Ben Duncan 21c4754336 feat: E2E tests for public/private subnet isolation + remove legacy nat mode ...

- Add Phase 8b to run-e2e.sh: public subnet instance gets PublicIpAddress
  and dnat_and_snat rule; private subnet instance gets neither; no blanket
  VPC CIDR SNAT (validates mulga-754 fix)
- Remove legacy external_mode="nat" — only "pool" with source=static or
  source=dhcp. Admin init defaults to pool/dhcp when WAN detected.
- Enable dev_networking always (was disabled with external mode, breaking
  E2E SSH tests)
- Update bootstrap.sh + e2e.yml: SPX_EXTERNAL_POOL env var configures
  static IP pool for CI (230-240 single-node, 240-250 multi-node)
- Fix run-vpc-e2e.sh SNAT assertion for mulga-754 (no blanket SNAT)
- Add unit tests for parseDHCPCDLeasedIP, ReconcileFromKV edge cases,
  DHCP pool config validation to meet 60% diff coverage threshold

2026-03-25 15:22:18 +10:00

..

e2e.yml

feat: E2E tests for public/private subnet isolation + remove legacy nat mode

2026-03-25 15:22:18 +10:00

release.yml

feat: fix silent failures across spinifex (P2 audit H-25 through H-43)

2026-03-19 13:37:41 +10:00

spinifex.yml

ci: add pull_request triggers to CI workflows

2026-03-20 14:08:12 +10:00

ui.yml

ci: add pull_request triggers to CI workflows

2026-03-20 14:08:12 +10:00