Skip to content

Keep private services reachable during control plane outages - #851

Draft
scotwells wants to merge 7 commits into
mainfrom
feat/persistent-private-service-access
Draft

scotwells wants to merge 7 commits into
mainfrom
feat/persistent-private-service-access

Conversation

@scotwells

@scotwells scotwells commented Oct 12, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Private services with persistent access remain reachable during control plane outages. Galactic keeps their network paths until the policy is withdrawn or its VPC lifetime changes.

Time-bounded access continues to enforce its deadline. Programming report freshness describes observation health without revoking persistent access.

Test plan

  • CI verifies persistent paths have no dataplane deadline.
  • CI verifies access remains programmed after an hour without renewal.
  • CI verifies policy withdrawal removes persistent forwarding.
  • CI verifies bounded authorization and VPC isolation checks.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant