rcourtman 93fff4f1d8 Add an explicit operator override for plaintext HTTP to non-local Pulse hosts ... Fleets on networks numbered from nominally public IP space (issue #1522: an AD estate on 192.20.0.0/16) cannot pass the agent's local-network plaintext heuristic, and the only workaround was pointing a .internal DNS alias at the server, which bypasses the same control less visibly than a flag would. --allow-plaintext-http (PULSE_AGENT_ALLOW_PLAINTEXT_HTTP) records process-wide consent once at agent startup before any module validates a URL, covers every agent transport including the websocket command channel, warns at startup that the API token travels in cleartext, defaults closed, and is never emitted by generated install commands or settable by the server.		2026-07-14 16:42:02 +01:00
..
client.go	Modernize Unified Agent lifecycle and platform support	2026-07-09 23:20:35 +01:00
client_additional_test.go	Add an explicit operator override for plaintext HTTP to non-local Pulse hosts	2026-07-14 16:42:02 +01:00
client_test.go	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
signature.go	Fix default agent rollout status noise	2026-05-14 14:37:24 +01:00
signature_additional_test.go	feat: Pulse v6 release	2026-03-18 16:06:30 +00:00
signature_test.go	Fix default agent rollout status noise	2026-05-14 14:37:24 +01:00