novox/mesh-controller
6
0
Fork 0
Code Issues Pull Requests 4 Releases Wiki Activity
Files
42c394acc261cc6f1bb2114afd17f881939df2c1
mesh-controller/internal/catalogue
T
History
jschoubben b9ad7a2948 Review before merge: refuse a silent disagreement, and bound the sweep 
Three things found reading this back, each of which would have been quiet.

A consumer that keeps several holders of one provision (ADR 0094) gets a
login per holder, and a provider derives from the login — so it would make a
resource per holder while the consumer is told one value for the requirement.
That is issue 124's own failure one case to the side: authenticate, then be
refused on every object. Refused now, naming both ends.

The sweep runs inside somebody's build and was unbounded. At most two hundred
artifacts and sixty seconds, stopping at the first refusal because a store
that refuses one refuses all; the rest is offered again next build.

The citation and migration renumbers are in the commit before this one.
2026-10-04 03:27:32 +02:00
..
a_service_process_test.go
Compose a module's Go service as a process the host runs (hq issue 213)
2026-10-04 01:11:26 +02:00
accesses_test.go
catalogue: a module accesses operator-owned data, and does not own it
2026-09-05 22:10:58 +02:00
adoption_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
adoption.go
Say that the guard names the runtime's bridges where the filter names their addresses (hq ADR 0103)
2026-09-22 19:51:10 +02:00
amqp_is_not_a_provision_test.go
AMQP is not a provision: the bus seat delivers the bus, and the word is refused
2026-09-27 23:29:00 +02:00
artifact_store_alias_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifact_store_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
artifacts_test.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
artifacts.go
An address is read from the node's settings where it is used, never recorded with a port
2026-09-23 23:49:31 +02:00
bootstrap_cycle_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
bound_into_files_test.go
catalogue: announce a same-node provider at the port it is published on
2026-09-09 23:02:50 +02:00
bound_into_files.go
Rebased onto main: ADR 0188 renumbered to 0201, migration 0055 to 0056
2026-10-04 02:45:06 +02:00
broker_seat_test.go
The artifact store's seat is named for its scope: mesh-artifact-store
2026-09-30 21:14:40 +02:00
brokered_test.go
A pin names the module as well as the node; a node that answers twice is refused
2026-10-01 17:23:31 +02:00
build_system_test.go
An artifact says which operating system it is built for
2026-09-29 00:54:27 +02:00
build_test.go
The builder resolves the SDK from the mesh registry, and can publish packages
2026-09-16 10:27:26 +02:00
build.go
Compose a module's Go service as a process the host runs (hq issue 213)
2026-10-04 01:11:26 +02:00
catalogue_check_test.go
The catalogue-wide checks run against the checkout beside this one by default
2026-09-30 22:10:42 +02:00
catrust_manifest_test.go
The trust module renders the authority it was bound to
2026-09-29 15:07:33 +02:00
chosen.go
A pin names the module as well as the node; a node that answers twice is refused
2026-10-01 17:23:31 +02:00
co_located_test.go
Rename mesh-control -> mesh-controller, substrate -> foundation
2026-09-16 18:40:40 +02:00
computed_test.go
Write the registry's trust into the runtime's file and reload the runtime instead of restarting it; prefix reload-on like restart-on (hq ADR 0102)
2026-09-22 17:51:38 +02:00
consumer_into_serves.go
Review before merge: refuse a silent disagreement, and bound the sweep
2026-10-04 03:27:32 +02:00
contributes_test.go
A setting reaches only what declares it, the mesh places its own files, registration refuses a name
2026-09-30 22:29:28 +02:00
controller_is_a_process_test.go
Run the controller as a Go bundle the host starts as a process (hq issue 213)
2026-10-04 01:45:25 +02:00
cron.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
declaration_test.go
The mesh composes the accounts; the module owns its server
2026-09-27 02:50:23 +02:00
declaration.go
Review before merge: refuse a silent disagreement, and bound the sweep
2026-10-04 03:27:32 +02:00
derived_for_consumer_test.go
Review before merge: refuse a silent disagreement, and bound the sweep
2026-10-04 03:27:32 +02:00
dir_into_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
dir_into.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
domain_test.go
Rename the mesh's seats to mesh-*, keeping their interfaces
2026-09-26 23:07:09 +02:00
endpoint_test.go
A route that names an endpoint still carries that endpoint's port
2026-09-29 11:55:28 +02:00
endpoints_setting_test.go
An assignment configures an endpoint as one thing
2026-09-29 11:25:40 +02:00
