Admin 92f4787146 M2 §2: run actions and manifest fetch over mTLS with Maestro's identity ...

Extract maestroTransport() (Maestro's identity cert + instance CA) and
expose PeerTransport()/Scheme()/InsecureInternal() so every service peer
edge uses the same client. RunAction now targets
https://{ip}:{port}/action/{name} presenting Maestro's cert (services
require a CA-issued client cert, so only Maestro can drive actions — T4)
and FetchManifestWithRetry fetches /_manifest the same way.
INSECURE_INTERNAL=1 keeps the dev fleet plaintext (debug compose updated
to set it).

2026-08-16 01:12:01 +01:00

..

client.go

M2 §2: run actions and manifest fetch over mTLS with Maestro's identity

2026-08-16 01:12:01 +01:00