fix(device-edge): route Core through dedicated egress

2026-08-12 10:41:51 +03:00
parent 9fa74a1243
commit 20ef5894cc
5 changed files with 741 additions and 29 deletions
@@ -0,0 +1,34 @@
+{
+  "schemaVersion": "nodedc.device-plane.device-edge-core-channel-upgrade.v3",
+  "transitionId": "__PATCH_ID__",
+  "action": "upgrade",
+  "upgradePredecessor": {
+    "patchId": "device-edge-core-channel-upgrade-v2-20260812-021",
+    "artifactSha256": "e40a6fd24edfecac09e42cd82635a77850541bcf047788db3e9c55d2b9e58867"
+  },
+  "service": "device-control-core",
+  "composeActivation": "replace-core-network-membership-with-private-plus-egress",
+  "identity": "reuse-existing-runner-managed-host-local-private-key-public-certificate-export",
+  "identityRecovery": "forbidden-valid-existing-identity-required",
+  "tlsPurpose": "clientAuth",
+  "direction": "core-initiated",
+  "endpointPolicy": "public-ipv4-standard-https-tcp-443-only",
+  "coreNetworks": [
+    "device-plane-private",
+    "device-plane-egress"
+  ],
+  "removedCoreNetwork": "device-plane-control",
+  "composeCompatibility": "synology-compose-v2.20-no-gw-priority",
+  "publicIngress": "none-on-synology",
+  "edgeRegistrations": "preserved",
+  "commandTransport": "disabled",
+  "gelios": "untouched",
+  "preservedServices": [
+    "device-manager",
+    "device-gateway",
+    "device-postgres",
+    "device-backhaul-target"
+  ],
+  "healthGate": "bounded-container-grace+core-edge-contract",
+  "rollback": "restore-upgrade-v2-021-source-and-preapply-core-runtime"
+}