ADR-0119: Go node agent and Kubernetes operator tested with envtest

• Status: accepted
• Date: 2026-10-30
• French version: ../ADR-0119-agent-go-operateur.md

Context

Kit section 4 point 6 and 20.3; banking hosts without inbound port.

Decision

The agent opens every connection (8460 enrolment, 8461 mTLS + HMAC API), refuses symlinks (O_NOFOLLOW). The Go operator drives platform.navin.ai/v1alpha1 ManagedComponent; its controllers are tested against an envtest kube-apiserver, the Go toolchain coming from /tmp/toolchains.

Consequences

No free remote shell.

Evidence

• .navin/continuity/DECISIONS.md (navin-manager : agent sortant)
• navin-manager/agent-go
• navin-manager/operator/internal/controller/suite_test.go
• navin-manager/operator/hack/envtest-server/main.go
• navin-manager/server/tests/k8s_envtest.py