The controller may publish the memberships it issues #189

2026-10-01T13:20:41Z

mesh-admin commented

2026-10-01 13:20:41 +00:00

After #188 rolled (12:53Z today), the controller's log says, after its first push:

nats: permissions violation: Permissions Violation for Publish to "mesh.assignment.novox.builder" on connection [2745]

The controller's own grant named the control, node and JetStream subjects and not the assignments it alone issues (hq ADR 0160), so no membership has reached the stream yet; runtimes keep serving the derived shape, which is why nothing broke. One line in the grant, the broker golden regenerated (one line differs). Roll-out: merge, then push novox so the broker's configuration carries the new allow line (a grant composed by its holder arrives late), then any push issues memberships.

After #188 rolled (12:53Z today), the controller's log says, after its first push: ``` nats: permissions violation: Permissions Violation for Publish to "mesh.assignment.novox.builder" on connection [2745] ``` The controller's own grant named the control, node and JetStream subjects and not the assignments it alone issues (hq ADR 0160), so no membership has reached the stream yet; runtimes keep serving the derived shape, which is why nothing broke. One line in the grant, the broker golden regenerated (one line differs). Roll-out: merge, then `push novox` so the broker's configuration carries the new allow line (a grant composed by its holder arrives late), then any push issues memberships.

mesh-admin added 1 commit 2026-10-01 13:20:42 +00:00

The controller may publish the memberships it issues de7aed5016

The server refused every membership the controller published after a push (2026-10-01, Permissions
Violation for Publish to mesh.assignment.<node>.<module>): the controller's own grant named the
control, node and JetStream subjects and not the assignments it alone issues (hq ADR 0160). Broker
golden regenerated; one line differs.

mesh-admin referenced this pull request

2026-10-01 13:21:22 +00:00

The store seat promises two verbs, databases and query (ADR 0159) #186

mesh-admin merged commit 184913b620 into main

2026-10-01 13:26:48 +00:00

mesh-admin deleted branch fix/the-controller-may-publish-memberships

2026-10-01 13:26:49 +00:00

mesh-admin referenced this pull request

2026-10-01 13:30:18 +00:00

A refused membership does not stop the controller #190

Sign in to join this conversation.