Revert "Jonmv/private endpoints"

9 files changed, 62 insertions, 193 deletions

diff --git a/config-model/src/main/java/com/yahoo/config/model/ConfigModelRepo.java b/config-model/src/main/java/com/yahoo/config/model/ConfigModelRepo.java
index 756646beddb..95d97bc9e87 100644
--- a/config-model/src/main/java/com/yahoo/config/model/ConfigModelRepo.java
+++ b/config-model/src/main/java/com/yahoo/config/model/ConfigModelRepo.java
@@ -80,7 +80,7 @@ public class ConfigModelRepo implements ConfigModelRepoAdder, Serializable, Iter
                                  ConfigModelRegistry configModelRegistry) throws IOException {
         Element userServicesElement = getServicesFromApp(deployState.getApplicationPackage());
         readConfigModels(root, userServicesElement, deployState, vespaModel, configModelRegistry);
-        builder.postProc(deployState, root, this);
+        builder.postProc(deployState.getDeployLogger(), root, this);
     }
 
     private Element getServicesFromApp(ApplicationPackage applicationPackage) throws IOException {
diff --git a/config-model/src/main/java/com/yahoo/config/model/deploy/TestProperties.java b/config-model/src/main/java/com/yahoo/config/model/deploy/TestProperties.java
index 49194a5d1bb..7cb0672699f 100644
--- a/config-model/src/main/java/com/yahoo/config/model/deploy/TestProperties.java
+++ b/config-model/src/main/java/com/yahoo/config/model/deploy/TestProperties.java
@@ -37,7 +37,7 @@ public class TestProperties implements ModelContext.Properties, ModelContext.Fea
     private ApplicationId applicationId = ApplicationId.defaultId();
     private List<ConfigServerSpec> configServerSpecs = Collections.emptyList();
     private boolean hostedVespa = false;
-    private Zone zone = Zone.defaultZone();
+    private Zone zone;
     private final Set<ContainerEndpoint> endpoints = Collections.emptySet();
     private boolean useDedicatedNodeForLogserver = false;
     private double defaultTermwiseLimit = 1.0;
diff --git a/config-model/src/main/java/com/yahoo/vespa/model/builder/VespaModelBuilder.java b/config-model/src/main/java/com/yahoo/vespa/model/builder/VespaModelBuilder.java
index 421e3a2902c..2cf32f1e8ff 100644
--- a/config-model/src/main/java/com/yahoo/vespa/model/builder/VespaModelBuilder.java
+++ b/config-model/src/main/java/com/yahoo/vespa/model/builder/VespaModelBuilder.java
@@ -22,6 +22,6 @@ public abstract class VespaModelBuilder {
      * @param producerRoot the root producer.
      * @param configModelRepo a {@link com.yahoo.config.model.ConfigModelRepo instance}
      */
-    public abstract void postProc(DeployState deployState, AbstractConfigProducer producerRoot, ConfigModelRepo configModelRepo);
+    public abstract void postProc(DeployLogger deployLogger, AbstractConfigProducer producerRoot, ConfigModelRepo configModelRepo);
 
 }
diff --git a/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/NodesSpecification.java b/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/NodesSpecification.java
index aac968f9038..a31e3fcce71 100644
--- a/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/NodesSpecification.java
+++ b/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/NodesSpecification.java
@@ -4,7 +4,6 @@ package com.yahoo.vespa.model.builder.xml.dom;
 import com.yahoo.collections.Pair;
 import com.yahoo.component.Version;
 import com.yahoo.config.application.api.DeployLogger;
-import com.yahoo.config.provision.ZoneEndpoint;
 import com.yahoo.config.model.ConfigModelContext;
 import com.yahoo.config.provision.Capacity;
 import com.yahoo.config.provision.CloudAccount;
@@ -12,6 +11,7 @@ import com.yahoo.config.provision.ClusterMembership;
 import com.yahoo.config.provision.ClusterResources;
 import com.yahoo.config.provision.ClusterSpec;
 import com.yahoo.config.provision.DockerImage;
+import com.yahoo.config.provision.LoadBalancerSettings;
 import com.yahoo.config.provision.NodeResources;
 import com.yahoo.text.XML;
 import com.yahoo.vespa.model.HostResource;
@@ -256,13 +256,13 @@ public class NodesSpecification {
                                                           ClusterSpec.Id clusterId,
                                                           DeployLogger logger,
                                                           boolean stateful) {
-        return provision(hostSystem, clusterType, clusterId, ZoneEndpoint.defaultEndpoint, logger, stateful);
+        return provision(hostSystem, clusterType, clusterId, LoadBalancerSettings.empty, logger, stateful);
     }
 
