Commit Graph

  • fe50f33023 Merge pull request 'The beds place the builder's manifest too' (#23) from feat/installation-sets-up-the-builder into main jschoubben 2026-09-14 12:32:17 +02:00
  • fb6dab6a48 The beds place the builder's manifest too jschoubben 2026-09-14 12:31:44 +02:00
  • 36a5ad758b Merge pull request 'The beds raise a mesh through an installer that carries a builder' (#22) from feat/a-module-is-a-repository-and-a-path into main jschoubben 2026-09-13 11:17:29 +02:00
  • d27f24cf3e The bed resolves an artifact the way the builder would jschoubben 2026-09-13 04:56:00 +02:00
  • fb18807000 The bed checks the control plane was built, not carried jschoubben 2026-09-13 04:28:54 +02:00
  • 607ea241c7 The lab's installer carries a builder, and genesis is told what to build jschoubben 2026-09-13 04:24:18 +02:00
  • 1ba237a634 Stage the sdk from its own checkout, not from a symlink that may not be one jschoubben 2026-09-13 02:55:24 +02:00
  • 7cb53d5092 Merge pull request 'Raise a mesh of one by the installer, in a bed of its own' (#21) from feat/a-module-is-a-repository-and-a-path into main jschoubben 2026-09-12 16:54:28 +02:00
  • e427e41389 Raise a mesh of one by the installer, in a bed of its own jschoubben 2026-09-12 16:46:05 +02:00
  • 06d22320f8 Merge pull request 'The provider remap moves a port; it does not bind it to loopback' (#20) from fix/the-remap-moves-a-port into main jschoubben 2026-09-11 22:34:41 +02:00
  • 3f58a0a08f The provider remap moves a port; it does not bind it to loopback jschoubben 2026-09-11 22:05:18 +02:00
  • 6ed5fdb3c2 Merge pull request 'Delete the lab's registry, and bootstrap the anchor through the installer' (#19) from feat/bed-bootstraps-through-the-installer into main jschoubben 2026-09-11 21:57:04 +02:00
  • 555401a787 The bed bootstraps through the installer, not around it jschoubben 2026-09-11 11:46:42 +02:00
  • 6c09ddb528 An image the machine has no account for is handed over, not fetched jschoubben 2026-09-11 01:11:18 +02:00
  • d637c77f08 An image id belongs to the machine holding it, so ask the machine jschoubben 2026-09-11 00:02:56 +02:00
  • 94e617915c The home segment moves off 192.168.1.0/24 jschoubben 2026-09-11 00:00:19 +02:00
  • a4c2a9b90b The routing record is 0066, not 0056 jschoubben 2026-09-10 23:35:35 +02:00
  • 7875145c0e An unpinned tag is a finding, not a reason to stop the bed jschoubben 2026-09-10 23:17:57 +02:00
  • 675facdb0d The beds name images the way a machine would find them jschoubben 2026-09-10 23:16:41 +02:00
  • 5c91c0ecd2 Scenarios: egress where images are needed, and images: cut to what is ours jschoubben 2026-09-10 23:16:23 +02:00
  • 751948f0f9 The lab had a registry that production does not, so it tested a fiction jschoubben 2026-09-10 23:16:05 +02:00
  • 0a0c57b610 whole-mesh-full: the CA root a person hands the mesh must be readable by it jschoubben 2026-09-10 22:35:49 +02:00
  • a48b60b604 whole-mesh-full: the bed knows about ADR 0056 jschoubben 2026-09-10 21:06:10 +02:00
  • 2f4cb871d9 A raise does not finish until the machines can pull from the registry jschoubben 2026-09-10 21:05:52 +02:00
  • d9bf178546 whole-mesh-full: serve the internal CA's image jschoubben 2026-09-10 21:05:30 +02:00
