efdcc9daef
Merge pull request 'sdk1: route-proxy moves here; its composition proofs move to the node-engine' (#2) from feat/sdk1 into main
main
mesh-tools2026-11-02 20:43:16 +00:00
f18ec031c4
Pin mesh-sdk at f02f142, the sdk1 head whose tests no longer leak package globals, so the group's check builds against it
jschoubben2026-11-02 20:14:16 +01:00
9d67813829
Pin mesh-sdk at the sdk1 group's head 1c7356c, so the group's check builds every module against the narrowed SDK it was written for
jschoubben2026-11-02 19:29:53 +01:00
f82e0b77b4
Write route-proxy's test plan entry as the contributed form itself, since its encoder left mesh-sdk
jschoubben2026-11-02 19:20:18 +01:00
a74f9db508
Test route-proxy without composing: its manifest's own facts and a plan entry's port, since the composition left mesh-sdk
jschoubben2026-11-02 19:06:37 +01:00
9c9d03691b
Drop route-proxy's stale notes of a contract module of its own, which the move made a package
jschoubben2026-11-02 18:14:32 +01:00
759a7bff12
Keep route-proxy's contract a package of its own module, not a second module behind a replace
feat/1126-removal
jschoubben2026-11-02 13:55:07 +01:00
6c15ff3f0e
Pin mesh-sdk to the group head of issue 1126
jschoubben2026-11-02 12:27:34 +01:00
d2c5057fdf
Say that the seat mesh-provisioner composes route-proxy's plans, since the controller ended
jschoubben2026-11-02 12:23:47 +01:00
30cb63e29f
Pin mesh-sdk to the group head of issue 1126
jschoubben2026-11-02 12:20:14 +01:00
8c89b84045
Join the forge's first commit of mesh-networking
jschoubben2026-11-02 11:57:09 +01:00
fe0392e05f
Begin mesh-networking with its README and its own check (ADR 0428)
mesh-admin2026-11-02 10:56:32 +00:00
6f038810fd
Move route-proxy out of the controller's repository, which is archived with the controller
jschoubben2026-11-02 11:45:17 +01:00
3ef81c0fe6
Merge pull request 'The controller takes the indexer's verdict instead of judging manifests; route-proxy declares its credential form (ADR 0578, 0579)' (#489) from feat/judge-once into main
mesh-tools2026-11-01 07:54:23 +00:00
03ac1f7f35
Pin the group's mesh-sdk head after the gofmt fix
jschoubben2026-11-01 03:27:07 +01:00
c3a2e71d2e
Pin mesh-sdk at the head after review round 1
jschoubben2026-11-01 03:13:17 +01:00
2adbc5c82d
Pin mesh-sdk at the judge-less release head in the controller and route-proxy
jschoubben2026-11-01 02:46:24 +01:00
0afee8c2fc
Declare credential form none for the provision, which hands consumers no credential
jschoubben2026-11-01 02:43:24 +01:00
3dec14334e
Merge pull request 'route-proxy dials the machine port its plans now carry (issue 774)' (#488) from fix/route-ports into main
mesh-tools2026-10-31 12:56:54 +00:00
d550c6da7a
Check route-proxy's composed targets over the live shapes in an existing test's place, and pin the mesh-sdk that keeps unassigned bare ports (issue 774, research 072 row 34)
jschoubben2026-10-31 13:22:00 +01:00
70b8bff570
Dial a route at the machine port its module's placement assigned, from the mesh-sdk whose plans carry it (issue 774, research 072 row 34)
jschoubben2026-10-31 13:11:00 +01:00
de46374d10
Merge pull request 'route-proxy from the provisioner's plans with its own contract; the controller forwards accounts to the vault (issue 774)' (#487) from feat/072-moves into main
mesh-tools2026-10-31 10:31:07 +00:00
26dea32f5f
Pin route-proxy at the group's mesh-sdk head acbf80a and its contract at the published tag v0.1.0, so it builds and reads the contributed payload; refresh its manifest digest for the events its contract names (issue 774)
jschoubben2026-10-31 10:27:05 +01:00
fa56e38429
Serve route-proxy's routes through its own contract: decode each plan entry's opaque contribution with it, say each name served, withdrawn or refused on the bus, and take who is inside from the seat mesh-placement, since the membership went with the assignments stream (issue 774, research 072 rows 33 and 34)
jschoubben2026-10-31 09:44:07 +01:00
bf395f88ee
Publish route-proxy's contract as a Go module of its own: the route a consumer asks, its schema, the events the proxy says, what it keeps on the bus and its tools' arguments, so other modules use the contract by its version and the provisioner carries a route unread (issue 774, research 072 row 34)
jschoubben2026-10-31 09:44:00 +01:00
373565c2f7
