| Surface | What it controls |
|---|---|
| Ingress posture | How end users reach the deployed application (public, allowlisted, Tailscale). |
| Controller connectivity | How the appliance reaches your control plane (public internet, AWS PrivateLink, Tailscale). |
| Customer-provided services | Which managed services the install uses your customer’s existing instance of, instead of provisioning a default equivalent. |
Fundamentals