  • 80b0670ebe whole-mesh-full: the real segmented topology, and the overlay proven across the access point jschoubben 2026-09-09 11:17:00 +02:00
  • a5f53f524a Merge pull request 'whole-mesh rehearsal beds: the real node sets converge on one substrate' (#18) from feat/whole-mesh into main jschoubben 2026-09-08 20:06:19 +02:00
  • 591f2a641c whole-mesh-full: prove the dry-run fixes (fail2ban hostable, credential own-secrets) jschoubben 2026-09-08 20:05:04 +02:00
  • fcdcd338c0 Add whole-mesh full three-node bed (stage 3: both server sets, one substrate) jschoubben 2026-09-08 18:22:56 +02:00
  • 90651e1e73 Add whole-mesh ace dry-run bed (stage 2 of whole-mesh rehearsal) jschoubben 2026-09-08 00:19:52 +02:00
  • 581fd6da77 Add whole-mesh novox dry-run bed (stage 1 of whole-mesh rehearsal) jschoubben 2026-09-07 22:54:10 +02:00
  • 239ca1520c Merge pull request 'local-model bed: prove model-access answered by a node (ADR 0055)' (#17) from feat/local-model into main jschoubben 2026-09-07 05:26:05 +02:00
  • cf26b19b96 local-model bed: prove model-access answered by a node (ADR 0055) jschoubben 2026-09-07 05:25:21 +02:00
  • 7d7583350c Merge pull request 'openai bed: prove the static-key model-access path (ADR 0050)' (#16) from feat/openai-access into main jschoubben 2026-09-07 04:25:59 +02:00
  • a1231a7f89 openai bed: prove the static-key model-access path (ADR 0050) jschoubben 2026-09-07 04:25:26 +02:00
  • 0513163119 Merge pull request 'model-usage bed: prove the usage store end to end (ADR 0054)' (#15) from feat/usage-store into main jschoubben 2026-09-07 04:08:24 +02:00
  • 9cc3c1ac2a model-usage bed: prove the usage store end to end (ADR 0054) jschoubben 2026-09-07 04:07:41 +02:00
  • 8313e78325 Merge pull request 'anthropic bed: end-to-end model-access refreshable-grant, with per-module dep packaging' (#14) from feat/anthropic-bed into main jschoubben 2026-09-07 02:48:54 +02:00
  • 87c4820130 anthropic bed: package a module's own npm deps, stage grant files readably jschoubben 2026-09-07 02:47:50 +02:00
  • 71bea08f3b anthropic-bed: prove the host unseals the refresh token, no node-key stub jschoubben 2026-09-07 01:55:28 +02:00
  • 6be5072565 anthropic-bed: prove model-access refreshes on the manager node jschoubben 2026-09-07 01:00:37 +02:00
  • 0a132aa00e Merge pull request 'lavinmq-bed: prove the AMQP provider provisions a require-only consumer' (#13) from feat/lavinmq-bed into main jschoubben 2026-09-06 23:21:48 +02:00
  • f04c4ba3be lavinmq-bed: GREEN — AMQP provider provisions a require-only consumer's vhost (mint fix) jschoubben 2026-09-06 23:20:59 +02:00
  • 73bd086193 lavinmq-bed: reproduces a credential-mint gap for require-only consumers of a parameterless provision jschoubben 2026-09-06 16:09:01 +02:00
  • 8e494c0e78 Add lavinmq-bed: a two-node amqp provider + consumer bed jschoubben 2026-09-06 15:50:33 +02:00
  • b22a1716d6 Merge pull request 'route-forwarding: prove the native ingress routes + withdraws (drop traefik)' (#12) from feat/route-proxy-bed into main jschoubben 2026-09-06 15:17:24 +02:00
  • 6cd595d403 route-forwarding: GREEN — slug hello-web so it resolves; Host-routing + withdrawal proven jschoubben 2026-09-06 15:16:56 +02:00
  • f03647d605 Add route-forwarding lab bed proving the route grant end to end jschoubben 2026-09-06 15:07:23 +02:00