     public Map<HostResource, ClusterMembership> provision(HostSystem hostSystem,
                                                           ClusterSpec.Type clusterType,
                                                           ClusterSpec.Id clusterId,
-                                                          ZoneEndpoint zoneEndpoint,
+                                                          LoadBalancerSettings loadBalancerSettings,
                                                           DeployLogger logger,
                                                           boolean stateful) {
         if (combinedId.isPresent())
@@ -272,7 +272,7 @@ public class NodesSpecification {
                                          .exclusive(exclusive)
                                          .combinedId(combinedId.map(ClusterSpec.Id::from))
                                          .dockerImageRepository(dockerImageRepo)
-                                         .loadBalancerSettings(zoneEndpoint)
+                                         .loadBalancerSettings(loadBalancerSettings)
                                          .stateful(stateful)
                                          .build();
         return hostSystem.allocateHosts(cluster, Capacity.from(min, max, required, canFail, cloudAccount), logger);
diff --git a/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/VespaDomBuilder.java b/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/VespaDomBuilder.java
index e4e56dcaaca..cb3c43074fc 100644
--- a/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/VespaDomBuilder.java
+++ b/config-model/src/main/java/com/yahoo/vespa/model/builder/xml/dom/VespaDomBuilder.java
@@ -1,7 +1,6 @@
 // Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
 package com.yahoo.vespa.model.builder.xml.dom;
 
-import ai.vespa.validation.Validation;
 import com.yahoo.config.application.api.DeployLogger;
 import com.yahoo.config.model.ApplicationConfigProducerRoot;
 import com.yahoo.config.model.ConfigModelRepo;
@@ -23,15 +22,8 @@ import com.yahoo.vespa.model.container.docproc.ContainerDocproc;
 import com.yahoo.vespa.model.content.Content;
 import com.yahoo.vespa.model.search.SearchCluster;
 import org.w3c.dom.Element;
-
-import java.util.HashSet;
-import java.util.LinkedHashMap;
-import java.util.LinkedHashSet;
-import java.util.Map;
-import java.util.Set;
 import java.util.logging.Level;
 import java.util.logging.Logger;
-import java.util.regex.Pattern;
 
 /**
  * Builds Vespa model components using the w3c dom api
@@ -51,12 +43,10 @@ public class VespaDomBuilder extends VespaModelBuilder {
     public static final String VESPAMALLOC = "vespamalloc";            // Intended for vespa engineers
     public static final String VESPAMALLOC_DEBUG = "vespamalloc-debug"; // Intended for vespa engineers
     public static final String VESPAMALLOC_DEBUG_STACKTRACE = "vespamalloc-debug-stacktrace"; // Intended for vespa engineers
+    private static final String CPU_SOCKET_ATTRIB_NAME = "cpu-socket";
     public static final String CPU_SOCKET_AFFINITY_ATTRIB_NAME = "cpu-socket-affinity";
     public static final String Allocated_MEMORY_ATTRIB_NAME = "allocated-memory";
 
-    private static final String CPU_SOCKET_ATTRIB_NAME = "cpu-socket";
-    private static final Pattern clusterPattern = Pattern.compile("([a-z0-9]|[a-z0-9][a-z0-9_-]{0,61}[a-z0-9])");
-
     public static final Logger log = Logger.getLogger(VespaDomBuilder.class.getPackage().toString());
 
