jschoubben 0a0c57b610 whole-mesh-full: the CA root a person hands the mesh must be readable by it ...

The control plane's image is FROM scratch and runs as 65534, and docker cp keeps
the mode a file had outside — openssl writes a private key 0600 root-owned, so
the copy landed unreadable, secret accept failed with permission denied, and the
CA crash-looped on a root it never got. Chowning it inside the container is not
available: there is no shell in there to do it with.

Claude-Session: https://claude.ai/code/session_01LrgweAeERJYBg88c5cKDzF

2026-09-10 22:35:49 +02:00

..

anthropic-bed.test.ts

anthropic bed: package a module's own npm deps, stage grant files readably

2026-09-07 02:47:50 +02:00

assigned-audit.test.ts

events: the assigned audit-logger, proven in the lab (ADR 0048)

2026-09-04 02:13:01 +02:00

assigned-catalogue-apps.test.ts

WIP: catalogue-apps install bed (mongodb, unifi, marrytts)

2026-09-05 15:30:50 +02:00

assigned-catalogue-media.test.ts

catalogue-media: two modules accessing one operator-owned directory co-resolve (ADR 0051)

2026-09-05 23:02:41 +02:00

assigned-catalogue-mqtt.test.ts

catalogue-mqtt: prove the run-once primitive end to end

2026-09-06 00:33:41 +02:00

assigned-catalogue-small.test.ts

Add catalogue-small co-residence bed (four modules, one push)

2026-09-05 14:14:56 +02:00

assigned-grafana.test.ts

e2e: assigned sonarr + grafana prove the two runtime config paths (ADR 0051/0052)

2026-09-04 23:08:54 +02:00

assigned-model-usage.test.ts

model-usage bed: prove the usage store end to end (ADR 0054)

2026-09-07 04:07:41 +02:00

assigned-plex.test.ts

e2e: assigned plex + redis prove the module runtime (ADR 0052)

2026-09-04 22:29:53 +02:00

assigned-redis.test.ts

e2e: assigned plex + redis prove the module runtime (ADR 0052)

2026-09-04 22:29:53 +02:00

assigned-schedule-tick.test.ts

lab: a scheduled container fires on its cadence without gating (ADR 0053)

2026-09-06 14:20:54 +02:00

assigned-sonarr.test.ts

e2e: assigned sonarr + grafana prove the two runtime config paths (ADR 0051/0052)

2026-09-04 23:08:54 +02:00

assigned-tools-confluence.test.ts

tools-confluence: the tools-only bed for confluence (serves 3 tools, no creds)

2026-09-06 01:54:21 +02:00

assigned-tools-gitlab.test.ts

Add tools-gitlab lab scenario proving the tools-only install

2026-09-06 01:33:52 +02:00

assigned-two-node-db.test.ts

Two-node DB-consumer bed + a scenario disk field

2026-09-06 13:48:26 +02:00

builds.test.ts

A machine in the mesh builds a module, and the catalogue records it

2026-08-30 04:06:23 +02:00

canary.test.ts

A canary first: one machine, one path, three minutes

2026-09-01 16:24:19 +02:00

certificates.test.ts

A public name, against a real ACME server

2026-08-31 21:40:16 +02:00

events.test.ts

events: an e2e test — an emitted event reaches the audit trail over the mesh's broker

2026-09-04 00:56:39 +02:00

harness.ts

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:46 +02:00

lavinmq-bed.test.ts

lavinmq-bed: GREEN — AMQP provider provisions a require-only consumer's vhost (mint fix)

2026-09-06 23:20:59 +02:00

local-model-bed.test.ts

local-model bed: prove model-access answered by a node (ADR 0055)

2026-09-07 05:25:21 +02:00

mesh-grant-end-to-end.test.ts

e2e: the whole grant, mesh-driven — a consumer authenticates with what the mesh delivered

2026-09-05 01:14:48 +02:00

mesh.test.ts

A machine works through its queue, and the wait allows for it

2026-09-02 01:05:51 +02:00

minio-grant-end-to-end.test.ts

e2e: unblock the minio grant — the consumer declares a slug (ADR 0054)

2026-09-05 02:51:53 +02:00

objectstore.test.ts

A grant file and a provisioned login name the module too

2026-09-01 02:45:40 +02:00

openai-bed.test.ts

openai bed: prove the static-key model-access path (ADR 0050)

2026-09-07 04:25:26 +02:00

placement.test.ts

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:46 +02:00

postgres-grant-end-to-end.test.ts

e2e: the whole grant for a database — a consumer connects with what the mesh delivered

2026-09-05 01:47:57 +02:00

provider-on-backend-network.test.ts

lab: provider runtime images carry their CLI; prove the private-network shape

2026-09-05 00:52:17 +02:00

provider-uses-mesh-credential.test.ts

e2e: a provider creates the resource with the mesh's credential (ADR 0053)

2026-09-05 00:27:46 +02:00

provisioner.test.ts

The end-to-end test reads the grant where the mesh now writes it

2026-09-01 02:48:24 +02:00

route-forwarding.test.ts

route-forwarding: GREEN — slug hello-web so it resolves; Host-routing + withdrawal proven

2026-09-06 15:16:56 +02:00

runtime-restart-on-config.test.ts

e2e: a running runtime picks up a settings change (issue 009)

2026-09-04 23:40:13 +02:00

scenarios.test.ts

Step 2: raise a second scenario, and share the invariants

2026-08-25 00:29:59 +02:00

underlay.test.ts

Repoint ADR references after HQ consolidated 65 records to 23

2026-08-28 23:33:46 +02:00

whole-mesh-ace.test.ts

Add whole-mesh ace dry-run bed (stage 2 of whole-mesh rehearsal)

2026-09-08 00:19:52 +02:00

whole-mesh-full.test.ts

whole-mesh-full: the CA root a person hands the mesh must be readable by it

2026-09-10 22:35:49 +02:00

whole-mesh-novox.test.ts

Add whole-mesh novox dry-run bed (stage 1 of whole-mesh rehearsal)

2026-09-07 22:54:10 +02:00