  • b75ec7782d Merge pull request 'schedule-tick: prove a scheduled container fires on its cadence (ADR 0053)' (#11) from feat/schedule-tick into main jschoubben 2026-09-06 14:27:46 +02:00
  • 76ecbaed85 lab: a scheduled container fires on its cadence without gating (ADR 0053) jschoubben 2026-09-06 14:20:54 +02:00
  • 399549db36 Merge pull request 'Two-node DB-consumer bed (GREEN) + scenario disk field' (#10) from feat/two-node-db-consumer into main jschoubben 2026-09-06 13:48:43 +02:00
  • a9ecce25cb Two-node DB-consumer bed + a scenario disk field jschoubben 2026-09-06 13:48:26 +02:00
  • b66b330dba Merge pull request 'tools-confluence: sixth green bed (confluence runtime serves 3 tools, no creds)' (#9) from feat/tools-confluence into main jschoubben 2026-09-06 01:54:54 +02:00
  • e703a94fcd tools-confluence: the tools-only bed for confluence (serves 3 tools, no creds) jschoubben 2026-09-06 01:54:21 +02:00
  • 0b8f583f75 Merge pull request 'tools-gitlab: the tools-only integration bed (gitlab runtime serves 23 tools, no creds)' (#8) from feat/tools-gitlab into main jschoubben 2026-09-06 01:40:33 +02:00
  • c9619a17f4 Add tools-gitlab lab scenario proving the tools-only install jschoubben 2026-09-06 01:33:52 +02:00
  • 132b9e3a7b Merge pull request 'catalogue-mqtt: mosquitto seeded by a run-once step (ADR 0052 proof, green)' (#7) from feat/catalogue-mqtt into main jschoubben 2026-09-06 01:06:10 +02:00
  • 62e479b9fe catalogue-mqtt: prove the run-once primitive end to end jschoubben 2026-09-06 00:33:41 +02:00
  • 8558ffdc8e Merge pull request 'catalogue-media: two modules share an operator-owned library (ADR 0051 proof)' (#6) from feat/catalogue-media into main jschoubben 2026-09-05 23:09:55 +02:00
  • fc36fb5b51 catalogue-media: two modules accessing one operator-owned directory co-resolve (ADR 0051) jschoubben 2026-09-05 23:02:41 +02:00
  • e973a8ea6b Merge pull request 'catalogue-apps: converted modules install on one node (green e2e)' (#5) from feat/catalogue-apps into main jschoubben 2026-09-05 22:49:14 +02:00
  • 571a6cd6fd WIP: catalogue-apps install bed (mongodb, unifi, marrytts) jschoubben 2026-09-05 15:30:50 +02:00
  • a7afdbcd4f Merge pull request 'catalogue-small: four modules install + serve on one node (green e2e)' (#4) from feat/catalogue-install-scenario into main jschoubben 2026-09-05 14:16:55 +02:00
  • ab04dd814f Add catalogue-small co-residence bed (four modules, one push) jschoubben 2026-09-05 14:14:56 +02:00
  • 04ddb934a9 Merge pull request 'Unify trunk on main: initialization → main' (#3) from initialization into main jschoubben 2026-09-05 03:13:45 +02:00
  • b34b504972 Merge pull request 'events: an e2e test — an emitted event reaches the audit trail over the mesh's broker' (#2) from events/audit-e2e into initialization jschoubben 2026-09-05 03:07:05 +02:00
  • cbd9b647ec e2e: unblock the minio grant — the consumer declares a slug (ADR 0054) jschoubben 2026-09-05 02:51:53 +02:00
  • b7ba7534af e2e: the whole grant for an S3 bucket (skipped — blocked on hq issue 010) jschoubben 2026-09-05 01:58:01 +02:00
  • de7f3b9c05 e2e: the whole grant for a database — a consumer connects with what the mesh delivered jschoubben 2026-09-05 01:47:57 +02:00
  • 617b5577f7 e2e: the whole grant, mesh-driven — a consumer authenticates with what the mesh delivered jschoubben 2026-09-05 01:14:48 +02:00
