nats declares the certificate directory it mounts #123

Merged

jschoubben merged 2 commits from feat/nats-serves-the-meshs-certificate into main

2026-09-27 22:31:21 +00:00

Author	SHA1	Message	Date
jschoubben	7f3d259cf5	nats: drop the access to a certificate directory it no longer mounts	2026-09-28 00:16:23 +02:00
jschoubben	721149eda1	nats declares the certificate directory it mounts The mesh's broker certificate is the operator's, kept outside any module and mounted read-only by whatever serves the bus; the controller declares that access and now so does nats, the same way. A mount nothing declares is refused at registration (ADR 0030), which is how this was found.	2026-09-28 00:15:59 +02:00

Author

SHA1

Message

Date

jschoubben

7f3d259cf5

nats: drop the access to a certificate directory it no longer mounts

2026-09-28 00:16:23 +02:00

jschoubben

721149eda1

nats declares the certificate directory it mounts

The mesh's broker certificate is the operator's, kept outside any module and
mounted read-only by whatever serves the bus; the controller declares that
access and now so does nats, the same way. A mount nothing declares is refused
at registration (ADR 0030), which is how this was found.

2026-09-28 00:15:59 +02:00