Skip to content

Add header auth, access restrictions, and configurable management image#133

Open
lixmal wants to merge 4 commits intoadd-l4-supportfrom
reverse-proxy-auth
Open

Add header auth, access restrictions, and configurable management image#133
lixmal wants to merge 4 commits intoadd-l4-supportfrom
reverse-proxy-auth

Conversation

@lixmal
Copy link
Copy Markdown
Contributor

@lixmal lixmal commented Mar 13, 2026

Depends on netbirdio/netbird#5587

Summary

  • Add header_auths support in auth config (list of header/value pairs, value is sensitive)
  • Add access_restrictions block (allowed/blocked countries and CIDRs)
  • Update data source to expose new fields as computed
  • Add unit tests, acceptance tests, examples, and regenerated docs
  • Make CI management image configurable via workflow_dispatch and NB_MANAGEMENT_IMAGE env var

Test plan

  • Unit tests pass
  • Acceptance tests pass against live cluster
  • Manual testing: create, update, switch auth types, remove restrictions, destroy
  • Plan is clean after each apply (no drift)

@lixmal lixmal changed the base branch from main to add-l4-support March 13, 2026 09:41
@lixmal lixmal force-pushed the reverse-proxy-auth branch 2 times, most recently from 169ec7d to cdc3782 Compare March 13, 2026 09:46
@lixmal lixmal force-pushed the reverse-proxy-auth branch from cdc3782 to c9cf789 Compare March 13, 2026 10:03
lixmal added 2 commits March 23, 2026 12:26
The API returns proxy_protocol: false even when not configured,
causing ImportStateVerify mismatches on import.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant