Merge pull request 'nats declares the certificate directory it mounts' (#123 ) from feat/nats-serves-the-meshs-certificate into main

nats: drop the access to a certificate directory it no longer mounts
nats declares the certificate directory it mounts
2026-09-27 22:31:20 +00:00 · 2026-09-28 00:16:23 +02:00 · 2026-09-28 00:15:59 +02:00
1 changed files with 1 additions and 1 deletions
@@ -68,7 +68,7 @@
  ],
  "accesses": [
    {
-      "path": "/var/lib/mesh-broker-nats-tls",
+      "path": "/var/lib/mesh-broker-tls",
      "mode": "read"
    }
  ],
Author	SHA1	Message	Date
jschoubben	f5969a2f9f	Merge pull request 'nats declares the certificate directory it mounts' (#123 ) from feat/nats-serves-the-meshs-certificate into main	2026-09-27 22:31:20 +00:00
jschoubben	7f3d259cf5	nats: drop the access to a certificate directory it no longer mounts	2026-09-28 00:16:23 +02:00
jschoubben	721149eda1	nats declares the certificate directory it mounts The mesh's broker certificate is the operator's, kept outside any module and mounted read-only by whatever serves the bus; the controller declares that access and now so does nats, the same way. A mount nothing declares is refused at registration (ADR 0030), which is how this was found.	2026-09-28 00:15:59 +02:00