pub const PUBLIC_IP_TAINT: &str = "public-ip";Expand description
Taint name (for REQUIRES_TAINT_ANNOTATION) identifying machines with
a publicly-routable IP — the W267 sovereign-ingress placement
requirement. MachineConfig.taints (R572-F3) is the matching node-side
field and RequiredSpec::matches (R572-F5) is the consumer, so this is a
live key on both sides: a node may carry it, and the cloudflared/passway
ingress specs require it.