admin 7ae82e1d5d agent v0.24.0: role-gate the eject path (system/backup mounts unmount-protected at the agent) ...

handleDiskEject now resolves the authoritative role of the storage at `where`
and refuses 403 (no Unmount) unless it is user-data. Fails safe to protected on
ambiguity. Adds roleForMountPath + an injectable HostReader seam for testability.
TestEject_RoleGated asserts protected mounts are refused with no Unmount.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-12 09:29:09 +02:00

..

cert_test.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

cert.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

disks_test.go

agent v0.24.0: role-gate the eject path (system/backup mounts unmount-protected at the agent)

2026-06-12 09:29:09 +02:00

disks.go

agent v0.24.0: role-gate the eject path (system/backup mounts unmount-protected at the agent)

2026-06-12 09:29:09 +02:00

host_metrics_test.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

host_metrics.go

slice 9: GET /host/metrics + CPU/chassis-temp collector (v0.14.0)

2026-06-10 16:16:03 +02:00

server_test.go

slice 8B.2 (agent): emit snapshotted phase at storage-snapshot moment (v0.13.0)

2026-06-10 14:54:18 +02:00

server.go

agent v0.24.0: role-gate the eject path (system/backup mounts unmount-protected at the agent)

2026-06-12 09:29:09 +02:00

tokenstore_test.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00

tokenstore.go

slice 8A (agent half): local-API server + provisioning back-half (v0.10.0)

2026-06-10 09:47:42 +02:00