Serve route-proxy's routes from the seat mesh-provisioner's plans alone and drop its received routes file, since a route is a provision and the file is the deprecated path (issue 774, research 072 row 34; needs the mesh-sdk pin carrying plan entries' given and Conn.Read)
jschoubben2026-10-31 09:24:53 +01:00
c7493f4889
Merge pull request 'The web front's route helper reads the seat's plans, so a route-only module's route is provided (issue 774)' (#486) from fix/route-proxy-reads-plans into main
mesh-tools2026-10-30 23:43:15 +00:00
fd74e38ee0
Start route-proxy's provider helper only once Serve holds the runtime's channel, so its first watch is never refused and the helper never stops until a restart (issue 774, review)
jschoubben2026-10-31 00:32:26 +01:00
69bffee443
Answer route-proxy's routes from the seat mesh-provisioner's plans and keys, not the controller's assignments, so a route the seat keys for a module not handed is marked provided and its new builds are no longer withheld (issue 774)
jschoubben2026-10-31 00:27:11 +01:00
dd52c9cce1
Merge pull request 'The web front keeps what it serves, its certificates and what it refuses on the bus, with tools to read them (issue 774)' (#485) from feat/route-proxy-tools into main
mesh-tools2026-10-30 22:11:52 +00:00
d2e5323b7c
Keep a scan out of route-proxy's unrouted state: only names under a served domain, a few a minute, no visitor address (issue 774)
jschoubben2026-10-30 23:03:00 +01:00
3e14a13b1a
Give route-proxy its state on the bus and three tools, so a site's route, certificate and last answer are read from the mesh instead of with curl (issue 774)
jschoubben2026-10-30 22:58:04 +01:00
4a90e698aa
Reword route-provider's stdout line, so route-proxy's tree differs from the 01:52 build whose files are gone (issue 1933)
jschoubben2026-10-24 02:50:12 +02:00
bab562df63
Give route-proxy a build the fixed controller takes in, dropping the incident note #450 added (issue 1933)
jschoubben2026-10-24 02:49:56 +02:00
9ca01594c3
Merge pull request 'Give route-proxy a new build: the controller's sweep removed its last build's files from the store, so novox and ace cannot apply (issue 1933)' (#450) from fix/1933-rebuild-route-proxy into main
jschoubben2026-10-24 00:39:47 +00:00
ecf3519592
Give route-proxy a new build: the controller's sweep removed its last build's files from the store, so novox and ace cannot apply (issue 1933)
jschoubben2026-10-24 02:37:06 +02:00
9cc6ed04de
Merge pull request 'A module the catalogue no longer holds ends deleted instead of failing the plan; vendor/ goes; tests name verbs that exist (issues 1922, 1305, 1931)' (#449) from fix/1922-removed-module into main
jschoubben2026-10-23 23:47:05 +00:00
2d5130cbb7
Delete the committed dependencies; builds resolve by go.sum (issue 1305)
jschoubben2026-10-23 22:16:09 +02:00
02273b8eaf
Merge pull request 'R4g+R5 (mesh-controller): the controller asks no build, build-agent and the merge gate go, register by reference (design 47)' (#448) from feat/r4g into main
jschoubben2026-10-23 17:50:22 +00:00
bad5cf5c54
Revert "Delete vendor/ and the route proxy's: the build module fetches the modules, the root image builds with -mod=mod (issue 1305, C6)"
jschoubben2026-10-23 16:37:40 +02:00
ff4c7b7919
Delete vendor/ and the route proxy's: the build module fetches the modules, the root image builds with -mod=mod (issue 1305, C6)
jschoubben2026-10-23 15:14:58 +02:00
857ecaf04d
Pin mesh-sdk at the R4e member's final head 104533e8 and vendor it (R4e E)
jschoubben2026-10-22 21:19:46 +02:00
638734fc12
Merge main (upgrade safety's declared packages, issue 1840) and pin the R4e mesh-sdk member's final head 875c680d, re-vendored here and in modules/route-proxy; the controller announces declared-packages readable (issue 1790, D1; E)
jschoubben2026-10-22 20:44:59 +02:00
fa19caf2c1
Move the route proxy into its module and run it from the trust image, on mesh-sdk's public membership (issues 1633, 1634, 1635)
jschoubben2026-10-22 09:53:56 +02:00
faca99b6bf
Announce the pull request's head again, so its delivery is made with its base and asks the Approve (issue 1726; tree unchanged)
jschoubben2026-10-21 16:17:00 +02:00
50751428f2
Pin route-proxy to a commit of mesh-sdk main, since the pinned one is on a feature branch only (issue 1669)
jschoubben2026-10-21 14:25:34 +02:00
eb2dcf1a18
