thesabear/public
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

netbird-zero-trust.md: remove the rollout-status section

Browse Source 
Not appropriate for an employer-facing portfolio doc - editorial call.
This commit is contained in:
thesabear committed 2026-09-01 00:31:40 +03:00
1 parent 8ceadab38a
commit 685c82a6f9
1 file changed
-15
Download Patch File Download Diff File Expand all files Collapse all files
docs/netbird-zero-trust.md
-15
View File
@@ -120,20 +120,5 @@ Events:
The network map updating on its own, unprompted, on a peer that isn't even the control plane, is the mesh's policy engine actually pushing live state to every connected peer — not a dashboard claiming a policy exists. The network map updating on its own, unprompted, on a peer that isn't even the control plane, is the mesh's policy engine actually pushing live state to every connected peer — not a dashboard claiming a policy exists.
## Rollout, phased and honestly incomplete
Not everything is finished, and that's stated plainly rather than rounded up:
| Phase | Scope | State |
|---|---|---|
| Control plane + dashboard, embedded identity | Stand up the mesh itself | Done |
| First peers | Laptop + one fleet host, verified on-LAN | Done |
| Fleet enrolment | Every fleet host via the dedicated role | Done |
| Roaming | Split-DNS (done) + full-LAN route + off-LAN verification | Partly done |
| Zero-trust policy | Groups, keys, deny-by-default, approval, posture, login expiry | Done |
| Enforcement | Per-host firewall rejects non-mesh admin access | Planned |
The honest gaps: off-LAN connectivity (STUN/relay through NAT) hasn't been verified end-to-end yet, the full internal-network route for agent-less devices is still open, and per-host firewall enforcement — actually *requiring* the mesh for admin access rather than just offering it as one more path — is a deliberate later phase, not an oversight. A phased rollout that's honest about which phases aren't done yet is worth more than a status page that rounds every in-progress item up to "complete."
--- ---
Related: [`docs/iac-pipeline.md`](iac-pipeline.md), [`docs/architecture-overview.md`](architecture-overview.md), [`docs/firewall-and-network.md`](firewall-and-network.md), [`docs/secrets-and-pki.md`](secrets-and-pki.md), [`docs/dns-naming.md`](dns-naming.md) Related: [`docs/iac-pipeline.md`](iac-pipeline.md), [`docs/architecture-overview.md`](architecture-overview.md), [`docs/firewall-and-network.md`](firewall-and-network.md), [`docs/secrets-and-pki.md`](secrets-and-pki.md), [`docs/dns-naming.md`](dns-naming.md)