vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

re-read the declaration before a mint, and mint for a current certificate whose role is missing

Browse source
This commit is contained in:
atlas 2026-10-29 09:06:53 +01:00 • committed by mara
commit 37d5fad0b3
1 changed files with 252 additions and 30 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/swarm/README.md
View file

@ -63,7 +63,9 @@ that fails to mint logs `swarm jobq: mint_agent_identity failed` with the agent,
the step it stopped at and the error, which the Grafana alert rule
`hh-agent-identity-mint-failed` fires on. The agent is still created, without a
store identity, and the controller's five-minute credential pass mints one for
it as long as the agent isn't `Destroyed`.
it (also when only the certificate exists and its cert-auth role is missing) as
long as the agent isn't `Destroyed`. A mint that runs after a hive declares the
agent `Destroyed` logs `identity mint skipped` and writes nothing.
`services.hyperhive.deploy.swarm-controller.enable` runs it on this host;
`singleHostSwarm` turns it on. **Otherwise off: set it on the one host that