The vault claims mesh-vault, and each uplink holder declares the manager it speaks for (hq ADR 0161) #205

2026-10-01T13:59:03Z

mesh-admin commented

2026-10-01 13:59:03 +00:00

hq ADR 0161, the catalogue's part (issues 106 and 138):

mesh-vault claims the seat mesh-vault at mesh scope.
networkmanager, systemd-networkd, dhcpcd declare uplink-networkmanager, uplink-systemd-networkd, uplink-dhcpcd respectively.

Merge last: after mesh-controller #192 has rolled (the seat must exist before a claim names it) and after mesh-host #61 has rolled onto every machine and each has reported once (a holder is refused on any machine whose profile lacks the capability).

hq ADR 0161, the catalogue's part (issues 106 and 138): - `mesh-vault` claims the seat `mesh-vault` at mesh scope. - `networkmanager`, `systemd-networkd`, `dhcpcd` declare `uplink-networkmanager`, `uplink-systemd-networkd`, `uplink-dhcpcd` respectively. Merge last: after mesh-controller #192 has rolled (the seat must exist before a claim names it) and after mesh-host #61 has rolled onto every machine and each has reported once (a holder is refused on any machine whose profile lacks the capability).

mesh-admin added 1 commit 2026-10-01 13:59:04 +00:00

The vault claims mesh-vault, and each uplink holder declares the manager it speaks for (hq ADR 0161) 966fed1829

The vault's claim makes a second provider of secret a second claimant, refused by name. The three
uplink definitions declare uplink-networkmanager, uplink-systemd-networkd and uplink-dhcpcd, which the
host reports for the manager it finds active, so the holder for a manager the machine does not run
is refused the way any missing capability is. Merges after the controller holds the seat and the host
reports the capability.

jschoubben added 1 commit 2026-10-01 14:50:58 +00:00

The vault's events are its own: provisioned, rotated, deprovisioned 8368697744

A module publishes under its own name only; secret.provisioned read as another module's event and the
builder refused the vault's definition today, so the seat claim could not be built. The three events lose
the prefix; nothing outside the vault listens for the old names.

jschoubben added 1 commit 2026-10-01 14:51:15 +00:00

The provisioner announces the vault's events by their new names 6ba61a8b4b

jschoubben added 1 commit 2026-10-01 14:52:49 +00:00

This branch carries the vault's claim alone; the uplink capabilities wait for every machine to report its profile 932efb5186

mesh-admin referenced this pull request

2026-10-01 14:53:06 +00:00

Each uplink holder declares the manager it speaks for (hq ADR 0161) #206

mesh-admin merged commit 32fa76fccb into main

2026-10-01 14:53:15 +00:00

mesh-admin deleted branch feat/the-vault-claims-its-seat-and-the-uplinks-say-their-dialect

2026-10-01 14:53:16 +00:00

jschoubben referenced this issue from a commit