mirror of
https://github.com/mulgadc/spinifex.git
synced 2026-10-23 20:57:02 +00:00
Josh Siviour
2e2465dd25
Wire the EC2 account-settings seal into account termination as a StageAccount reaper. Immediately before every seal attempt the reaper probes each configured node's new read-only, per-node seal-capability subject and requires exactly one identified reply per node at capability version 1 or later. Missing, duplicate, wrong-identity, malformed, error, older-version or unreachable responders send no seal and return a retryable ServiceUnavailable, so the account stays TERMINATING until the cluster is compatible. The reaper completes only on a sealed reply for the account with a non-zero revision; a fresh termination run seals again. Daemons validate their node ID before subscribing, so an invalid ID serves no capability and reads as incompatible.