mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-10 12:47:04 +00:00
evangelostsak
df23a74ffc
The swarm rotation gate mirrors one node's host_vars over every other, which is correct for credentials that are identical per host and hands every node the hub's identity here. Observed on a live cluster: a worker's swarm.conf was byte-identical to the manager's, same private key, Address 10.100.0.1, a ListenPort it should not have, and both spokes as peers. Nothing handshaked and every NFS mount over the mesh failed. Re-running the writer alone does not fix it, because a mirrored file presents the hub's public key and credential and would be read as already keyed. The entry now names its owner, so one that names a different host counts as unkeyed and the pair is reminted.