The mint leaves the control plane's old-bus secret alone

The control plane is a module too, and its broker secret is the old bus's credential it is still using while the mint runs. Writing the new bus's blob there cut the mesh off from its own old bus mid-move. Its new-bus credential is the controller principal's bus secret; the module principal is skipped.
Merge pull request 'The control plane mounts the bus secret it reads' (#100 ) from fix/the-controller-mounts-its-bus-secret into main
2026-09-28 01:08:11 +02:00 · 2026-09-27 23:03:42 +00:00 · 2026-09-28 01:03:18 +02:00 · 2026-09-27 22:56:55 +00:00
2 changed files with 9 additions and 0 deletions
@@ -340,6 +340,14 @@ func rolloutMint(ctx context.Context, again bool) error {
 			machines++

 		case broker.KindModule:
+			if p.Module == "mesh-controller" {
+				// The control plane is a module too, and its `broker` secret is the old bus's
+				// credential it is still using while this runs. Writing the new bus's blob there
+				// cut the mesh off from its own old bus mid-move (2026-09-28). Its new-bus credential
+				// is the controller principal's `bus` secret above; nothing else is needed here.
+				skipped++
+				continue
+			}
 			m, inShelf := shelf[p.Module]
 			if !inShelf {
 				skipped++
@@ -62,6 +62,7 @@
        "/var/lib/mesh/mesh-controller/identity:/run/secrets/identity:ro",
        "/var/lib/mesh/mesh-controller/licences:/run/secrets/licences:ro",
        "/var/lib/mesh/mesh-controller/broker:/run/secrets/broker:ro",
+        "/var/lib/mesh/mesh-controller/bus:/run/secrets/bus:ro",
        "/var/lib/mesh/mesh-controller/broker-management:/run/secrets/broker-management:ro",
        "/var/lib/mesh/mesh-controller/broker-address:/run/secrets/broker-address:ro"
      ],
Author	SHA1	Message	Date
jschoubben	4d62e6caf1	The mint leaves the control plane's old-bus secret alone The control plane is a module too, and its broker secret is the old bus's credential it is still using while the mint runs. Writing the new bus's blob there cut the mesh off from its own old bus mid-move. Its new-bus credential is the controller principal's bus secret; the module principal is skipped.	2026-09-28 01:08:11 +02:00
jschoubben	386ae676ca	Merge pull request 'The control plane mounts the bus secret it reads' (#100 ) from fix/the-controller-mounts-its-bus-secret into main	2026-09-27 23:03:42 +00:00
jschoubben	f8a9c3d6bc	The control plane mounts the bus secret it reads MESH_BUS_NATS_FILE named /run/secrets/bus and nothing put a file there: the manifest binds each secret explicitly, and the switch added the secret and the variable but not the bind. Found live — the control plane came up on the new bus and could not read its own credential.	2026-09-28 01:03:18 +02:00
jschoubben	83671fae5f	Merge pull request 'The network map resolves each machine with the seat holders on record' (#99 ) from fix/the-network-map-knows-the-holders into main	2026-09-27 22:56:55 +00:00