Maycon Santos 7ce6a63dcb [management] Validate the proxy cluster an agent network bootstraps onto (#7402) ...

The agent network gateway service is private: agents reach it over the WireGuard tunnel, authorised by peer identity, with the cluster as its only target. Only a reverse proxy cluster with private capabilities can serve that, reported per cluster as the `private` capability — the same `supports_private` flag the dashboard gates NetBird-only services on.

A bootstrap could pin an account to a cluster without private capabilities, leaving an immutable dead gateway. Both bootstrap paths now validate the picked cluster: one the account can see must have a connected proxy reporting the capability. Shared and account-owned clusters qualify alike. Known-ness comes from proxy rows, not heartbeat freshness, so a cluster without the capability stays refused while merely offline. A hostname no proxy has declared stays pinnable (address-first). Identity is compared case-insensitively over the account's cluster list.

2026-09-15 08:42:21 +02:00

..

account

[management] fix posture check flip evaluation for affected peers calc (#7347)

2026-08-28 15:39:48 +02:00

activity

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

affectedpeers

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

auth

[management] Add SetNX and GetDel cache store operations (#7084)

2026-09-04 11:03:28 +03:00

cache

[management] Add SetNX and GetDel cache store operations (#7084)

2026-09-04 11:03:28 +03:00

context

[management] log user agent and return request id (#6380)

2026-06-09 15:24:26 +02:00

geolocation

[management] Fix geolocation panics (#7382)

2026-09-02 12:36:03 +02:00

groups

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

http

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

idp

[management] Keep embedded IdP deployments on a single account (#7380)

2026-09-04 11:03:54 +03:00

instance

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

integrations

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

job

[management] fix some concurrency potential issues (#5584)

2026-03-12 15:57:36 +01:00

metrics

[management,proxy,client] 0.74.0 version (#6563)

2026-07-01 12:45:14 +02:00

migration

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

mock_server

[client] Gather fresh system info on every management sync stream connect (#7409)

2026-09-04 15:07:01 +02:00

networks

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

peer

[management,client] Gate remote jobs behind an admin opt-in with MDM support (#7153)

2026-09-01 17:53:41 +02:00

permissions

[management] Add Agent Network access roles and self-service endpoints (#7221)

2026-09-01 14:35:38 +02:00

posture

[management] fix posture check flip evaluation for affected peers calc (#7347)

2026-08-28 15:39:48 +02:00

settings

[client, management] switch to go.uber.org/mock (#7253)

2026-08-20 11:53:19 +02:00

store

[management] Refuse to pin an agent network gateway onto another account's host (#7519)

2026-09-14 22:20:25 +02:00

telemetry

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

testdata

[management] scope network router update call (#6222)

2026-05-20 18:24:00 +02:00

testutil

[management] Speed up test store setup and summarize the unit test run (#7518)

2026-09-14 19:42:02 +02:00

types

[management] Harden OIDC issuer validation and discovery (#7435)

2026-09-11 19:09:13 +03:00

users

[management, client, proxy] add expose NetBird-only services over tunnel peers (#6226)

2026-05-25 17:41:50 +02:00

util

[management] remove old math rand lib (#6836)

2026-09-02 17:52:51 +02:00

account_request_buffer.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

account_test.go

[management] Speed up test store setup and summarize the unit test run (#7518)

2026-09-14 19:42:02 +02:00

account.go

[management] expire and disconnect peers while including offline peers (#7467)

2026-09-09 13:44:19 +02:00

affected_peers_coverage_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_jwt_test.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

affected_peers_oldstate_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

affected_peers_property_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

affected_peers_querycount_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

affected_peers_router_paths_test.go

[management] fix posture check evaluation for direct peers in policy definition (#7348)

2026-08-28 16:46:42 +02:00

affected_peers_router_test.go

[management] fix posture check evaluation for direct peers in policy definition (#7348)

2026-08-28 16:46:42 +02:00

affected_peers_test.go

[management] simplify affected peers ignore disabled (#6540)

2026-06-25 16:30:40 +02:00

affected_peers_user_test.go

[management] Affected peers for user updates (#7099)

2026-08-07 18:07:53 +02:00

agentnetwork_budgetrule_realstack_test.go

[management] Validate the proxy cluster an agent network bootstraps onto (#7402)

2026-09-15 08:42:21 +02:00

agentnetwork_realstack_test.go

[management] Validate the proxy cluster an agent network bootstraps onto (#7402)

2026-09-15 08:42:21 +02:00

dns_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

dns.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

event_test.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

event.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

group_ipv6_test.go

[management] remove old math rand lib (#6836)

2026-09-02 17:52:51 +02:00

group_test.go

[management] Prevent deleting groups referenced by agent network budget rules (#7450)

2026-09-12 12:37:23 +02:00

group.go

[management] Prevent deleting groups referenced by agent network budget rules (#7450)

2026-09-12 12:37:23 +02:00

identity_provider_test.go

[management] Harden OIDC issuer validation and discovery (#7435)

2026-09-11 19:09:13 +03:00

identity_provider.go

[management] Harden OIDC issuer validation and discovery (#7435)

2026-09-11 19:09:13 +03:00

integrated_validator.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

management_proto_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

management_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

nameserver_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

nameserver.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

peer_posture_test.go

[management] fix posture check evaluation for direct peers in policy definition (#7348)

2026-08-28 16:46:42 +02:00

peer_test.go

[management] fix posture check flip evaluation for affected peers calc (#7347)

2026-08-28 15:39:48 +02:00

peer.go

[management] expire and disconnect peers while including offline peers (#7467)

2026-09-09 13:44:19 +02:00

policy_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

policy.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

posture_checks_test.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

posture_checks.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

resource.go

[client, management] Add new network concept (#3047)

2024-12-20 11:30:28 +01:00

route_test.go

[management] network map from nmap data type (#6919)

2026-08-27 11:28:05 +02:00

route.go

[client, management] offload client config generation to the client (#6711)

2026-07-22 18:20:27 +02:00

scheduler_test.go

[management] expire and disconnect peers while including offline peers (#7467)

2026-09-09 13:44:19 +02:00

scheduler.go

[management] expire and disconnect peers while including offline peers (#7467)

2026-09-09 13:44:19 +02:00

setupkey_test.go

[management] network map for affected peers (#6105)

2026-06-15 17:43:22 +02:00

setupkey.go

[management] enrich context in permissions manager (#6286)

2026-05-29 16:36:38 +02:00

user_invite_test.go

Add user invite link feature for embedded IdP (#5157)

2026-01-27 09:42:20 +01:00

user_test.go

[management] fix delete of owner user (#7456)

2026-09-08 13:47:32 +02:00

user.go

[management] expire and disconnect peers while including offline peers (#7467)

2026-09-09 13:44:19 +02:00