mlsmayconandClaude Fable 5.1 2ee84e475a [management] Validate the cluster behind a self-addressed endpoint too ...

The service behind a self-addressed endpoint is the same private one as
behind a labeled endpoint, so a proxy that already declares the hostname
must be an embedded one for the gateway to be served at all. The check ran
only on the labeled path; a self-addressed pin onto a hostname a centralised
proxy declares went through and left a dead gateway. Both paths now validate
the cluster, with the same address-first exception for a hostname no proxy
has declared yet.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sa3DsBDP3VciAi4PPG17L6

2026-09-12 17:04:41 +00:00

..

controllers/network_map

[management] fix private services calc on new db path (#7383)

2026-09-01 20:20:30 +02:00

modules

[management] Validate the cluster behind a self-addressed endpoint too

2026-09-12 17:04:41 +00:00

network_map_db

[management] update network_router_test to verify empty and nil peer_groups (#7425)

2026-09-04 15:29:51 +02:00

server

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

shared

[management] Scope the change to the private-capability check

2026-09-12 16:08:07 +00:00