jschoubben b306c74467 filtering: a per-node 'expose' setting overrides a listen's source (ADR 0051) ...

listens.from was a manifest constant — one value for every node a module runs
on. Now a per-node setting overrides it: {"expose": {"5432": "anywhere"}} makes
postgres public on the machine it is set for while it stays from:mesh elsewhere,
and the firewall (ADR 0050) is computed from the effective source. Exposure()
validates it — a port the module does not listen on, or a source that is not
mesh/anywhere/machine, is refused rather than reaching nothing; UnusedSettings
knows 'expose' is a real destination. Tested: default mesh, setting opens it to
anywhere, bad settings refused.

2026-09-04 21:12:33 +02:00

..

bootstrap_cycle_test.go

What review found in the port machinery, fixed

2026-09-01 21:54:05 +02:00

bound_into_files_test.go

A consumer can write its own connection string

2026-09-01 03:03:07 +02:00

bound_into_files.go

A consumer can write its own connection string

2026-09-01 03:03:07 +02:00

brokered_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00

build_test.go

A module says what it builds, and the built manifest is a different

2026-08-30 03:29:17 +02:00

build.go

A module may mirror an image it did not write

2026-08-30 18:28:05 +02:00

computed_test.go

Where the answer to a requirement is allowed to live

2026-08-29 23:51:50 +02:00

contributes_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00

declaration.go

filtering: a per-node 'expose' setting overrides a listen's source (ADR 0051)

2026-09-04 21:12:33 +02:00

domain_test.go

Where the answer to a requirement is allowed to live

2026-08-29 23:51:50 +02:00

filtering_test.go

filtering: a per-node 'expose' setting overrides a listen's source (ADR 0051)

2026-09-04 21:12:33 +02:00

filtering.go

filtering: a per-node 'expose' setting overrides a listen's source (ADR 0051)

2026-09-04 21:12:33 +02:00

identity.go

A consumer can write its own connection string

2026-09-01 03:03:07 +02:00

licence_test.go

One machine's unanswerable requirement does not remove it from the mesh

2026-08-31 03:06:33 +02:00

machineside_test.go

What review found in the port machinery, fixed

2026-09-01 21:54:05 +02:00

manifest.go

manifest: emits and consumes — the event relationship

2026-09-03 23:44:30 +02:00

names_test.go

Every container is given the mesh's names

2026-08-31 11:13:34 +02:00

naming_test.go

Refuse an action where it was written, not on the machine

2026-09-01 02:55:56 +02:00

naming.go

A provision names the engine, because a consumer is coupled to one

2026-08-31 17:12:46 +02:00

needs_test.go

needs is now own-secrets, named for whose it is

2026-08-31 13:47:21 +02:00

parseall_test.go

A container may not mount a path the module never declared

2026-09-01 19:36:01 +02:00

provided_test.go

Where the answer to a requirement is allowed to live

2026-08-29 23:51:50 +02:00

resolve_test.go

A requirement answered on this machine is still a requirement

2026-09-01 02:15:26 +02:00

resolve.go

The mesh assigns the port, and a module says it once

2026-09-01 17:52:53 +02:00

secrets_into_files_test.go

A file may hold a credential where its content says one belongs

2026-09-01 02:28:50 +02:00

secrets_into_files.go

A comment claimed a test that does not exist

2026-09-01 03:15:22 +02:00

settings_test.go

A module can tell its provider what it needs

2026-08-29 23:35:43 +02:00

settings.go

filtering: a per-node 'expose' setting overrides a listen's source (ADR 0051)

2026-09-04 21:12:33 +02:00

two_consumers_test.go

A consumer is a module on a machine, not a machine

2026-09-01 02:40:09 +02:00