mlsmayconandClaude Fable 5.1 6125b3d6f0 [management] Validate the proxy cluster an agent network bootstraps onto ...

The agent network gateway service is synthesised as private: agents reach
it over the WireGuard tunnel, authorised by their peer identity, with the
cluster itself as its only target. Only a reverse proxy cluster with
private capabilities can serve that, which management reports per cluster
as the `private` capability — the same supports_private flag the dashboard
gates NetBird-only services on.

CreateSettings took any hostname as proxy_address and only normalised it,
so a bootstrap could pin an account to a cluster without private
capabilities. The endpoint is immutable, leaving a dead gateway until the
settings row is deleted and re-bootstrapped.

Both bootstrap paths now validate the picked cluster before an endpoint is
allocated: a cluster the account can see must have a connected proxy
reporting the capability, shared and account-owned alike. Whether
management knows a cluster comes from its proxy rows, never from how fresh
their heartbeats are, so a cluster without the capability stays refused
while its proxies are merely offline. A hostname no proxy has declared
stays pinnable, the address-first order the self-addressed path documents.
Cluster identity is compared case-insensitively over the account's cluster
list, since proxies declare their address as the operator spelled it.

Rebased onto main after #7519 landed; the ownership check this builds on
is main's now.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sa3DsBDP3VciAi4PPG17L6

2026-09-14 20:25:48 +00:00

..

catalog

[management,proxy] Add agentgateway integration (#7274)

2026-09-01 13:03:16 +02:00

handlers

[management] Validate the proxy cluster an agent network bootstraps onto

2026-09-14 20:25:48 +00:00

labelgen

[management] remove old math rand lib (#6836)

2026-09-02 17:52:51 +02:00

modeldiscovery

[management] Check a provider's url and credential before saving it (#7301)

2026-09-02 21:46:47 +02:00

pricing

[proxy,management] Conform the Agent Network endpoint to the LLM gateway protocol (#7154)

2026-08-23 20:02:33 +02:00

types

[management] Add Agent Network access roles and self-service endpoints (#7221)

2026-09-01 14:35:38 +02:00

accesslog_ingest_realstore_test.go

[management, proxy] Add prompt-cache token and cost accounting to agent network usage (#6900)

2026-07-26 21:42:41 +02:00

accesslog_ingest.go

[management, proxy] Add prompt-cache token and cost accounting to agent network usage (#6900)

2026-07-26 21:42:41 +02:00

accesslog_sessions_realstore_test.go

[management, proxy] Add prompt-cache token and cost accounting to agent network usage (#6900)

2026-07-26 21:42:41 +02:00

affectedpeers_hook.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

agent_config_realstore_test.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

agent_config.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

credentialcheck_test.go

[management] Check a provider's url and credential before saving it (#7301)

2026-09-02 21:46:47 +02:00

credentialcheck.go

[management] Check a provider's url and credential before saving it (#7301)

2026-09-02 21:46:47 +02:00

manager.go

[management] Validate the proxy cluster an agent network bootstraps onto

2026-09-14 20:25:48 +00:00

policyselect_account_realstore_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

policyselect_model_test.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

policyselect_realstore_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

policyselect_test.go

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

policyselect.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

provider_redaction_test.go

[management] Add Agent Network access roles and self-service endpoints (#7221)

2026-09-01 14:35:38 +02:00

reconcile_test.go

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

reconcile.go

[management] Rework Agent Network endpoint identity and settings bootstrap (#7085)

2026-08-10 19:06:55 +02:00

settings_bootstrap_test.go

[management] Validate the proxy cluster an agent network bootstraps onto

2026-09-14 20:25:48 +00:00

synthesizer_guardrail_realstore_test.go

[management, proxy] scope agent-network model allowlist per policy/group and provider (#6905)

2026-07-27 20:43:59 +02:00

synthesizer_log_collection_realstore_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

synthesizer_parser_redact_realstore_test.go

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

synthesizer_pricing_test.go

[proxy,management] Serve Bedrock model discovery from the control plane (#7250)

2026-08-23 20:29:10 +02:00

synthesizer_pricing.go

[management, proxy] Management-owned LLM pricing: file-backed defaults + (#6965)

2026-07-31 20:52:56 +02:00

synthesizer_provider_allowlist_test.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

synthesizer_realstore_test.go

[management] Rework Agent Network endpoint identity and settings bootstrap (#7085)

2026-08-10 19:06:55 +02:00

synthesizer_test.go

[management,proxy] Add agentgateway integration (#7274)

2026-09-01 13:03:16 +02:00

synthesizer.go

[management,proxy] Serve guardrail allowlists of declared model ids (#7389)

2026-09-02 18:57:02 +02:00

wire_shape_test.go

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00