The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first #46

2026-09-21T20:33:03Z

jschoubben commented

2026-09-21 20:33:03 +00:00

route-forwarding reads the catalogue: the machine is placed on the overlay as a hub of one and networking converged first (the authority certifies its private-network address, which the proxy's gate dials); then step-ca beside route-proxy (which fetches the authority's root through its gate, ADR 0098) and hello-web routed under the node's public domain by its label. The declared list is down to the large mesh test (074).
The harness resolves an upstream artifact to the reference the manifest pins.
whole-mesh-novox and whole-mesh-full install mesh-vault before the modules that now keep a secret from it; whole-mesh-full no longer delivers an operator root or the mailu/umami secrets that moved to the vault, and issues any module with an own-secret. Not run (it is the long one).
build-route-proxy-image.sh builds FROM the bases the manifest declares.

Unit tests 160/160; route-forwarding green at 2ce130c against mesh-catalog ac651c7. Reviewed by an independent agent; findings folded in. Companion MRs on multiple-fixes: mesh-controller, mesh-tools, mesh-catalog, hq.

- route-forwarding reads the catalogue: the machine is placed on the overlay as a hub of one and networking converged first (the authority certifies its private-network address, which the proxy's gate dials); then step-ca beside route-proxy (which fetches the authority's root through its gate, ADR 0098) and hello-web routed under the node's public domain by its label. The declared list is down to the large mesh test (074). - The harness resolves an upstream artifact to the reference the manifest pins. - whole-mesh-novox and whole-mesh-full install mesh-vault before the modules that now keep a secret from it; whole-mesh-full no longer delivers an operator root or the mailu/umami secrets that moved to the vault, and issues any module with an own-secret. Not run (it is the long one). - build-route-proxy-image.sh builds FROM the bases the manifest declares. Unit tests 160/160; route-forwarding green at 2ce130c against mesh-catalog ac651c7. Reviewed by an independent agent; findings folded in. Companion MRs on `multiple-fixes`: mesh-controller, mesh-tools, mesh-catalog, hq.

jschoubben added 2 commits 2026-09-21 20:33:04 +00:00

The whole-mesh bed installs the vault before the modules that keep a secret from it; route-forwarding waits on issue 076 690596d33b

The route-forwarding bed installs the catalogue's authority, proxy and consumer 107257faf4

step-ca beside the proxy, the proxy fetching the authority's root through its gate,
hello-web routed under the node's public domain by its label (ADR 0066). The last
declared mesh test but one reads the catalogue (novox/hq 04-ISSUES/074, 076).

jschoubben added 1 commit 2026-09-21 20:33:46 +00:00

The lab stands in for the builder on an upstream artifact too: the reference the manifest pins 2530ca762e

hello-web's server is somebody else's image the mesh would copy in (ADR 0096); the
loader refused it as an artifact nobody stocked.

jschoubben added 1 commit 2026-09-21 20:35:37 +00:00

The route-forwarding bed places its machine on the overlay: the authority certifies its private-network address d95174da02

jschoubben added 1 commit 2026-09-21 20:41:38 +00:00

The route-forwarding bed converges the overlay before the modules: the proxy fetches the roots at the private-network address at first start f785f5892a

jschoubben added 1 commit 2026-09-21 20:53:31 +00:00

whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098) acb8d3da88

jschoubben added 1 commit 2026-09-21 20:54:12 +00:00

whole-mesh-full: issue a module with an own-secret, not only one with a broker account e64d296c80

jschoubben added 1 commit 2026-09-21 20:55:03 +00:00

whole-mesh-full: an own-secret is declared under own-secrets 2ce130c256

jschoubben added 1 commit 2026-09-21 20:56:26 +00:00

build-route-proxy-image.sh builds FROM the bases the manifest declares b0eddd28d8

jschoubben merged commit e1739b1caf into main

2026-09-21 20:58:25 +00:00

jschoubben deleted branch multiple-fixes

2026-09-21 20:58:25 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: novox/mesh-lab#46