atlas
ce3b3d9467
nix: drop the central-toggle conjunct from four compound gates ...
`services.hyperhive.enable` is going away (Refs #4500 ). These four blocks
ANDed it with a second condition that was already the load-bearing one:
the bridge-firewall hole asks whether an operator named any
`network.exposeHostPorts`, and the three swarm-level services ask their
own `deploy.*.enable`, each of which defaults false (swarm-ui derives
from the controller's toggle, a sibling deployment decision) and none of
which is derived from the hive toggle. So dropping the conjunct turns
nothing on by itself — the remaining condition still decides.
The way that claim fails is by something becoming unconditional, so
module-eval gets absence arms for all four, each asserted on a host with
the hive ON and on one with it OFF, plus the two controls that make the
absences mean something.
The swarm-controller arm is probed by the credential oneshot and by the
daemon's `ExecStart` rather than by the unit name: hive-tls defines an
environment key on that name, which leaves an inert fragment behind on
any hive with a CA whether or not the controller runs there.
2026-09-19 10:48:12 +02:00
swarm: courier an agent's store identity into its container, and log in with it
2026-09-19 01:55:31 +02:00
nix: stop three defaults from consulting hyperhive.enable
2026-09-19 10:47:01 +02:00
docs: matrix gateway vhost defaults to chat.<swarm-domain>, not matrix.<domain>
2026-09-07 16:53:22 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-grafana /dashboards
swarm-grafana: distinct subagents by agent, over time
2026-09-18 09:38:49 +02:00
swarm-otel: deliver the OIDC client secret through the secret store
2026-09-14 00:58:58 +02:00
swarm-controller: make socketPath readOnly instead of asserting it
2026-09-17 19:27:30 +02:00
swarm: publish minted OIDC client secrets into the swarm store
2026-09-12 11:22:33 +02:00
swarm-controller: hand the daemon the authority hives are issued from
2026-09-10 00:25:07 +02:00
swarm-grafana: deliver the OIDC client secret through the secret store
2026-09-13 19:57:28 +02:00
matrix: remove the registration token
2026-09-15 19:58:10 +02:00
matrix: remove the registration token
2026-09-15 19:58:10 +02:00
swarm: publish minted OIDC client secrets into the swarm store
2026-09-12 11:22:33 +02:00
swarm-otel: deliver the OIDC client secret through the secret store
2026-09-14 00:58:58 +02:00
nix: stop three defaults from consulting hyperhive.enable
2026-09-19 10:47:01 +02:00
matrix: publish the appservice token from the swarm, not just read it
2026-09-15 20:57:49 +02:00
nix: drop the central-toggle conjunct from four compound gates
2026-09-19 10:48:12 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
docs: restructure into topic subdirectories, collapse duplicated index
2026-09-02 01:55:37 +02:00
bao: write the swarm controller's policy from inside the store
2026-09-07 18:43:09 +02:00
otel: scrape each collector's own loss counters
2026-09-12 10:34:06 +02:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
swarm-logs: an agent's CLI for the swarm log store
2026-09-17 01:02:14 +02:00
swarm-bao: add a pki mount, role and issuing policy
2026-09-17 14:01:38 +02:00
swarm-ca: state the store-is-world-readable rule once, not three times
2026-09-02 09:03:35 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
nix: drop the central-toggle conjunct from four compound gates
2026-09-19 10:48:12 +02:00
nix: inline the swarm sub-path aliases at their use sites
2026-09-13 20:02:20 +02:00
swarm: publish each agent's turn-state header on its own subject
2026-09-14 15:12:23 +02:00
nix: drop the central-toggle conjunct from four compound gates
2026-09-19 10:48:12 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
deploy: rename enableAllLocalDefaults to deploy.singleHostSwarm
2026-08-30 20:12:16 +02:00
matrix: publish the appservice token from the swarm, not just read it
2026-09-15 20:57:49 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
nix: drop the central-toggle conjunct from four compound gates
2026-09-19 10:48:12 +02:00
nix: inline the swarm sub-path aliases at their use sites
2026-09-13 20:02:20 +02:00
nix: inline the swarm sub-path aliases at their use sites
2026-09-13 20:02:20 +02:00
deploy: move the wireguard mesh out of the namespace hives read
2026-09-07 14:24:52 +02:00
swarm: say "no queue coordinates", never "a hive with no queue"
2026-09-13 11:13:17 +02:00
ce3b3d9467