 jschoubben
|
d05a5e87af
|
Hold the node while an assignment is recorded, so none lands between a preview and the flip (hq ADR 0100)
|
2026-09-22 19:47:23 +02:00 |
|
|
jschoubben
|
01814854b8
|
Refuse the flip on an account naming nothing reachable, and mark such an account partial in the preview (hq ADR 0100)
|
2026-09-22 19:47:23 +02:00 |
|
|
jschoubben
|
2cf8739a84
|
Clear the whole account an adopted node gave when it converges (hq ADR 0100)
|
2026-09-22 19:45:35 +02:00 |
|
|
jschoubben
|
87ecc9326e
|
Refuse a port given for the whole mesh where it is set, not at every node's composition (hq ADR 0100)
|
2026-09-22 19:45:35 +02:00 |
|
|
jschoubben
|
0f3eedd163
|
Do not guard a port this node is told to open to everyone (hq ADR 0103)
|
2026-09-22 19:44:35 +02:00 |
|
|
jschoubben
|
dd6aad4a2f
|
Give a machine port only to a port a module's container publishes, which is the only one the mesh can move (hq ADR 0038)
|
2026-09-22 19:44:35 +02:00 |
|
|
jschoubben
|
65187d4de0
|
Wait for a held node without pinning a pool connection, and give up after a bounded wait naming it (hq ADR 0100)
|
2026-09-22 18:31:10 +02:00 |
|
|
jschoubben
|
2e6b9d30bd
|
Give a cascade round's hold back on every return, a body that cannot be marshalled included (hq ADR 0100)
|
2026-09-22 18:31:00 +02:00 |
|
|
jschoubben
|
cc47330884
|
Reload the guard on its table rather than restart it, so a change leaves no port unguarded (hq ADR 0103)
|
2026-09-22 18:27:27 +02:00 |
|
|
jschoubben
|
bfe4991dd7
|
Name every held kind of each module the flip takes in the converge preview and its digest (hq ADR 0103)
|
2026-09-22 18:27:19 +02:00 |
|
|
jschoubben
|
689c2c6d33
|
Hold a node from composing to sending, so a push composed before converge or adopt is never sent after it (hq ADR 0100)
|
2026-09-22 18:10:04 +02:00 |
|
|
jschoubben
|
1eff586a40
|
Hold the filter module to replacing the stock unit's flushing stop (hq ADR 0100)
|
2026-09-22 18:06:15 +02:00 |
|
|
jschoubben
|
4bb19c9e40
|
Give a machine port one holder: refuse ssh's, another module's and a doubled one, and release the assignment a given port replaces (hq ADR 0100)
|
2026-09-22 18:05:31 +02:00 |
|
|
jschoubben
|
9280513afa
|
Refuse token issue --adopted for a converged node and point to adopt, rather than flip it quietly (hq ADR 0100)
|
2026-09-22 18:03:45 +02:00 |
|
|
jschoubben
|
41c300eae0
|
Name every kind of an untaken module's resources in the adoption envelope, not only files and containers (hq ADR 0103)
|
2026-09-22 18:03:03 +02:00 |
|
|
jschoubben
|
c91fe1a6eb
|
Converge only on the preview the operator saw, named by its digest, and never on an account older than 15 minutes (hq ADR 0100)
|
2026-09-22 18:02:30 +02:00 |
|
|
jschoubben
|
ba0f44a36d
|
Say in the converge preview that routed traffic is not previewed and is dropped unless declared (hq ADR 0100)
|
2026-09-22 18:01:04 +02:00 |
|
|
jschoubben
|
3dc7d0e386
|
Preview ssh as the derived filter admits it, and say a narrowing to the private network closes (hq ADR 0100)
|
2026-09-22 18:00:53 +02:00 |
|
|
jschoubben
|
ade6b2bfb6
|
Declare nftables before the guard's table, so a node joining adopted without nft can load it (hq ADR 0103)
|
2026-09-22 17:59:32 +02:00 |
|
|
jschoubben
|
a2dfaaf4d1
|
Guard only packets addressed to this machine, and order the guard's unit before the network and against shutdown (hq ADR 0103)
|
2026-09-22 17:59:09 +02:00 |
|
|
jschoubben
|
a82bfb41f2
|
Leave an IPv6 loopback mapping out of what a container publishes, reading ports from the end (hq ADR 0100)
|
2026-09-22 17:58:50 +02:00 |
|
|
jschoubben
|
8db66e9532
|
Derive the guard from taken modules only: their published private-network ports and their manifests' guards (hq ADR 0103)
|
2026-09-22 17:58:37 +02:00 |
|
|
jschoubben
|
28b7fb81ba
|
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
|
2026-09-22 17:51:38 +02:00 |
|
|
jschoubben
|
c93128d82f
|
Hold the catalogue's store, broker and filter manifests to what adoption needs of them (hq ADR 0100)
|
2026-09-22 17:33:09 +02:00 |
|
|
jschoubben
|
dbf62b5212
|
Read the foundation's ports from each node's settings, wherever a port is used (hq ADR 0100)
|
2026-09-22 17:31:07 +02:00 |
|
|
jschoubben
|
1ea84f8b8f
|
Take a module, converge a node after a preview, and return it to adopted, from the command line and the API (hq ADR 0100)
|
2026-09-22 17:27:35 +02:00 |
|
|
jschoubben
|
28894fa5bd
|
Keep what an adopted node reports holding, the firewall it found and what is reachable on it (hq ADR 0100)
|
2026-09-22 17:23:09 +02:00 |
|
|
jschoubben
|
c3b1617693
|
Declare openings and a refusal-only guard on an adopted node in place of the filter (hq ADR 0100)
|
2026-09-22 17:21:44 +02:00 |
|
|
jschoubben
|
