Point at 0006 and 0008 rather than a record of their own
The language and the bundle ordering went into ADR 0006, where the substrate and the control plane already live, and the store-per-context mechanics into 0008, which already decided the rule. Nothing changed but where the reasoning is kept.
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
# The control plane's image.
|
||||
#
|
||||
# novox/hq ADR 0024: this image is pinned by digest in the bundle the host carries, fetched on a
|
||||
# novox/hq ADR 0006: this image is pinned by digest in the bundle the host carries, fetched on a
|
||||
# machine where no mesh exists yet, and run before there is anything to check it against. So it
|
||||
# holds the program and nothing else — no shell, no package manager, no libc, nothing with a CVE
|
||||
# feed of its own. What a person has to audit before trusting a first node is one binary.
|
||||
|
||||
@@ -1,4 +1,4 @@
|
||||
# novox/hq ADR 0024 — the control plane, in Go.
|
||||
# novox/hq ADR 0006 — the control plane, in Go.
|
||||
#
|
||||
# The image the bundle pins holds the program and nothing else, so the build is static and the
|
||||
# container is built FROM scratch. That is not a size optimisation: this image is fetched by
|
||||
|
||||
@@ -121,7 +121,7 @@ the bundle and believed it. Everything in the image is something that person wou
|
||||
| | |
|
||||
|---|---|
|
||||
| what the control plane is | novox/hq ADR 0006 |
|
||||
| what it takes to run one, and why Go | novox/hq ADR 0024 |
|
||||
| what it takes to run one, and why Go | novox/hq ADR 0006 |
|
||||
| a context owns its store, exclusively | novox/hq ADR 0008 |
|
||||
| schema changes are numbered migrations | novox/hq ADR 0013 |
|
||||
| a test defends a decision | novox/hq ADR 0017 |
|
||||
|
||||
Reference in New Issue
Block a user