← All project updates
infrastructure

Customer bare-metal browser management

Assigned physical servers can now expose carefully limited management capabilities through the customer panel.

Customer capabilities

Authorized customers can inspect system inventory and health, record device notes, use power controls, open the browser console, and manage supported virtual media and one-time boot operations.

Administrative control

Operators bind an allowlisted controller to a managed customer device and control which capabilities are available. Assignment actions retain CSRF protection and audit context.

Management architecture

Redfish is preferred for inventory, health, and power operations. Controller credentials and private addresses remain server-side. The design does not expose the management VLAN or raw controller interface publicly.