 
@@ -242,14 +232,13 @@ public class VespaDomBuilder extends VespaModelBuilder {
      * @param root root config producer
      * @param configModelRepo a {@link ConfigModelRepo}
      */
-    public void postProc(DeployState deployState, AbstractConfigProducer root, ConfigModelRepo configModelRepo) {
+    public void postProc(DeployLogger deployLogger, AbstractConfigProducer root, ConfigModelRepo configModelRepo) {
         setContentSearchClusterIndexes(configModelRepo);
         createDocprocMBusServersAndClients(configModelRepo);
-        if (deployState.isHosted()) validateContainerClusterIds(configModelRepo);
     }
 
     private void createDocprocMBusServersAndClients(ConfigModelRepo pc) {
-        for (ContainerCluster<?> cluster: ContainerModel.containerClusters(pc)) {
+        for (ContainerCluster cluster: ContainerModel.containerClusters(pc)) {
             addServerAndClientsForChains(cluster.getDocproc());
         }
     }
@@ -259,19 +248,6 @@ public class VespaDomBuilder extends VespaModelBuilder {
             docproc.getChains().addServersAndClientsForChains();
     }
 
-    private void validateContainerClusterIds(ConfigModelRepo pc) {
-        Map<String, String> normalizedClusterIds = new LinkedHashMap<>();
-        for (ContainerCluster<?> cluster: ContainerModel.containerClusters(pc)) {
-            if (cluster.getHttp() == null) continue;
-            String name = cluster.getName();
-            Validation.requireMatch(name, "container cluster name", clusterPattern);
-            String clashing = normalizedClusterIds.put(name.replaceAll("_", "-"), name);
-            if (clashing != null) throw new IllegalArgumentException("container clusters '" + clashing + "' and '" + name +
-                                                                     "' have clashing endpoint names, when '_' is replaced " +
-                                                                     "with '-' to form valid domain names");
-        }
-    }
-
     /**
      * For some reason, search clusters need to be enumerated.
      * @param configModelRepo a {@link ConfigModelRepo}
diff --git a/config-model/src/main/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilder.java b/config-model/src/main/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilder.java
index 4c7bad575d2..d0a03be2869 100644
--- a/config-model/src/main/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilder.java
+++ b/config-model/src/main/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilder.java
@@ -11,8 +11,6 @@ import com.yahoo.config.application.api.ApplicationPackage;
 import com.yahoo.config.application.api.DeployLogger;
 import com.yahoo.config.application.api.DeploymentInstanceSpec;
 import com.yahoo.config.application.api.DeploymentSpec;
-import com.yahoo.config.provision.ZoneEndpoint;
-import com.yahoo.config.application.api.xml.DeploymentSpecXmlReader;
 import com.yahoo.config.model.ConfigModelContext;
 import com.yahoo.config.model.api.ApplicationClusterEndpoint;
 import com.yahoo.config.model.api.ConfigServerSpec;
@@ -31,11 +29,10 @@ import com.yahoo.config.provision.ClusterMembership;
 import com.yahoo.config.provision.ClusterResources;
 import com.yahoo.config.provision.ClusterSpec;
 import com.yahoo.config.provision.HostName;
-import com.yahoo.config.provision.InstanceName;
+import com.yahoo.config.provision.LoadBalancerSettings;
 import com.yahoo.config.provision.NodeResources;
 import com.yahoo.config.provision.NodeType;
 import com.yahoo.config.provision.Zone;
-import com.yahoo.config.provision.zone.ZoneId;
 import com.yahoo.container.bundle.BundleInstantiationSpecification;
 import com.yahoo.container.logging.FileConnectionLog;
 import com.yahoo.io.IOUtils;
@@ -850,14 +847,11 @@ public class ContainerModelBuilder extends ConfigModelBuilder<ContainerModel> {
         }
     }
 
