Ilker ManapandClaude Opus 5.5 c522e8b2aa Refuse to open the agent port without TLS unless agent_insecure says so ...

Without agent_tls the control plane served plaintext h2c on every
interface, and any machine reaching it could register as any node. The
server now refuses to start that way unless agent_insecure: true, and then
binds loopback when agent_listen names only a port.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-04 09:51:37 +02:00

..

agent.go

Agent stream: connect the fleet to the control plane

2026-09-16 02:48:21 +02:00

config_test.go

Read usage from sums kept as it is written, not from every request

2026-10-03 19:43:10 +02:00

config.go

Refuse to open the agent port without TLS unless agent_insecure says so

2026-10-04 09:51:37 +02:00

engines_test.go

Decide engines per node, and let a node join without one it cannot run

2026-10-01 12:07:25 +02:00

example_test.go

Document what changed since v0.9.2, and fabrics for the sites that have them

2026-09-29 10:14:58 +02:00