jschoubben
ff4dc71ce4
The controller ended by its unassignment (issue 1126, ADR 0590), so no build is judged by the lease: the lease witness, its contract and the direct get the witness asked it with are removed, and its tests now prove each rollback path on the node tools' PING. Claude-Session: https://claude.ai/code/session_01NcbgfJ9Gum47zkFKWRaovL
28 lines
1.1 KiB
Plaintext
28 lines
1.1 KiB
Plaintext
# A bus with the grants a witness needs (novox/hq to-be 45 §8), for witnessing_nats_test.go:
|
|
#
|
|
# docker run -d --rm --name w -p 14224:4222 -v $PWD/internal/link/testdata:/c:ro nats:2.11-alpine -js -c /c/witness-grants.conf
|
|
# MESH_TEST_NATS_GRANTS=nats://127.0.0.1:14224 go test ./internal/link/ -run TestNatsWitness
|
|
#
|
|
# `node.anchor` is a machine's host with exactly the subject the witness asks added to what a host
|
|
# already has (its inbox); `node.bare` is a host without it. `runtime` stands in for the tool runtime.
|
|
jetstream: enabled
|
|
accounts {
|
|
MESH {
|
|
jetstream: enabled
|
|
users = [
|
|
{ user: "node.anchor", password: "a", permissions: {
|
|
publish: { allow: ["$SRV.PING.node-tools.anchor"] }
|
|
subscribe: { allow: ["_INBOX.node.anchor.>"] }
|
|
} }
|
|
{ user: "node.bare", password: "b", permissions: {
|
|
publish: { allow: ["mesh.control.bare.>"] }
|
|
subscribe: { allow: ["_INBOX.node.bare.>"] }
|
|
} }
|
|
{ user: "runtime", password: "r", permissions: {
|
|
subscribe: { allow: ["$SRV.PING.node-tools.>"] }
|
|
allow_responses: { max: 1, ttl: "1m" }
|
|
} }
|
|
]
|
|
}
|
|
}
|