  • 33b991b6e0 lab: provider runtime images carry their CLI; prove the private-network shape jschoubben 2026-09-05 00:52:17 +02:00
  • aafa11756a e2e: a provider creates the resource with the mesh's credential (ADR 0053) jschoubben 2026-09-05 00:27:46 +02:00
  • 6067ec1724 e2e: a running runtime picks up a settings change (issue 009) jschoubben 2026-09-04 23:40:13 +02:00
  • 0a414d576a e2e: assigned sonarr + grafana prove the two runtime config paths (ADR 0051/0052) jschoubben 2026-09-04 23:08:54 +02:00
  • f093769354 e2e: assigned plex + redis prove the module runtime (ADR 0052) jschoubben 2026-09-04 22:29:53 +02:00
  • 37b16cd0e9 events: the assigned audit-logger, proven in the lab (ADR 0048) jschoubben 2026-09-04 02:13:01 +02:00
  • ba7f7998f7 events: an e2e test — an emitted event reaches the audit trail over the mesh's broker jschoubben 2026-09-04 00:56:39 +02:00
  • 01ca02ad04 A machine works through its queue, and the wait allows for it jschoubben 2026-09-02 01:05:51 +02:00
  • 81e5f31910 settled() asks which, not when jschoubben 2026-09-02 00:03:00 +02:00
  • a65115fc81 The forge poll covers both halves, and the cache failure names the container jschoubben 2026-09-01 23:20:38 +02:00
  • 5e22e6bc49 The resolve-together test carries the whole catalogue jschoubben 2026-09-01 23:09:49 +02:00
  • 384e0f4e7e Current is not caught up jschoubben 2026-09-01 23:03:05 +02:00
  • 2f2f1d931e The cache edge, proven end to end jschoubben 2026-09-01 22:45:05 +02:00
  • 3c9b5a848b The receipt names what was built, not what git says at the end jschoubben 2026-09-01 22:03:44 +02:00
  • 0d286b7cc8 What review found in the lab, fixed jschoubben 2026-09-01 21:54:59 +02:00
  • 4a343a2652 A machine is as big as the scenario says, and may reach the world jschoubben 2026-09-01 21:42:18 +02:00
  • f85dbb0713 The registry is added, not built jschoubben 2026-09-01 21:17:59 +02:00
  • 2b3a30619b Stop raising a second scenario to test the first three tests jschoubben 2026-09-01 21:07:07 +02:00
  • 144362be37 A poll that could not ask has not been answered jschoubben 2026-09-01 20:25:54 +02:00
  • 2bf5846bf2 Wait for the machine before asking what it is running jschoubben 2026-09-01 19:34:23 +02:00
  • e99bffc93e Ask the machine what it did, before asking what it produced jschoubben 2026-09-01 16:44:21 +02:00
  • eba436b6b7 Reach one scenario from the workstation, by name jschoubben 2026-09-01 16:42:26 +02:00
  • 6591a2e040 A canary first: one machine, one path, three minutes jschoubben 2026-09-01 16:24:19 +02:00
  • 44d3e53bcb Three failures, all mine, all worth having jschoubben 2026-09-01 16:16:57 +02:00
  • 2c7e69f4db Plan what could actually run, and put the machine back either way jschoubben 2026-09-01 15:54:56 +02:00
  • 55022edc1e Run the forge, on a database the mesh gave it jschoubben 2026-09-01 15:39:30 +02:00
  • bb14ecb7e0 Say what the lab is doing, while it is doing it jschoubben 2026-09-01 10:43:38 +02:00
  • 5137720aa7 A path is not a secret, and the check said it was jschoubben 2026-09-01 09:52:28 +02:00
  • df4dd406a9 A redirected log lags; do not diagnose a stall from it jschoubben 2026-09-01 09:40:45 +02:00
  • 3503ad990b The registry is addressed the way every other machine is jschoubben 2026-09-01 09:37:16 +02:00