events.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
filtering_foundation_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
filtering_test.go
The hub relays the mesh passing through it
2026-10-02 11:17:09 +02:00
filtering.go
The hub relays the mesh passing through it
2026-10-02 11:17:09 +02:00
foundation_manifests_test.go
The forge's tests compose its code as a bundle the node's runtime serves (hq ADR 0198)
2026-10-04 00:50:06 +02:00
genesis_image_test.go
Pin the image's Go base in the Dockerfile, which genesis builds as it stands (hq issue 223)
2026-10-04 01:49:05 +02:00
go_bundle_test.go
A bundle in a compiled language may name which command it builds
2026-09-30 09:55:54 +02:00
holdings_test.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
hosts_region_test.go
review: hold the hosts region through composition, and say so in plan
2026-09-27 00:05:41 +02:00
identity_test.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
identity.go
Resync hq ADR references 0044-0054 -> 0039-0049 after the hq record reconciliation
2026-09-05 12:47:13 +02:00
installation_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
installation.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
invokes_test.go
A module may invoke tools, and a manifest is checked where it is written
2026-09-30 16:12:43 +02:00
jails_into_test.go
A changed jail filter restarts fail2ban
2026-10-02 23:28:25 +02:00
jails_into.go
A changed jail filter restarts fail2ban
2026-10-02 23:28:25 +02:00
kept_test.go
An operator key, a second seal on every own secret, and the vault keeps the export
2026-09-20 23:56:49 +02:00
licence_test.go
catalogue: deliver a keyless same-node provider's served facts
2026-09-07 05:08:04 +02:00
machine_into_files_test.go
A module can name the mesh's range: ${machine:mesh-range} (novox/hq ADR 0112)
2026-09-27 16:52:00 +02:00
machine_into_files.go
The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177)
2026-10-02 16:48:16 +02:00
machineside_test.go
What review found in the port machinery, fixed
2026-09-01 21:54:05 +02:00
manifest.go
Rebased onto main: ADR 0188 renumbered to 0201, migration 0055 to 0056
2026-10-04 02:45:06 +02:00
mounts_test.go
A filter module's own filter file counts as declared for a mount (hq ADR 0169)
2026-10-02 14:04:35 +02:00
names_test.go
No container is given the mesh's names; it resolves them
2026-09-30 14:38:07 +02:00
naming_test.go
Refuse an action where it was written, not on the machine
2026-09-01 02:55:56 +02:00
naming.go
A provision names the engine, because a consumer is coupled to one
2026-08-31 17:12:46 +02:00
needs_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
no_subjects_test.go
Event names are checked now, per manifest and across the catalogue
2026-09-27 14:43:16 +02:00
operators_machine_test.go
The service manager is a node seat with the unit verbs, and a user shape names the account (hq ADR 0176, 0177)
2026-10-02 16:48:16 +02:00
own_name_test.go
A module is told the name it is served under (hq 122)
2026-09-30 17:08:44 +02:00
own_secret_taken_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
pin_names_module_test.go
The first pass does not refuse two providers beside the consumer
2026-10-01 17:34:17 +02:00
placed_paths_test.go
The path-preservation proof resolves access ids to their default paths too
2026-10-01 00:01:41 +02:00
placement_test.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
placement.go
An assignment places a module's directories and its accesses (hq 153)
2026-09-30 22:42:50 +02:00
port_into_test.go
Prove the untouched environment is the same map, not an equal one
2026-09-22 23:29:28 +02:00
port_into.go
Compose a process's environment as a container's
2026-10-04 00:27:42 +02:00
prepares_test.go
A module's name may contain a dot, so the derived step adds none
2026-09-28 15:44:18 +02:00
print_rehearsal_test.go
The filter constrains what arrives from outside, and names no network
2026-09-29 01:01:29 +02:00
process_env_test.go
Compose a process's environment as a container's
2026-10-04 00:27:42 +02:00
provided_test.go
Facts carry the format as a template, so the control plane holds none (ADR 0120)
2026-09-27 01:33:20 +02:00
reach_test.go
Reach asks for names on a routed endpoint, and its port stays the manifest's
2026-09-29 02:50:41 +02:00
received_on_the_bus_test.go
The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only
2026-10-02 01:46:30 +02:00
reflects_renamed_test.go
The restart-on rename reads both list shapes
2026-09-17 23:35:12 +02:00
resolve_keeps_references_test.go
A resolved manifest keeps a built reference in the store's own form, never the address it was reached by (hq ADR 0155)
2026-10-02 23:13:22 +02:00
resolve_loopback_test.go
