The registry-trust test reads the runtime's module, which now writes the trust (ADR 0222)
This commit is contained in:
@@ -111,6 +111,14 @@ func TestTheRegistryTrustAndEveryImageFollowThePortTheNodeGaveTheStore(t *testin
|
|||||||
if _, err := assign(ctx, open, "laptop", "app"); err != nil {
|
if _, err := assign(ctx, open, "laptop", "app"); err != nil {
|
||||||
t.Fatal(err)
|
t.Fatal(err)
|
||||||
}
|
}
|
||||||
|
// The runtime's trust is the runtime's module's to write (novox/hq ADR 0222): a stand-in for it
|
||||||
|
// asks where this machine reaches the store, as the docker module does.
|
||||||
|
register(t, open, catalogue.Manifest{Module: "runtime", Version: "1",
|
||||||
|
Resources: []map[string]any{{"id": "daemon", "type": "file", "path": "/etc/docker/daemon.json",
|
||||||
|
"into": "json", "content": `{"insecure-registries": ["${seat:mesh-artifact-store:reach}"]}` + "\n"}}})
|
||||||
|
if _, err := assign(ctx, open, "laptop", "runtime"); err != nil {
|
||||||
|
t.Fatal(err)
|
||||||
|
}
|
||||||
|
|
||||||
on := map[string]bool{"anchor": true, "laptop": true}
|
on := map[string]bool{"anchor": true, "laptop": true}
|
||||||
node, port, found, err := artifactStoreOnNetwork(ctx, open.inventory, on)
|
node, port, found, err := artifactStoreOnNetwork(ctx, open.inventory, on)
|
||||||
|
|||||||
Reference in New Issue
Block a user