The control plane speaks the new bus

One environment variable moves it (design 25): MESH_BUS_NATS, read from the `bus` secret `rollout mint` sealed to its machine, and the two that named the old bus go, because being told about both is refused at start. Registered and built ahead of the push that flips it, so the flip and the bus it flips to arrive in one declaration — the same push that starts the new bus and hands this machine its membership. Deliberately not merged until every credential is minted.
Merge pull request 'The move mints every credential and tells each machine its membership' (#95 ) from feat/the-move-mints-and-delivers into main
2026-09-28 00:31:57 +02:00 · 2026-09-27 22:30:58 +00:00
1 changed files with 2 additions and 3 deletions
@@ -47,15 +47,14 @@
        "MESH_STORE_INVENTORY_FILE": "/run/secrets/inventory",
        "MESH_STORE_IDENTITY_FILE": "/run/secrets/identity",
        "MESH_STORE_LICENCES_FILE": "/run/secrets/licences",
-        "MESH_BROKER_AMQP_FILE": "/run/secrets/broker",
        "MESH_BROKER_MANAGEMENT_FILE": "/run/secrets/broker-management",
        "MESH_BROKER_ADDRESS_FILE": "/run/secrets/broker-address",
        "MESH_STORE_INVENTORY_PORT": "${seat:mesh-store:5432}",
        "MESH_STORE_IDENTITY_PORT": "${seat:mesh-store:5432}",
        "MESH_STORE_LICENCES_PORT": "${seat:mesh-store:5432}",
-        "MESH_BROKER_AMQP_PORT": "${seat:mesh-broker:5672}",
        "MESH_BROKER_MANAGEMENT_PORT": "${seat:mesh-broker:15672}",
-        "MESH_BROKER_ADDRESS_PORT": "${seat:mesh-broker:5671}"
+        "MESH_BROKER_ADDRESS_PORT": "${seat:mesh-broker:5671}",
+        "MESH_BUS_NATS_FILE": "/run/secrets/bus"
      },
      "volumes": [
        "/var/lib/mesh-broker-tls:/broker-tls:ro",