The mint leaves the control plane's old-bus secret alone

The control plane is a module too, and its broker secret is the old bus's credential it is still using while the mint runs. Writing the new bus's blob there cut the mesh off from its own old bus mid-move. Its new-bus credential is the controller principal's bus secret; the module principal is skipped.
Merge pull request 'The control plane mounts the bus secret it reads' (#100 ) from fix/the-controller-mounts-its-bus-secret into main
2026-09-28 01:08:11 +02:00 · 2026-09-27 23:03:42 +00:00
1 changed files with 8 additions and 0 deletions
@@ -340,6 +340,14 @@ func rolloutMint(ctx context.Context, again bool) error {
 			machines++

 		case broker.KindModule:
+			if p.Module == "mesh-controller" {
+				// The control plane is a module too, and its `broker` secret is the old bus's
+				// credential it is still using while this runs. Writing the new bus's blob there
+				// cut the mesh off from its own old bus mid-move (2026-09-28). Its new-bus credential
+				// is the controller principal's `bus` secret above; nothing else is needed here.
+				skipped++
+				continue
+			}
 			m, inShelf := shelf[p.Module]
 			if !inShelf {
 				skipped++
Author	SHA1	Message	Date
jschoubben	4d62e6caf1	The mint leaves the control plane's old-bus secret alone The control plane is a module too, and its broker secret is the old bus's credential it is still using while the mint runs. Writing the new bus's blob there cut the mesh off from its own old bus mid-move. Its new-bus credential is the controller principal's bus secret; the module principal is skipped.	2026-09-28 01:08:11 +02:00
jschoubben	386ae676ca	Merge pull request 'The control plane mounts the bus secret it reads' (#100 ) from fix/the-controller-mounts-its-bus-secret into main	2026-09-27 23:03:42 +00:00