a86a6c2974
|
Carry an adopted node's mode and taken modules in every declaration, from one marshaller (hq ADR 0100)
|
2026-09-22 17:17:54 +02:00 |
|
|
jschoubben
|
1c32af6a22
|
Record whether a node is adopted and which modules were taken on it (hq ADR 0100)
|
2026-09-22 17:14:05 +02:00 |
|
|
jschoubben
|
0a39b7df82
|
Merge pull request 'Nothing the control queue carries is lost while the store restarts (issue 083)' (#43) from multiple-fixes into main
|
2026-09-22 14:42:57 +02:00 |
|
|
jschoubben
|
4f3b4e6014
|
Review of 083: an upgrade handled during shutdown is left for the broker; an enrolment cut short by shutdown is told to try again; a refused redelivery says what it probably is
|
2026-09-22 14:39:15 +02:00 |
|
|
jschoubben
|
32b8af6a9b
|
The enrolment proof's message has a known answer, repeated in the host's test
|
2026-09-22 14:33:33 +02:00 |
|
|
jschoubben
|
4567fa666c
|
Review of 083: finishing an enrolment whose token was spent takes proof of the key's private half, a live lease and a first delivery — a public key alone cannot replay a spent token; shutdown leaves held messages for the broker; identical builds supersede; what is held leaves room in the prefetch
|
2026-09-22 14:33:13 +02:00 |
|
|
jschoubben
|
a3b7e830c8
|
Review of 083: a message the store cannot take is held and retried on a ticker, not slept on, so enrolments are answered meanwhile; a newer one per subject supersedes; the password is replaced after the spend; the same presenter may finish after a lost answer; upgrades retry only on the store
|
2026-09-22 14:23:03 +02:00 |
|
|
jschoubben
|
1a41b88ed3
|
Nothing the control queue carries is lost while the store restarts: an enrolment claims its token and spends it last, and is asked to try again; build results, upgrades and catch-ups are handed back, bounded (novox/hq issue 083)
|
2026-09-22 14:06:28 +02:00 |
|
|
jschoubben
|
b9cdb96a90
|
Merge pull request 'A report that arrives while the store restarts is kept, not lost (issue 082)' (#42) from multiple-fixes into main
|
2026-09-22 13:53:13 +02:00 |
|
|
jschoubben
|
3fd0c37d22
|
Review of 082: a store killed mid-conversation is an outage and a wrong password is not; one report holds the queue at most two minutes, then is let go loudly; shutdown does not wait out the pause
|
2026-09-22 13:34:04 +02:00 |
|
|
jschoubben
|
047830a6b5
|
A report the store cannot take yet is handed back to the broker, not acknowledged and lost (novox/hq issue 082)
|
2026-09-22 13:25:13 +02:00 |
|
|
jschoubben
|
ff26ea959d
|
Merge pull request 'Every machine was named twice over; only a machine on the private network is named (issue 079)' (#41) from multiple-fixes into main
|
2026-09-22 02:19:13 +02:00 |
|
|
jschoubben
|
5150c0a0f8
|
One predicate for the private network: the filter's accept set is the set the names and the resolver mean; the catalogue is read once for the three mesh-wide questions
|
2026-09-22 02:04:28 +02:00 |
|
|
jschoubben
|
6a64aba506
|
Only a machine on the private network is named: the names follow the resolver's rule, one predicate for both (novox/hq issue 079)
|
2026-09-22 01:41:13 +02:00 |
|
|
jschoubben
|
8152665298
|
The facts write the suffix the control plane composed the names with, handed down rather than written twice (review of issue 079); the fixture is keyed as production keys it
|
2026-09-22 01:27:50 +02:00 |
|
|
jschoubben
|
b529c49cff
|
A machine's names are not suffixed twice: the facts take the internal names the control plane hands them (novox/hq issue 079)
|
2026-09-22 01:13:28 +02:00 |
|
|
jschoubben
|
713b43799f
|
Merge pull request 'Multiple fixes: a run-once step may name what it reads (ADR 0099); secret accept refuses an undeclared name (078)' (#40) from multiple-fixes into main
|
2026-09-21 23:58:47 +02:00 |
|
|
jschoubben
|
0d1f2a4152
|
Review: module issue's pre-check factored and tested; a pair delivery for a requirement the module keeps no secret for is refused; builder issue's usage says the module comes first
|
2026-09-21 23:58:36 +02:00 |
|
|
jschoubben
|
66332705cd
|
module issue refuses a module with no broker own secret before making the account (issue 078)
|
2026-09-21 23:46:28 +02:00 |
|
|
jschoubben
|
35c5c2bb9b
|
secret accept is refused for a name the module does not declare, and a pair delivery for a requirement or local it has not got (novox/hq issue 078)
|
2026-09-21 23:31:06 +02:00 |
|
|
jschoubben
|
e4da83496f
|
A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)
|
2026-09-21 23:31:06 +02:00 |
|
|
jschoubben
|
52d39f0740
|
Merge pull request 'The control plane's recipe declares its base, and an undeclared FROM is refused (ADR 0097 live)' (#39) from multiple-fixes into main
|
2026-09-21 22:58:22 +02:00 |
|