From 84024cbdb615b7fc86462b22169377fe540fc467 Mon Sep 17 00:00:00 2001 From: jochen Date: Mon, 28 Sep 2026 00:31:57 +0200 Subject: [PATCH] The control plane speaks the new bus MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit One environment variable moves it (design 25): MESH_BUS_NATS, read from the `bus` secret `rollout mint` sealed to its machine, and the two that named the old bus go, because being told about both is refused at start. Registered and built ahead of the push that flips it, so the flip and the bus it flips to arrive in one declaration — the same push that starts the new bus and hands this machine its membership. Deliberately not merged until every credential is minted. --- module.json | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/module.json b/module.json index 85e1466..2ec103d 100644 --- a/module.json +++ b/module.json @@ -47,15 +47,14 @@ "MESH_STORE_INVENTORY_FILE": "/run/secrets/inventory", "MESH_STORE_IDENTITY_FILE": "/run/secrets/identity", "MESH_STORE_LICENCES_FILE": "/run/secrets/licences", - "MESH_BROKER_AMQP_FILE": "/run/secrets/broker", "MESH_BROKER_MANAGEMENT_FILE": "/run/secrets/broker-management", "MESH_BROKER_ADDRESS_FILE": "/run/secrets/broker-address", "MESH_STORE_INVENTORY_PORT": "${seat:mesh-store:5432}", "MESH_STORE_IDENTITY_PORT": "${seat:mesh-store:5432}", "MESH_STORE_LICENCES_PORT": "${seat:mesh-store:5432}", - "MESH_BROKER_AMQP_PORT": "${seat:mesh-broker:5672}", "MESH_BROKER_MANAGEMENT_PORT": "${seat:mesh-broker:15672}", - "MESH_BROKER_ADDRESS_PORT": "${seat:mesh-broker:5671}" + "MESH_BROKER_ADDRESS_PORT": "${seat:mesh-broker:5671}", + "MESH_BUS_NATS_FILE": "/run/secrets/bus" }, "volumes": [ "/var/lib/mesh-broker-tls:/broker-tls:ro", -- 2.54.0