Multiple fixes: a run-once step may name what it reads (ADR 0099); secret accept refuses an undeclared name (078) #40

2026-09-21T21:45:07Z

jschoubben commented

2026-09-21 21:45:07 +00:00

ADR 0099 / issue 077: the manifest parser no longer refuses a run-once container with restart-on. For a step the word means run again when what it reads changed — the host's digest already includes what a container reads.
Issue 078: AcceptSecretForModule refuses a name the module does not declare as an own secret; AcceptSecretForPair refuses a requirement the module has not got, a missing --local where several are kept (ADR 0094), or a local it does not keep. Each refusal names what the module declares. Fixtures that registered bare manifests now declare what they deliver.

go test ./... with the test store passes (inventory live tests included); catalogue-wide manifest test passes against the mesh-catalog branch. Companion MRs on multiple-fixes: mesh-host, mesh-catalog, mesh-lab, hq.

- **ADR 0099 / issue 077:** the manifest parser no longer refuses a run-once container with `restart-on`. For a step the word means *run again* when what it reads changed — the host's digest already includes what a container reads. - **Issue 078:** `AcceptSecretForModule` refuses a name the module does not declare as an own secret; `AcceptSecretForPair` refuses a requirement the module has not got, a missing `--local` where several are kept (ADR 0094), or a local it does not keep. Each refusal names what the module declares. Fixtures that registered bare manifests now declare what they deliver. `go test ./...` with the test store passes (inventory live tests included); catalogue-wide manifest test passes against the mesh-catalog branch. Companion MRs on `multiple-fixes`: mesh-host, mesh-catalog, mesh-lab, hq.

jschoubben added 2 commits 2026-09-21 21:45:07 +00:00

A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099) e4da83496f

secret accept is refused for a name the module does not declare, and a pair delivery for a requirement or local it has not got (novox/hq issue 078) 35c5c2bb9b

jschoubben added 1 commit 2026-09-21 21:46:29 +00:00

module issue refuses a module with no broker own secret before making the account (issue 078) 66332705cd

jschoubben added 1 commit 2026-09-21 21:58:38 +00:00

Review: module issue's pre-check factored and tested; a pair delivery for a requirement the module keeps no secret for is refused; builder issue's usage says the module comes first 0d1f2a4152

jschoubben merged commit 713b43799f into main

2026-09-21 21:58:47 +00:00

jschoubben deleted branch multiple-fixes

2026-09-21 21:58:47 +00:00

Sign in to join this conversation.