mara/hyperhive
mara/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

docs: the swarm README and credentials page keep the overview, the rest moves to its own pages

Browse source 
The hive directory and the WireGuard mesh become handbook pages of their own,
the controller's mint-failure handling moves to controller.md, and the
credential-by-credential mechanics and the secret store UI's proxy move to a new
implementation page.
This commit is contained in:
iris 2026-11-14 12:43:46 +01:00 • committed by mara
commit 0e99662710
1 changed files with 559 additions and 514 deletions
Download patch file Download diff file Expand all files Collapse all files

11
docs/4-implementation/swarm/controller.md
View file

@ -435,3 +435,14 @@ refused delivery logs `webhook: refused delivery` with the reason.
The controller registers the hooks within five minutes of having both the forge
token and the secret. It keeps trying, at most five minutes apart, for as long
as the forge or the secret store is down. A restart isn't needed to recover.
## Agent identity minting
A store identity that fails to mint logs `swarm jobq: mint_agent_identity
failed` with the agent, the step it stopped at and the error, which the Grafana
alert rule `hh-agent-identity-mint-failed` fires on. The agent is still
created, without a store identity, and the controller's five-minute credential
pass mints one for it (also when only the certificate exists and its cert-auth
role is missing) as long as the agent isn't `Destroyed`. A mint that runs after
a hive declares the agent `Destroyed` logs `identity mint skipped` and writes
nothing.