From d95174da027f226de9017567b8fb1426fe92eeda Mon Sep 17 00:00:00 2001 From: jochen Date: Mon, 21 Sep 2026 22:35:33 +0200 Subject: [PATCH] The route-forwarding bed places its machine on the overlay: the authority certifies its private-network address --- test/integration/route-forwarding.test.ts | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/test/integration/route-forwarding.test.ts b/test/integration/route-forwarding.test.ts index 8fb35da..b6ecce0 100644 --- a/test/integration/route-forwarding.test.ts +++ b/test/integration/route-forwarding.test.ts @@ -171,6 +171,11 @@ test("the mesh routes a public name through the proxy to the consumer, and withd // is routed under is composed from its label and the node's public domain (ADR 0066), which // the bed sets first. await mesh(`node public-domain ${MACHINE} ${DOMAIN}`); + // The authority certifies itself for the machine's private-network address, which is what a + // consumer on any node dials; a machine raised from the bundle has none until it is placed on + // the overlay. Placed as a hub of one, the way a real first node is. + await mesh(`overlay place ${MACHINE} --hub --endpoint 192.0.2.10:51820 --site lab`); + await mesh(`assign ${MACHINE} networking`); for (const name of ["step-ca", "route-proxy", "hello-web"]) { await must(`printf %s ${quote(catalogueModule(name, held))} > /tmp/${name}.json && docker cp /tmp/${name}.json mesh-controller:/${name}.json`); await mesh(`module add /${name}.json`);