Announce only on the subjects the grants allow (hq ADR 0197, issue 217) #40

Merged
mesh-admin merged 1 commits from fix/announce-only-what-the-grants-allow into main 2026-10-03 21:11:24 +00:00
Contributor

hq issue 217. Both runtimes subscribed $SRV.<verb>.>; the grants allow $SRV.<verb>, $SRV.<verb>.<name>, $SRV.<verb>.<name>.<id>. The bus refused the wildcard and the TypeScript runtime treats a refused subscription as fatal, so every per-module container on novox crash-looped (gitea, postgres, catalogue, vault, …), taking Gitea's tools — and with them this repo's normal merge path — down. Now exactly the allowed subjects. Already live: the toolchain images were built from this branch by the controller and every module image rebuilt on them; all containers are up. Merging so main carries it; then mesh-tools is rebuilt from main. Go and TS suites pass.

hq issue 217. Both runtimes subscribed `$SRV.<verb>.>`; the grants allow `$SRV.<verb>`, `$SRV.<verb>.<name>`, `$SRV.<verb>.<name>.<id>`. The bus refused the wildcard and the TypeScript runtime treats a refused subscription as fatal, so every per-module container on novox crash-looped (gitea, postgres, catalogue, vault, …), taking Gitea's tools — and with them this repo's normal merge path — down. Now exactly the allowed subjects. Already live: the toolchain images were built from this branch by the controller and every module image rebuilt on them; all containers are up. Merging so main carries it; then mesh-tools is rebuilt from main. Go and TS suites pass.
mesh-admin added 1 commit 2026-10-03 21:11:20 +00:00
Both runtimes subscribed $SRV.<verb>.> as a wildcard; the grants allow the bare question and the
service's own name and instance. The bus refused the wildcard, and the TypeScript runtime treats a
refused subscription as fatal, so every per-module container crash-looped after the image rolled.
They now subscribe exactly $SRV.<verb>, $SRV.<verb>.<name> and $SRV.<verb>.<name>.<id>.
mesh-admin merged commit 490aedfd36 into main 2026-10-03 21:11:24 +00:00
mesh-admin deleted branch fix/announce-only-what-the-grants-allow 2026-10-03 21:11:24 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: novox/mesh-tools#40