ships as an image and runs as a container (host network, user 65534, eight mounts). ADR 0188 §1/§3 say a module's own code is bundles and a service bundle is a process the host runs; the controller is the one piece of the mesh's own Go code still an image, and the registration gate will have to exempt or refuse it. The report names what a fix must settle: a Go bundle + process for its module, mounts replaced by paths, and a handover without a window where the mesh's verbs go unanswered.
mesh-admin added 2 commits 2026-10-03 19:42:28 +00:00
mesh-admin merged commit 4ee8e3905d into main 2026-10-03 19:42:32 +00:00
mesh-admin deleted branch issues/213-the-controller-runs-in-a-container 2026-10-03 19:42:32 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/hq#328