mirror of
https://github.com/netbirdio/netbird.git
synced 2026-08-24 16:41:30 +02:00
6545034b09
A client resolving a configured inference profile calls GET /inference-profiles at startup. The path carries no model and was not recognised as non-inference, so it denied as not-routable and wrote a policy rejection into the access log on every session start, which is the log operators read to find real policy problems. Recognise the path and match it against a Bedrock provider specifically: sending it to whichever provider happened to be authorised first would rewrite it to an upstream that 404s it. The optional gateway namespace is stripped the same way the runtime paths strip it.