Merge pull request 'Builds, rollouts and assignments live on the bus, each assignment naming its commit, build and rollout (design 47 milestone 5, issues 1089-1095)' (#379) from feat/chain-on-the-bus-controller into main
mesh-tools2026-10-18 10:40:32 +00:00
bef006075e
Review round 1 of milestone 5: the move settles changed rows under the lock; reports counted by kind; route-proxy at the new SDK; the plan pass never revives an ended assignment; the store's mirror is refused once moved (issues 1090, 1092, 1093)
jschoubben2026-10-18 03:36:05 +02:00
5d20d96c57
One route-proxy Dockerfile: the module's, which the Makefile builds (issue 1019)
jschoubben2026-10-17 18:15:52 +02:00
f0c6ce265c
Vendor route-proxy's SDK so its provider builds offline (issue 1019)
jschoubben2026-10-17 18:15:43 +02:00
d82f24b51a
Bring build-agent and route-proxy in whole (issue 1019)
jschoubben2026-10-17 18:15:33 +02:00
99b2737b79
Stamp no commit in this repository's own image recipes either (hq issue 363, review of #292)
jochen2026-10-13 06:47:18 +02:00
9aea1bd264
Merge pull request 'The route proxy tells a backend the request was HTTPS, and for which name' (#245) from fix/the-route-proxy-says-the-request-was-https into main
mesh-admin2026-10-03 20:23:02 +00:00
6d0a6a5116
The route proxy tells a backend the request was HTTPS, and for which name
jochen2026-10-03 22:22:51 +02:00
961bf804c9
The intrusion-prevention seat serves status, banned, ban and unban; the proxy logs a refused name (hq ADR 0179)
jschoubben2026-10-02 17:02:49 +02:00
946cf93ac2
Merge pull request 'The example images build from the Go the manifest pins' (#216) from jschoubben/example-images-go-base into main
mesh-admin2026-10-02 13:56:22 +00:00
b0d831cd08
The example images build from the Go the manifest pins
jschoubben2026-10-02 15:38:29 +02:00
70b3bef9ee
The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only
jschoubben2026-10-02 01:46:26 +02:00
531431a42f
route-proxy: serve a route that names only its internal host
jschoubben2026-10-01 23:31:57 +02:00
bae9fe1e4d
Merge pull request 'A route may say the largest body it carries' (#68) from feat/a-route-may-limit-the-body-it-carries into main
jschoubben2026-09-26 14:01:56 +00:00
91635ab5ac
A route may say the largest body it carries
jochen2026-09-26 16:01:21 +02:00
c27c965262
Merge pull request 'route-proxy: a policy refusal is also not-my-token' (#67) from fix/a-policy-refusal-is-also-not-my-token into main
jschoubben2026-09-26 12:26:19 +00:00
1edee852a6
route-proxy: a policy refusal is also not-my-token
jschoubben2026-09-26 14:26:01 +02:00
3953757fd4
Merge pull request 'route-proxy: the challenge path falls through for real' (#66) from fix/the-challenge-path-falls-through-for-real into main
jschoubben2026-09-26 12:22:21 +00:00
4bb4970569
route-proxy: the challenge path falls through for real
jschoubben2026-09-26 14:21:52 +02:00
d46b5327b1
route-proxy: a second authority for internal names, and a target a route names the scheme of
jschoubben2026-09-25 20:37:03 +02:00
ed58eb2c80
Merge pull request 'route-proxy serves a route's internal-name alias, never certifies it' (#61) from feat/route-proxy-serves-internal-alias into main
jschoubben2026-09-25 15:24:36 +00:00
edb85c0416
route-proxy serves a route's internal-name alias, never certifies it
jschoubben2026-09-25 17:16:37 +02:00
e693143685
Merge pull request 'route-proxy: a route carries the policy applied to a request' (#58) from issue/116-route-proxy-has-no-auth-or-ip-restriction into main
jschoubben2026-09-25 12:21:43 +00:00
3397cb3f47
route-proxy: a priority is an ordering, not a port
jochen2026-09-25 14:20:06 +02:00
cd4bd5083c
route-proxy: a route carries the policy applied to a request
jochen2026-09-25 14:00:57 +02:00
e45c81e240
The routing record is 0066, not 0056
jschoubben2026-09-11 00:09:56 +02:00
fae039eba6
route-proxy: an ACME account belongs to the authority that issued it
jschoubben2026-09-10 21:02:00 +02:00
1fba76c768
route-proxy: an empty ACME_CA_BUNDLE means the system trust store
jschoubben2026-09-10 00:22:06 +02:00
0f21ae2dde
The proxy can obtain a public certificate, and asks staging by default
jschoubben2026-08-31 19:35:34 +02:00
e1d63500f0
A route is a grant, and a provider is told where its consumer is
jschoubben2026-08-31 02:43:19 +02:00
mesh-tools
jschoubben
mesh-admin
jochen