Repository navigation
T33 — Run every operation with no identity plane #2422
Description
Task
| slice | size | difficulty | model | who | estimated lines |
|---|---|---|---|---|---|
| No identity plane needed | L | needs care | strongest | an agent | 540 (200 code, 340 tests) |
on a host with no identity plane, create, stop, resume, exec into and reap a box, see identity none in its record, and see a brokered secret refused.
Covers:
- BOX-081
- BOX-140
- BOX-141
Layers:
- daemon:
- crates/minimald/src/box_manager.rs: broker refused; store passes
- crates/minimald/src/box_manager/tests.rs: tests
- crates/minimald/src/rpc.rs: identity none
- crates/minimald/src/env.rs: no identity socket
cargo nextest run -p minimald broker_secret_unenrolled_exit5cargo nextest run -p minimald unenrolled_operations_over_file_mode_trustcargo nextest run -p minimald store_secret_passed_through_unenrolled
Waits on:
- T8 — Remove and prune stopped boxes on purpose #2395
- T14 — Names follow the id, end to end #2403
- T21 — One minimal.toml for every box, end to end #2418
- T32 — Exec into a box, end to end #2408
Plan block
### T33 — Run every operation with no identity plane
slice: S8
kind: task
covers: BOX-081, BOX-140, BOX-141
size: L
est: 200 code, 340 tests
executor: agent
difficulty: needs care
model: strongest
diagnostics: daemon log names a refused brokered secret
observability: create span records identity mode
layers:
- daemon:
- crates/minimald/src/box_manager.rs: broker refused; store passes
- crates/minimald/src/box_manager/tests.rs: tests
- crates/minimald/src/rpc.rs: identity none
- crates/minimald/src/env.rs: no identity socket
test: cargo nextest run -p minimald broker_secret_unenrolled_exit5
test: cargo nextest run -p minimald unenrolled_operations_over_file_mode_trust
test: cargo nextest run -p minimald store_secret_passed_through_unenrolled
produces: none
consumes: none
proof: on a host with no identity plane, create, stop, resume, exec into and reap a box, see identity none in its record, and see a brokered secret refused.
depends on:
- blocked by #2395
- blocked by #2403
- blocked by #2418
- blocked by #2408
Activity