Maycon Santos 979571a99f [management] Prevent deleting custom domains used by services (#7515) ...

Deleting a custom domain released its name while services still pointed
at it, leaving them on a namespace the account no longer held.

Deletion now refuses with 412 when a service in the same account uses the
domain or a subdomain, including disabled ones. Service writes revalidate
authorization inside their transaction and hold a shared lock on the
matching registrations, so a delete racing a create cannot strand either.
The dependency lookup is account-scoped: registrations are unique by name,
so another account can hold team.example.com under example.com and its
services are authorized by its own registration.

2026-09-28 14:14:32 +02:00

..

api.go

[management, client, proxy] add expose NetBird-only services over tunnel peers (#6226)

2026-05-25 17:41:50 +02:00

deletion_test.go

[management] Prevent deleting custom domains used by services (#7515)

2026-09-28 14:14:32 +02:00

domain_test.go

[management] Refuse services on unvalidated custom domains (#7341)

2026-09-10 11:57:14 +02:00

expiration_test.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

expiration.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

manager_realstore_test.go

[management] record proxy version on connect (#7630)

2026-09-23 17:59:58 +02:00

manager_test.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00

manager.go

[management] Prevent deleting custom domains used by services (#7515)

2026-09-28 14:14:32 +02:00

normalization_test.go

[management] Expire unvalidated custom domain registrations (#7497)

2026-09-11 17:57:58 +02:00