From 594849f330adc467235fe2fdadad6f5f135924b4 Mon Sep 17 00:00:00 2001 From: Vitalii Valkov Date: Mon, 10 Aug 2026 01:07:19 +0200 Subject: [PATCH] Name the overlay .agyn, not .ziti The intercept TLD was a naming convention, not a DNS zone: the tunneler answers only for hostnames an intercept.v1 config names. Renaming it costs nothing but the coordinated change, and leaves the platform naming itself. --- internal/server/validation.go | 2 +- internal/server/validation_test.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/internal/server/validation.go b/internal/server/validation.go index 971fd66..98a8471 100644 --- a/internal/server/validation.go +++ b/internal/server/validation.go @@ -75,7 +75,7 @@ func validateMatcher(matcher *egressv1.EgressRuleMatcher) (*egressv1.EgressRuleM } func rejectReservedDomainPattern(domainPattern string) error { - reservedSuffixes := []string{".ziti", ".svc", ".cluster.local"} + reservedSuffixes := []string{".agyn", ".svc", ".cluster.local"} trimmedWildcard := strings.TrimPrefix(domainPattern, "*.") for _, suffix := range reservedSuffixes { if trimmedWildcard == strings.TrimPrefix(suffix, ".") || strings.HasSuffix(trimmedWildcard, suffix) { diff --git a/internal/server/validation_test.go b/internal/server/validation_test.go index b245576..dfd7536 100644 --- a/internal/server/validation_test.go +++ b/internal/server/validation_test.go @@ -9,7 +9,7 @@ import ( ) func TestValidateMatcherRejectsReservedPatterns(t *testing.T) { - for _, pattern := range []string{"*.ziti", "api.svc", "db.ns.svc", "api.cluster.local", "100.64.0.1", "100.64.0.0/24"} { + for _, pattern := range []string{"*.agyn", "api.svc", "db.ns.svc", "api.cluster.local", "100.64.0.1", "100.64.0.0/24"} { t.Run(pattern, func(t *testing.T) { _, err := validateMatcher(&egressv1.EgressRuleMatcher{DomainPattern: pattern}) if err == nil {