-    private ZoneEndpoint zoneEndpoint(ConfigModelContext context, ClusterSpec.Id cluster) {
-        InstanceName instance = context.properties().applicationId().instance();
-        ZoneId zone = ZoneId.from(context.properties().zone().environment(),
-                                  context.properties().zone().region());
-        DeploymentSpec spec = context.getApplicationPackage().getDeployment()
-                                     .map(new DeploymentSpecXmlReader(false)::read)
-                                     .orElse(DeploymentSpec.empty);
-        return spec.zoneEndpoint(instance, zone, cluster);
+    private LoadBalancerSettings loadBalancerSettings(Element loadBalancerElement) {
+        List<String> allowedUrnElements = XML.getChildren(XML.getChild(loadBalancerElement, "private-access"),
+                                                          "allow-urn")
+                                             .stream().map(XML::getValue).toList();
+        return new LoadBalancerSettings(allowedUrnElements);
     }
 
     private static Map<String, String> getEnvironmentVariables(Element environmentVariables) {
@@ -946,12 +940,11 @@ public class ContainerModelBuilder extends ConfigModelBuilder<ContainerModel> {
 
     private List<ApplicationContainer> createNodesFromNodeCount(ApplicationContainerCluster cluster, Element containerElement, Element nodesElement, ConfigModelContext context) {
         NodesSpecification nodesSpecification = NodesSpecification.from(new ModelElement(nodesElement), context);
-        ClusterSpec.Id clusterId = ClusterSpec.Id.from(cluster.name());
-        ZoneEndpoint zoneEndpoint = zoneEndpoint(context, clusterId);
+        LoadBalancerSettings loadBalancerSettings = loadBalancerSettings(XML.getChild(containerElement, "load-balancer"));
         Map<HostResource, ClusterMembership> hosts = nodesSpecification.provision(cluster.getRoot().hostSystem(),
                                                                                   ClusterSpec.Type.container,
-                                                                                  clusterId,
-                                                                                  zoneEndpoint,
+                                                                                  ClusterSpec.Id.from(cluster.getName()),
+                                                                                  loadBalancerSettings,
                                                                                   log,
                                                                                   getZooKeeper(containerElement) != null);
         return createNodesFromHosts(hosts, cluster, context.getDeployState());
diff --git a/config-model/src/main/resources/schema/containercluster.rnc b/config-model/src/main/resources/schema/containercluster.rnc
index 81455084ad2..933ec528c42 100644
--- a/config-model/src/main/resources/schema/containercluster.rnc
+++ b/config-model/src/main/resources/schema/containercluster.rnc
@@ -6,7 +6,8 @@ ContainerCluster = element container {
     ContainerServices &    
     DocumentBinding* &
     NodesOfContainerCluster? &
-    ClientAuthorize?
+    ClientAuthorize? &
+    LoadBalancer?
 }
 
 ContainerServices =
@@ -311,6 +312,16 @@ NodesOfContainerCluster = element nodes {
     )
 }
 
+LoadBalancer = element load-balancer {
+    element private-access {
+        element allow-urn {
+            xsd:string
+        }*
+    }?
+}
+
+
+
 #DOCUMENT BINDINGS:
 
 DocumentBinding = element document {
diff --git a/config-model/src/main/resources/schema/deployment.rnc b/config-model/src/main/resources/schema/deployment.rnc
index d63b8885a57..444f66a92ab 100644
--- a/config-model/src/main/resources/schema/deployment.rnc
+++ b/config-model/src/main/resources/schema/deployment.rnc
@@ -150,21 +150,12 @@ EndpointInstance = element instance {
     text
 }
 
-AllowedUrn = element allow {
-    attribute with { xsd:string } &
-    attribute arn { xsd:string }? &
-    attribute project { xsd:string }?
-}
-
 Endpoint = element endpoint {
     attribute id { xsd:string }? &
     attribute container-id { xsd:string } &
     attribute region { xsd:string }? &
-    attribute type { xsd:string }? &
-    attribute enabled { xsd:boolean }? &
     EndpointRegion* &
-    EndpointInstance* &
-    AllowedUrn*
+    EndpointInstance*
 }
 
