vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

hive-tls: move the controllers' CA env settings into glue

Browse source
This commit is contained in:
atlas 2026-10-17 15:49:19 +02:00 • committed by mara
commit e21a03d6ff
7 changed files with 85 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/swarm/ca.md
View file

@ -243,9 +243,9 @@ naming, because it's subtle and it bites at a distance:
Two consumers, and only one of them is fine:
- **`hive-tls.nix` covers agents.** It folds the root into this hive's
`trust-bundle.pem`, hive-c0re receives that path as
`HIVE_TLS_CA_PATH`, and the meta-flake renderer embeds that one file
next to every agent's flake. The bundle is the runtime-to-build-time
`trust-bundle.pem`, `glue-hive-tls-controllers.nix` hands hive-c0re that
path as `HIVE_TLS_CA_PATH`, and the meta-flake renderer embeds that one
file next to every agent's flake. The bundle is the runtime-to-build-time
bridge.
- **The Matrix container crosses the same bridge**, via the shared
`lib/hive-ca-trust.nix` helper that `hive-forge` and `swarm-ci-runner`