infinito-nexus-updater[bot]
92946efaad
update(versions): update pins with a declared source (web-app-hugo)
2026-10-14 19:57:02 +00:00
infinito-nexus-updater[bot]
2ee04cdd1a
update(images): update Docker image versions (web-svc-logout)
2026-10-14 19:55:27 +00:00
infinito-nexus-updater[bot]
abf9a32294
update(images): update Docker image versions (web-app-socialhome)
2026-10-14 19:55:22 +00:00
infinito-nexus-updater[bot]
6158250a33
update(images): update Docker image versions (web-app-opentalk)
2026-10-14 19:55:16 +00:00
infinito-nexus-updater[bot]
df0a91aa1c
update(images): update Docker image versions (web-app-mattermost)
2026-10-14 19:55:07 +00:00
infinito-nexus-updater[bot]
752f1cf7df
update(images): update Docker image versions (web-app-matrix)
2026-10-14 19:54:59 +00:00
infinito-nexus-updater[bot]
5000f248be
update(images): update Docker image versions (web-app-espocrm)
2026-10-14 19:54:53 +00:00
infinito-nexus-updater[bot]
d25f3c20e1
update(images): update Docker image versions (web-app-baserow)
2026-10-14 19:54:48 +00:00
infinito-nexus-updater[bot]
ca318c2db3
update(images): update Docker image versions (test-e2e-playwright)
2026-10-14 19:54:41 +00:00
infinito-nexus-updater[bot]
a25faae191
update(images): update Docker image versions (sys-ctl-hlth-csp)
2026-10-14 19:54:36 +00:00
infinito-nexus-updater[bot]
8a97cd5cfa
update(images): update Docker image versions (svc-ai-ollama)
2026-10-14 19:54:30 +00:00
evangelostsak
774f9c264d
test(ci): the carried meshes input names a layout
2026-10-14 15:03:42 +02:00
evangelostsak
c2864a6aef
test(lint): every role ships its mesh fields empty
...
The guard against hardcoding a topology: a role carrying networks.meshes or
networks.interfaces must ship it empty. The shipped layouts keep their
subnets inside NETWORK_MESH_POOL, their ports unique, and every membership
names a declared mesh.
2026-10-14 15:03:42 +02:00
evangelostsak
365d78462e
test(swarm-test): extras read the interfaces list
2026-10-14 15:03:42 +02:00
evangelostsak
514a4e11b1
test(swarm-test): the round reads and hands over a layout
2026-10-14 15:03:42 +02:00
evangelostsak
789b1b10de
test(swarm): render the advertise address through the real lookup
2026-10-14 15:03:42 +02:00
evangelostsak
01e8c1a75f
test(lookup): mesh_address returns only the host's own primary address
2026-10-14 15:03:41 +02:00
evangelostsak
b1279525bf
test(mesh): the transport switch under a baked layout
2026-10-14 15:03:41 +02:00
evangelostsak
56ce03d370
test(mesh): the CLI reads its meshes from host_vars
...
Mesh names are asserted structurally: the baked layout names every mesh in
every file, so a substring match would pass on a host holding no interface.
2026-10-14 15:03:41 +02:00
evangelostsak
a0a7436d19
test(mesh): the writer under a layout baked into host_vars
2026-10-14 15:03:41 +02:00
evangelostsak
54e237bddb
test(mesh): plan against a topology instead of raw groups
2026-10-14 15:03:41 +02:00
evangelostsak
e30b17276c
test(mesh): declarations, pool and membership read from host_vars
...
Covers per-role and per-host membership, a host two roles put into one mesh,
the hub never being a spoke, an undeclared mesh being refused, and the
example's members matching its table.
2026-10-14 15:03:41 +02:00
evangelostsak
31cf7362d5
test(mesh): remove the contract tests with the contract
2026-10-14 15:03:41 +02:00
evangelostsak
6f4783d3ac
docs(requirements): meshes as the roles' own network declarations
...
Checked: every role ships its mesh fields empty, one module reads them, and
the three-mesh layout deployed svc-dns-unbound end to end on the local lab
with the same members and addresses as before the move.
