The route-forwarding bed installs the catalogue's authority, proxy and consumer; the whole-mesh bed installs the vault first #46

Merged

jschoubben merged 9 commits from multiple-fixes into main

2026-09-21 20:58:25 +00:00

Author	SHA1	Message	Date
jschoubben	b0eddd28d8	build-route-proxy-image.sh builds FROM the bases the manifest declares	2026-09-21 22:56:25 +02:00
jschoubben	2ce130c256	whole-mesh-full: an own-secret is declared under own-secrets	2026-09-21 22:55:00 +02:00
jschoubben	e64d296c80	whole-mesh-full: issue a module with an own-secret, not only one with a broker account	2026-09-21 22:54:09 +02:00
jschoubben	acb8d3da88	whole-mesh-full: the vault before the modules that keep secrets in it; no operator root or app secrets delivered (ADRs 0094, 0098)	2026-09-21 22:53:28 +02:00
jschoubben	f785f5892a	The route-forwarding bed converges the overlay before the modules: the proxy fetches the roots at the private-network address at first start	2026-09-21 22:41:36 +02:00
jschoubben	d95174da02	The route-forwarding bed places its machine on the overlay: the authority certifies its private-network address	2026-09-21 22:35:33 +02:00
jschoubben	2530ca762e	The lab stands in for the builder on an upstream artifact too: the reference the manifest pins hello-web's server is somebody else's image the mesh would copy in (ADR 0096); the loader refused it as an artifact nobody stocked.	2026-09-21 22:33:44 +02:00
jschoubben	107257faf4	The route-forwarding bed installs the catalogue's authority, proxy and consumer step-ca beside the proxy, the proxy fetching the authority's root through its gate, hello-web routed under the node's public domain by its label (ADR 0066). The last declared mesh test but one reads the catalogue (novox/hq 04-ISSUES/074, 076).	2026-09-21 22:27:17 +02:00
jschoubben	690596d33b	The whole-mesh bed installs the vault before the modules that keep a secret from it; route-forwarding waits on issue 076	2026-09-21 22:16:15 +02:00