Product / Console
The operator console.
Served by lattice-api. Same origin as /api/v1. No extra backend. First visit with no tokens mints the first admin.
Roles: admin (everything), operator (reservations and force-release; other screens read-only), readonly (look). Hiding a button is not the security boundary. The API returns 403.
Paste a token that starts with lattice_live_. It stays in this tab (sessionStorage), not localStorage.
| Screen | Path | What you do |
|---|---|---|
| Overview | / | API/ready, dhcpd count, outbox lag, utilization, derived alerts, recent leases. Refreshes every 8s. |
| Search | header | Type IP, MAC, hostname, CIDR, or DNS. Dropdown plus /search?q= results. Every role. |
| Plan | /plan | Nested prefixes and subnets. Utilization bars. Reserve vs exclude is spelled on the page. |
| Subnet | /subnets/{id} | Gateway, VLAN, site, VRF, timers, DDNS, pools, reservations, excludes, options, live leases. |
| Leases | /leases | Helpdesk search and force-release. Operator role. |
| DNS | /dns | Embedded zones, static records, lease-derived A/AAAA. |
| DNS servers | /dns-servers | Adapters: bind_tsig, ad_gsstsig, powerdns_http, embedded. |
| Classes | /classes | Client classes and class-scoped options. |
| Nodes | /nodes | dhcpd heartbeats and API ready. |
| Audit | /audit | IPAM mutations with before/after. |
| Webhooks | /webhooks | HMAC-signed outbox HTTP hooks. |
| NetBox | /netbox | Export prefixes; import creates missing only. |
| Tenants | /tenants | List, create, rename. |
| Tokens | /tokens | lattice_live_ secrets, shown once. |