 Endpoints = element endpoints {
diff --git a/config-model/src/test/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilderTest.java b/config-model/src/test/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilderTest.java
index f0c39ecc920..addf4dffde2 100644
--- a/config-model/src/test/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilderTest.java
+++ b/config-model/src/test/java/com/yahoo/vespa/model/container/xml/ContainerModelBuilderTest.java
@@ -22,9 +22,6 @@ import com.yahoo.config.provision.Environment;
 import com.yahoo.config.provision.Flavor;
 import com.yahoo.config.provision.RegionName;
 import com.yahoo.config.provision.Zone;
-import com.yahoo.config.provision.ZoneEndpoint;
-import com.yahoo.config.provision.ZoneEndpoint.AccessType;
-import com.yahoo.config.provision.ZoneEndpoint.AllowedUrn;
 import com.yahoo.config.provisioning.FlavorsConfig;
 import com.yahoo.container.ComponentsConfig;
 import com.yahoo.container.QrConfig;
@@ -60,6 +57,7 @@ import java.util.Map;
 import java.util.Set;
 import java.util.function.Function;
 import java.util.logging.Level;
+import java.util.stream.Collectors;
 
 import static com.yahoo.config.model.test.TestUtil.joinLines;
 import static com.yahoo.test.LinePatternMatcher.containsLineWithPattern;
@@ -181,63 +179,6 @@ public class ContainerModelBuilderTest extends ContainerModelBuilderTestBase {
     }
 
     @Test
-    void container_cluster_with_invalid_name_throws_exception_when_hosted() throws IOException, SAXException {
-        String servicesXml = """
-                             <services version='1.0'>
-                               <container id='C-1' version='1.0'>
-                                 <nodes count='1' />
-                               </container>
-                             </services>
-                             """;
-
-        assertEquals("container cluster name must match '([a-z0-9]|[a-z0-9][a-z0-9_-]{0,61}[a-z0-9])', but got: 'C-1'",
-                     assertThrows(IllegalArgumentException.class,
-                                  () ->
-                                          new VespaModel(new NullConfigModelRegistry(), new DeployState.Builder()
-                                                  .modelHostProvisioner(new InMemoryProvisioner(4, false))
-                                                  .applicationPackage(new MockApplicationPackage.Builder().withServices(servicesXml).build())
-                                                  .properties(new TestProperties().setHostedVespa(true))
-                                                  .build()))
-                             .getMessage());
-
-        new VespaModel(new NullConfigModelRegistry(), new DeployState.Builder()
-                .modelHostProvisioner(new InMemoryProvisioner(4, false))
-                .applicationPackage(new MockApplicationPackage.Builder().withServices(servicesXml).build())
-                .properties(new TestProperties().setHostedVespa(false))
-                .build());
-    }
-
-    @Test
-    void two_clusters_with_clashing_cluster_names_throws_exception_when_hosted() throws IOException, SAXException {
-        String servicesXml = """
-                             <services version='1.0'>
-                               <container id='c-1' version='1.0'>
-                                 <nodes count='1' />
-                               </container>
-                               <container id='c_1' version='1.0'>
-                                 <nodes count='1' />
-                               </container>
-                             </services>
-                             """;
-
-        assertEquals("container clusters 'c-1' and 'c_1' have clashing endpoint names, when '_' is replaced with '-' to form valid domain names",
-                     assertThrows(IllegalArgumentException.class,
-                                  () ->
-                                          new VespaModel(new NullConfigModelRegistry(), new DeployState.Builder()
-                                                  .modelHostProvisioner(new InMemoryProvisioner(4, false))
-                                                  .applicationPackage(new MockApplicationPackage.Builder().withServices(servicesXml).build())
-                                                  .properties(new TestProperties().setHostedVespa(true))
-                                                  .build()))
-                             .getMessage());
-
-        new VespaModel(new NullConfigModelRegistry(), new DeployState.Builder()
-                .modelHostProvisioner(new InMemoryProvisioner(4, false))
-                .applicationPackage(new MockApplicationPackage.Builder().withServices(servicesXml).build())
-                .properties(new TestProperties().setHostedVespa(false))
-                .build());
-    }
-
-    @Test
     void two_clusters_without_explicit_port_throws_exception() {
         Element cluster1Elem = DomBuilderTest.parse(
                 "<container id='cluster1' version='1.0'>",
@@ -257,96 +198,53 @@ public class ContainerModelBuilderTest extends ContainerModelBuilderTestBase {
 
