mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-10-14 08:10:26 +00:00
rcourtman
74b822eef9
Discovery fingerprints hosts on the scanned subnet, and its PBS fallback probes api2/json/status and api2/json/config/datastore with no credentials, which PBS records as authentication failures. Configured connections are meant to be skipped for exactly that reason, so every gap in the skip writes noise into an operator's own server log on every scan (#1616, split from #1606). Two paths failed open. Hostname resolution kept only the first IPv4 and broke out of the loop, leaving a multi-homed host partly suppressed while discovery reaches whichever address it reaches. Resolution failure returned nothing at all with no record that suppression had been skipped, so the host stayed scannable and looked identical to one that was never configured. Resolution now covers every IPv4 a configured host answers with, and both a lookup failure and an IPv4-less answer are logged as the suppression gaps they are. An unresolvable host still yields no entry, which is unavoidable, but it no longer does so silently and cannot affect the other configured hosts. This does not by itself explain the reporter's case in #1616. Their sanitized export rewrites the PBS host to a generated placeholder, so it cannot show whether the connection was configured by address or by name. Verified: internal/monitoring, gofmt, canonical completion guard, status, control-plane, registry and contract audits, active-target automated and hybrid readiness proofs, and all thirteen release-control unit test modules.