nats declares the certificate directory it mounts #123

2026-09-27T22:16:42Z

jschoubben commented

2026-09-27 22:16:42 +00:00

Follow-up to #122. The mesh's broker certificate is the operator's, kept outside any module and mounted read-only by whatever serves the bus; the controller declares that access and now so does nats, the same way. A mount nothing declares is refused at registration (ADR 0030), which is how this was found. The access to the old, never-filled certificate directory is dropped with it.

jschoubben added 2 commits 2026-09-27 22:16:42 +00:00

nats declares the certificate directory it mounts 721149eda1

The mesh's broker certificate is the operator's, kept outside any module and
mounted read-only by whatever serves the bus; the controller declares that
access and now so does nats, the same way. A mount nothing declares is refused
at registration (ADR 0030), which is how this was found.

nats: drop the access to a certificate directory it no longer mounts 7f3d259cf5

jschoubben merged commit f5969a2f9f into main

2026-09-27 22:31:21 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-catalog#123