mlsmayconandClaude Fable 5.1 2ee84e475a [management] Validate the cluster behind a self-addressed endpoint too ...

The service behind a self-addressed endpoint is the same private one as
behind a labeled endpoint, so a proxy that already declares the hostname
must be an embedded one for the gateway to be served at all. The check ran
only on the labeled path; a self-addressed pin onto a hostname a centralised
proxy declares went through and left a dead gateway. Both paths now validate
the cluster, with the same address-first exception for a hostname no proxy
has declared yet.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sa3DsBDP3VciAi4PPG17L6

2026-09-12 17:04:41 +00:00

..

agentnetwork

[management] Validate the cluster behind a self-addressed endpoint too

2026-09-12 17:04:41 +00:00

peers

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

reverseproxy

[management] Scope the change to the private-capability check

2026-09-12 16:08:07 +00:00

zones

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00