A binding answered on this very node still carries an address
2026-09-14 21:11:37 +02:00
resolve_test.go
The broker credential resolves the mesh-broker seat, not the hub (issue 059)
2026-09-18 01:02:26 +02:00
resolve.go
The first pass does not refuse two providers beside the consumer
2026-10-01 17:34:17 +02:00
resolver_manifests_test.go
The virtualisation capability grants the lab its daemon's socket
2026-10-02 14:46:17 +02:00
roster_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
roster.go
The roster is the machines: each node's internal domain covers its routes (hq ADR 0191)
2026-10-03 16:10:16 +02:00
routing_test.go
A route's internal name says where the request arrives
2026-09-30 14:51:12 +02:00
runonce_test.go
A run-once step may name what it reads: the pair run-once + restart-on is no longer refused (novox/hq ADR 0099)
2026-09-21 23:31:06 +02:00
runtime_gate_test.go
A tool container on the runtime's image is refused once the runtime is registered (hq ADR 0175, to-be 38 WP2.4)
2026-10-02 18:30:14 +02:00
runtime_test.go
integrate: go served
2026-10-03 23:12:21 +02:00
runtime.go
A runtime compiled to a binary runs itself (hq ADR 0193)
2026-10-03 21:24:12 +02:00
schedule_test.go
catalogue: carry and validate a container schedule (ADR 0053)
2026-09-06 14:08:51 +02:00
seat_into_test.go
Run the controller as a Go bundle the host starts as a process (hq issue 213)
2026-10-04 01:45:25 +02:00
seat_into.go
Compose a process's environment as a container's
2026-10-04 00:27:42 +02:00
seats_declared_test.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
seats_declared.go
A claim may name the verbs it serves for its seat (hq ADR 0160)
2026-10-01 15:18:34 +02:00
seats_test.go
The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)
2026-10-02 22:31:55 +02:00
seats.go
The build role is the node-scoped seat node-build-agent, and its work is shared by every holder (hq ADR 0190)
2026-10-02 22:31:55 +02:00
secret_restart_test.go
An assignment issues its bus credential, a push refuses one nobody issued, and what reads a secret restarts on it (hq issue 203)
2026-10-03 04:01:17 +02:00
secrets_in_environment_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files_test.go
A module's own secret rotates when its definition says the module reads it at start (hq 180)
2026-10-01 11:41:49 +02:00
secrets_into_files.go
A module may hold several secrets from one provider, each a pair of its own
2026-09-21 20:28:16 +02:00
setting_into_test.go
A definition names no installation: the check, an operator's value, a context on the git seat
2026-09-30 18:38:06 +02:00
setting_into.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings_judge_test.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
settings_test.go
A served value or a contribution's may be the operator's: ${setting:…} fills there too, refused by name when unset
2026-09-30 22:34:43 +02:00
settings.go
A take acts on the preview it showed; a setting is judged where it is stored; a kept network and a minted secret are said (hq ADR 0163)
2026-10-02 11:01:09 +02:00
several_contributions_test.go
contributes: a module's grant carries no value where it contributed several times
2026-09-24 18:54:35 +02:00
several_secrets_test.go
Review: one local name is still a local name; a local name is unique; recovery knows it; recipes read as instructions; a tag before a digest; ask fails at once when nothing serves
2026-09-21 21:03:22 +02:00
shared_credential_test.go
A provider with one credential shares it with every consumer, remade for all at once (hq ADR 0158)
2026-10-01 12:26:44 +02:00
short_form_port_protocol_test.go
A short-form port keeps its protocol and still gets its machine port
2026-09-30 16:58:23 +02:00
showcase_manifest_test.go
A module can be told which port it was given
2026-09-15 13:20:01 +02:00
ssh_client_test.go
The mesh owns the operator's ~/.ssh: account fact + home-scoped resources (to-be 29)
2026-09-27 17:50:56 +02:00
the_bus_is_never_public_test.go
The bus is never public: the broker port is no longer a foundation opening
2026-10-02 22:52:22 +02:00
two_consumers_test.go
A consumer is a module on a machine, not a machine
2026-09-01 02:40:09 +02:00
vault_seat_test.go
The vault's seat, and a report that carries the machine's profile (hq ADR 0161)
2026-10-01 15:58:04 +02:00
verbs_test.go
The mesh's own verbs are the mesh-controller seat's tools
2026-09-30 17:39:38 +02:00
verbs.go
The controller seat gains a generic verb: command runs one line of the binary and answers what it printed
2026-10-02 16:53:27 +02:00
version_in_a_path_test.go
A resource can name the version of the build it uses
2026-09-30 10:03:55 +02:00
while_stopped_test.go
The store keeps what the records name (hq ADR 0189)
2026-10-04 02:32:19 +02:00