The move mints every credential and tells each machine its membership #95

2026-09-27T22:17:03Z

jschoubben commented

2026-09-27 22:17:03 +00:00

The half of design 28 task 5.2 the first live attempt found missing. Pairs with mesh-host#34 (merged) and mesh-catalog#122/#123.

rollout mint gives every principal the new bus will have a credential it does not yet have, and puts each where its owner reads it: a machine's as a membership — bus address, fingerprint, password, transport — sealed into its declaration (migration 0041; the bus-membership file resource the host reads after applying); a module's as its broker secret, through the same delivery module issue uses; the control plane's own as its bus secret. Idempotent. The bus's address is worked out from where the bus's module is assigned rather than read from this process's environment, because this process is still on the old bus when it runs — and must be.

Until now a credential was minted only at enrolment, at module issue and for a person, so no machine already enrolled could ever be moved. rollout check was right to refuse; now there is something to run first.

Catalogue, store and command packages green.

The half of design 28 task 5.2 the first live attempt found missing. Pairs with mesh-host#34 (merged) and mesh-catalog#122/#123. `rollout mint` gives every principal the new bus will have a credential it does not yet have, and puts each where its owner reads it: a machine's as a membership — bus address, fingerprint, password, transport — sealed into its declaration (migration 0041; the `bus-membership` file resource the host reads after applying); a module's as its broker secret, through the same delivery `module issue` uses; the control plane's own as its `bus` secret. Idempotent. The bus's address is worked out from where the bus's module is assigned rather than read from this process's environment, because this process is still on the old bus when it runs — and must be. Until now a credential was minted only at enrolment, at `module issue` and for a person, so no machine already enrolled could ever be moved. `rollout check` was right to refuse; now there is something to run first. Catalogue, store and command packages green.

jschoubben added 1 commit 2026-09-27 22:17:03 +00:00

The move mints every credential and tells each machine its membership e8aa7ed9e7

`rollout mint` gives every principal the new bus will have a credential it does
not yet have and puts each where its owner reads it: a machine's as a membership
— bus address, fingerprint, password, transport — sealed into its declaration
(migration 0041, the `bus-membership` resource the host reads after applying); a
module's as its broker secret, through the same delivery `module issue` uses; the
control plane's own as its `bus` secret. Idempotent, and worked out from where the
bus's module is assigned rather than from this process's environment, because this
process is still on the old bus when it runs and must be.

This is the half of design 28 task 5.2 the first live attempt found missing: a
credential was minted only at enrolment, at `module issue` and for a person, so no
machine already enrolled could ever be moved. `rollout check` was right to refuse;
now there is something to run first.

jschoubben merged commit ad2eed2f71 into main

2026-09-27 22:30:58 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-controller#95