jschoubben d9bf178546 whole-mesh-full: serve the internal CA's image ...

ADR 0056 made `acme-ca` a requirement of route-proxy, and step-ca is what
answers it. A scenario that does not stock the image cannot run the CA, the
proxy does not resolve, and every routed module on the mesh goes with it.

This was carried as an uncommitted edit through the first ADR 0056 raise. Kept,
because it is right, and committed, because a fix that lives in somebody's
working tree is a fix the next raise does not have.

2026-09-10 21:05:30 +02:00

..

a-provider.yml

Prove a mesh credential becomes a login, against a real database

2026-08-30 01:29:46 +02:00

a-public-name.yml

A public name, against a real ACME server

2026-08-31 21:40:16 +02:00

an-object-store.yml

Prove a bucket is provisioned the way a database is

2026-08-31 17:51:12 +02:00

anthropic-bed.yml

anthropic-bed: prove the host unseals the refresh token, no node-key stub

2026-09-07 01:55:28 +02:00

audit-node.yml

events: the assigned audit-logger, proven in the lab (ADR 0048)

2026-09-04 02:13:01 +02:00

behind-nat.yml

Routers: NAT, port forwarding, policy and mapping expiry

2026-08-24 01:37:19 +02:00

bootstrap-single.yml

place: the host — the lab acquires a consumer

2026-08-26 00:41:25 +02:00

bootstrap-with-registry.yml

Automate the lab registry: a sealed machine pulls by digest

2026-08-29 00:04:55 +02:00

catalogue-apps.yml

WIP: catalogue-apps install bed (mongodb, unifi, marrytts)

2026-09-05 15:30:50 +02:00

catalogue-media.yml

catalogue-media: two modules accessing one operator-owned directory co-resolve (ADR 0051)

2026-09-05 23:02:41 +02:00

catalogue-mqtt.yml

catalogue-mqtt: prove the run-once primitive end to end

2026-09-06 00:33:41 +02:00

catalogue-small.yml

Add catalogue-small co-residence bed (four modules, one push)

2026-09-05 14:14:56 +02:00

first-node.yml

The lab said nothing was running while two machines were

2026-08-29 11:54:33 +02:00

grafana-node.yml

e2e: assigned sonarr + grafana prove the two runtime config paths (ADR 0051/0052)

2026-09-04 23:08:54 +02:00

growing-mesh.yml

The base image carries the network tools, and a scenario that grows

2026-08-29 18:04:17 +02:00

lavinmq-bed.yml

Add lavinmq-bed: a two-node amqp provider + consumer bed

2026-09-06 15:50:33 +02:00

local-model-bed.yml

local-model bed: prove model-access answered by a node (ADR 0055)

2026-09-07 05:25:21 +02:00

minio-node.yml

e2e: the whole grant for an S3 bucket (skipped — blocked on hq issue 010)

2026-09-05 01:58:01 +02:00

model-usage-bed.yml

model-usage bed: prove the usage store end to end (ADR 0054)

2026-09-07 04:07:41 +02:00

openai-bed.yml

openai bed: prove the static-key model-access path (ADR 0050)

2026-09-07 04:25:26 +02:00

plex-node.yml

e2e: assigned plex + redis prove the module runtime (ADR 0052)

2026-09-04 22:29:53 +02:00

postgres-node.yml

e2e: the whole grant for a database — a consumer connects with what the mesh delivered

2026-09-05 01:47:57 +02:00

redis-node.yml

e2e: assigned plex + redis prove the module runtime (ADR 0052)

2026-09-04 22:29:53 +02:00

route-forwarding.yml

Add route-forwarding lab bed proving the route grant end to end

2026-09-06 15:07:23 +02:00

schedule-tick.yml

lab: a scheduled container fires on its cadence without gating (ADR 0053)

2026-09-06 14:20:54 +02:00

segmented-and-unforwardable.yml

Transit, host firewalls, and the whole topology raising

2026-08-24 01:49:30 +02:00

sonarr-node.yml

e2e: assigned sonarr + grafana prove the two runtime config paths (ADR 0051/0052)

2026-09-04 23:08:54 +02:00

the-ordinary-shape.yml

Transit, host firewalls, and the whole topology raising

2026-08-24 01:49:30 +02:00

tools-confluence.yml

tools-confluence: the tools-only bed for confluence (serves 3 tools, no creds)

2026-09-06 01:54:21 +02:00

tools-gitlab.yml

Add tools-gitlab lab scenario proving the tools-only install

2026-09-06 01:33:52 +02:00

two-node-db.yml

Two-node DB-consumer bed + a scenario disk field

2026-09-06 13:48:26 +02:00

two-nodes.yml

The cache edge, proven end to end

2026-09-01 22:45:05 +02:00

two-on-a-segment.yml

Scenario lifecycle: raise, exec, snapshot, restore, destroy

2026-08-24 01:12:49 +02:00

whole-mesh-ace.yml

Add whole-mesh ace dry-run bed (stage 2 of whole-mesh rehearsal)

2026-09-08 00:19:52 +02:00

whole-mesh-full.yml

whole-mesh-full: serve the internal CA's image

2026-09-10 21:05:30 +02:00

whole-mesh-novox.yml

Add whole-mesh novox dry-run bed (stage 1 of whole-mesh rehearsal)

2026-09-07 22:54:10 +02:00