docs(operator): a systemd unit that confines the egress prober - #411

Open

Ryanmello07 wants to merge 18 commits into

urnetwork:mainfrom

Ryanmello07:feat/probe-deployment-confinement-upstream

Commits on Jul 25, 2026

fix: stop country-only IP locations from tearing down connections
Ryanmello07
committed
feat(model): provider_egress_location storage
Ryanmello07
committed
fix(model): lowercase country code in SetProviderEgressLocation
Ryanmello07
committed
feat(controller): resolve and store provider egress location submissions
Ryanmello07
committed
test(controller): assert country granularity in provider egress location test
Ryanmello07
committed
feat(api): operator-authenticated provider egress location ingest
Ryanmello07
committed
test(api): prove the provider-egress ingest auth gate can accept, not just reject
Ryanmello07
committed
feat(controller): prefer probed provider egress location over mmdb
Ryanmello07
committed
fix(controller): collapse egress lookup to one query, add ARIN foreign parity, cover unprotected branches

Ryanmello07
and
claude
committed
feat(taskworker): sweep expired provider egress locations
Ryanmello07
committed
fix(provider-egress): correct ARIN foreign parity, reject corrupting/oversized submissions, wire up ingest secret

Ryanmello07
and
claude
committed
chore: drop beta-only vault example from the upstream change
Ryanmello07
committed
test: port provider-egress tests off go-playground/assert to connect.AssertEqual
Ryanmello07
committed
fix(provider-egress): reject future-dated submissions, fix ASN column overflow, and other review findings

Ryanmello07
and
claude
committed