atlas
|
e46ad07226
|
add a per-agent egress log mode
|
2026-10-30 08:52:22 +01:00 |
|
atlas
|
da16487800
|
move the squid host options to deploy.hive-controller.squid
|
2026-10-29 09:53:20 +01:00 |
|
atlas
|
7e2f4ce7c8
|
always include a hive's own allowedDomains in the rendered swarm-wide list
|
2026-10-29 08:25:22 +01:00 |
|
atlas
|
c5a876b845
|
derive an agent's backend hosts into the egress allow list at the controller
|
2026-10-29 08:25:22 +01:00 |
|
atlas
|
c9abc2a42b
|
make squid's allowed domains editable at runtime in the swarm ui
|
2026-10-28 23:01:43 +01:00 |
|
atlas
|
e78a529ec2
|
squid: base allow list for every authed user, and no start limit on the list reload
|
2026-10-28 19:44:26 +01:00 |
|
atlas
|
10fdf06334
|
squid self-check: use a public canary, drop the swarm service names from the allow list
|
2026-10-28 19:44:26 +01:00 |
|
atlas
|
b551eb02ff
|
send agent traffic through squid once its hive announces it
|
2026-10-28 17:24:34 +01:00 |
|
atlas
|
e8868d52a8
|
deny the IPv6 unspecified address at squid
|
2026-10-28 17:23:33 +01:00 |
|
atlas
|
3d9561a9a6
|
deny private and reserved destinations for every squid user
|
2026-10-28 17:23:33 +01:00 |
|
atlas
|
501445ebc3
|
apply each agent's internet flag to its squid credential
|
2026-10-28 17:23:33 +01:00 |
|
atlas
|
b7adb90f53
|
require a proxy credential at squid and prove it in the self-check
|
2026-10-28 13:50:35 +01:00 |
|
atlas
|
52d532ff5a
|
render squid's users file from this hive's proxy credentials
|
2026-10-28 13:50:35 +01:00 |
|
atlas
|
078aed1335
|
refuse unlisted squid names before any destination lookup
|
2026-10-27 20:59:06 +01:00 |
|
atlas
|
a2cf6fe8bb
|
deploy squid on every hive host, with exporter, journal forwarding and self-check
|
2026-10-27 20:59:06 +01:00 |
|