2026-10-14 15:03:41 +02:00
evangelostsak
227dec8941
docs(wireguard): the meshes are inventory values every role ships empty
2026-10-14 15:03:41 +02:00
evangelostsak
90d82d10be
docs(ci): point the meshes input at the wireguard.yml layouts
2026-10-14 15:03:41 +02:00
evangelostsak
d2039eae70
docs(ci): the manual meshes input names a WireGuard layout
2026-10-14 15:03:41 +02:00
evangelostsak
535cb4a15b
docs(ci): the orchestrator's meshes input names a WireGuard layout
2026-10-14 15:03:41 +02:00
evangelostsak
1063e12917
docs(ci): the meshes input names a WireGuard layout
2026-10-14 15:03:41 +02:00
evangelostsak
ae84fb4813
docs(make): swarm-zombie meshes= takes a WireGuard layout
2026-10-14 15:03:41 +02:00
evangelostsak
bbb01def61
chore(env): INFINITO_SWARM_MESHES names a WireGuard layout
2026-10-14 15:03:41 +02:00
evangelostsak
093f1d2432
refactor(swarm-test): read the extras addresses through the mesh reader
2026-10-14 15:03:41 +02:00
evangelostsak
a10dfbf87b
feat(swarm-test): bake the layout into the lab inventory
...
On the meshed arm the layout joins the backup overrides through
merge_with_defaults and lands in every host's host_vars; the direct arm
carries no mesh value at all.
2026-10-14 15:03:41 +02:00
evangelostsak
1f2e68c007
refactor(swarm-test): the round deploys a WireGuard layout
...
INFINITO_SWARM_MESHES names a layout file of applications overrides. The
controller mesh, the transport mesh and the stale-link scan read it through
the CLI's own spec reader.
2026-10-14 15:03:41 +02:00
evangelostsak
a87c56c569
docs(examples): show where the mesh values go in host_vars
2026-10-14 15:03:41 +02:00
evangelostsak
f3e4eae919
refactor(examples): remove the separate three-mesh declarations
2026-10-14 15:03:41 +02:00
evangelostsak
1cd743532b
feat(examples): the three-mesh layout as inventory values
2026-10-14 15:03:41 +02:00
evangelostsak
103ee9f7ac
refactor(inventories): remove the lab's separate mesh declarations
...
Replaced by inventories/development/wireguard.yml, ordinary inventory values
read through the roles' own fields instead of a dedicated flag.
2026-10-14 15:03:41 +02:00
evangelostsak
033c3c5242
feat(inventories): the swarm lab's WireGuard layout as inventory values
...
svc-net-wireguard declares swarm and data; svc-swarm-node joins swarm, the
NFS server and the five backup roles join data. A meshed round bakes the
block into every lab host's host_vars.
2026-10-14 15:03:41 +02:00
evangelostsak
62f361c9e7
refactor(swarm): advertise through the mesh_address lookup
2026-10-14 15:03:41 +02:00
evangelostsak
86305e21e3
feat(lookup): mesh_address reads a host's primary mesh address
...
lookup('mesh_address', host) returns the address the other planes reach the
host on, or '' off the mesh, through utils.networks.mesh.
2026-10-14 15:03:40 +02:00
evangelostsak
44c82ea547
refactor(wireguard): render the interfaces the inventory lists
...
The role reads networks.interfaces and keeps the map keyed by mesh name its
tasks and template already use.
2026-10-14 15:03:40 +02:00
evangelostsak
52252bb778
feat(bkp-device): let a deployment put this backup role into meshes
...
The five backup roles declare it each, which replaces the svc-bkp- prefix
rule a declaration could use to admit a whole family.
2026-10-14 15:03:40 +02:00
evangelostsak
962b7c00de
feat(bkp-remote): let a deployment put this backup role into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
33a8689f4c
feat(bkp-nfs): let a deployment put this backup role into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
9a6056b38b
feat(bkp-secrets): let a deployment put this backup role into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
818f2cf348
feat(bkp-volume): let a deployment put this backup role into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
2401623ab7
feat(nfs-server): let a deployment put the NFS host into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
acb0d9e020
feat(swarm-node): let a deployment put swarm nodes into meshes
2026-10-14 15:03:40 +02:00
evangelostsak
7aea11f964
feat(wireguard): declare the mesh fields, empty
...
networks.meshes is where a deployment declares its meshes and
networks.interfaces where the mesh CLI records each host's own. Both ship
empty: the platform declares no mesh.
2026-10-14 15:03:40 +02:00
infinito-nexus-updater[bot]
evangelostsak