Files
mesh-catalog/modules/mesh-provisioner/module.json
T
jschoubben f2eb548204
mesh/delivery merged: source.main moved to novox/mesh-catalog@be24f5ac387f
mesh/delivery-group group fix/l3-words-after-judge merged: every member is merged
mesh/check being carried to f2eb54820469 on be24f5ac387f | from e6de42630355, mesh-delivery 4154c3040cee, mesh-tools 01ee2ef39488
Take core-credentials out of the bus's, the provisioner's and its client's manifests until the judge that knows it runs
The running indexer's judge refuses the word, a refused manifest holds the bus's user list, and so the indexer build
that knows the word is never granted. The node-engine on main still finds these modules by its name list, and the
vault keeps no list, so no credential is lost; the word comes back once the new judge runs (issue 774).

Claude-Session: https://claude.ai/code/session_01JG73KG7AfSdh6FP8VrBqCn
2026-11-03 21:28:29 +01:00

94 lines
1.8 KiB
JSON

{
"module": "mesh-provisioner",
"version": "1",
"runs-as": "mesh-provisioner",
"claims": [
{
"name": "mesh-provisioner",
"scope": "mesh",
"serves": [
"provisioning"
]
}
],
"uses": [
"operator-channel"
],
"reads": [
"mesh-delivery-assigner.placement",
"mesh-delivery-assigner.wants",
"mesh-delivery-indexer.modules",
"mesh-delivery-indexer.manifests",
"node-engine.have",
"mesh-delivery-builder.builds",
"mesh-host.composed",
"gitea.bound",
"keycloak.bound",
"postgres.bound",
"route-adapter.bound",
"route-proxy.bound",
"node-tools.bound",
"mesh-vault.bound"
],
"tools": [
"provisioner_provisions",
"provisioner_plans",
"provisioner_compose",
"provisioner_decide",
"provisioner_health"
],
"state": [
"registry",
"needs",
"applied",
"collect",
"provisions",
"plans",
"refused"
],
"own-secrets": {
"broker": "${dir:state}/broker"
},
"secrets-owner": "mesh-provisioner",
"runtime-health": {
"kind": "tool",
"tool": "provisioner_health",
"interval": "60s",
"timeout": "10s",
"looks": 2,
"grace": "60s"
},
"resources": [
{
"id": "account",
"type": "user",
"name": "mesh-provisioner",
"shell": "/usr/bin/nologin",
"home": "/var/lib/mesh-provisioner"
},
{
"id": "state",
"type": "directory",
"mode": "0700",
"owner": "mesh-provisioner",
"place": ".",
"unknown": "program"
}
],
"build": {
"artifacts": [
{
"name": "tools",
"kind": "bundle",
"language": "go",
"system": "arch",
"from": "cmd/mesh-provisioner",
"binary": "mesh-provisioner",
"loads": [
"mesh-provisioner"
]
}
]
}
}