     @Test
     void load_balancers_can_be_set() throws IOException, SAXException {
-        // No endpoints
-        verifyAllowedUrns("", Environment.prod, "eu", ZoneEndpoint.defaultEndpoint);
+        // No load-balancer or nodes elements
+        verifyAllowedUrns("");
 
-        // No non-default settings
-        verifyAllowedUrns("""
-                          <endpoint type='zone' container-id='default' />
-                          """,
-                          Environment.prod,
-                          "eu",
-                          ZoneEndpoint.defaultEndpoint);
+        // No load-balancer element
+        verifyAllowedUrns("<nodes count='2' />");
 
-        // No allowed urns
+        // No nodes element
         verifyAllowedUrns("""
-                          <endpoint type='private' container-id='default' />
-                          """,
-                          Environment.prod,
-                          "eu",
-                          new ZoneEndpoint(true, true, List.of()));
-
-        // Various settings
-        verifyAllowedUrns("""
-                          <endpoint type='zone' container-id='default' enabled='false' />
-                          <endpoint type='private' container-id='default'>
-                            <region>eu</region>
-                            <allow with='aws-private-link' arn='barn' />
-                            <allow with='gcp-service-connect' project='nine' />
-                          </endpoint>
-                          """,
-                          Environment.prod,
-                          "eu",
-                          new ZoneEndpoint(false, true, List.of(new AllowedUrn(AccessType.awsPrivateLink, "barn"),
-                                                                new AllowedUrn(AccessType.gcpServiceConnect, "nine"))));
-
-        // Various settings, but wrong region
+                          <load-balancer>
+                            <private-access>
+                              <allow-urn>foo</allow-urn>
+                              <allow-urn>bar</allow-urn>
+                            </private-access>
+                          </load-balancer>
+                          """);
+
+        // Both load-balancer and nodes
         verifyAllowedUrns("""
-                          <endpoint type='zone' container-id='default' enabled='false' />
-                          <endpoint type='private' container-id='default'>
-                            <region>eu</region>
-                            <allow with='aws-private-link' arn='barn' />
-                            <allow with='gcp-service-connect' project='nine' />
-                          </endpoint>
+                          <load-balancer>
+                            <private-access>
+                              <allow-urn>foo</allow-urn>
+                              <allow-urn>bar</allow-urn>
+                            </private-access>
+                          </load-balancer>
+                          <nodes count='2' />
                           """,
-                          Environment.prod,
-                          "us",
-                          ZoneEndpoint.defaultEndpoint);
-
-        // Various settings, but wrong environment
-        verifyAllowedUrns("""
-                          <endpoint type='zone' container-id='default' enabled='false' />
-                          <endpoint type='private' container-id='default'>
-                            <region>eu</region>
-                            <allow with='aws-private-link' arn='barn' />
-                            <allow with='gcp-service-connect' project='nine' />
-                          </endpoint>
-                          """,
-                          Environment.dev,
-                          "eu",
-                          ZoneEndpoint.defaultEndpoint);
+                          "foo", "bar");
     }
 
-    private void verifyAllowedUrns(String endpointsTag, Environment environment, String region, ZoneEndpoint expected) throws IOException, SAXException {
+    private void verifyAllowedUrns(String containerXml, String... expectedAllowedUrns) throws IOException, SAXException {
         String servicesXml = """
                              <container id='default' version='1.0'>
-                               <nodes count='2' />
+                               %s
                              </container>
-                             """;
-        String deploymentXml = """
-                               <deployment version='1.0'>
-                                 <prod>
-                                   <region>eu</region>
-                                 </prod>
-                                 <endpoints>
-                                   %s
-                                 </endpoints>
-                               </deployment>
-                               """.formatted(endpointsTag);
-        ApplicationPackage applicationPackage = new MockApplicationPackage.Builder().withServices(servicesXml).withDeploymentSpec(deploymentXml).build();
+                             """.formatted(containerXml);
+        ApplicationPackage applicationPackage = new MockApplicationPackage.Builder().withServices(servicesXml).build();
         InMemoryProvisioner provisioner = new InMemoryProvisioner(true, false, "host1.yahoo.com", "host2.yahoo.com");
         VespaModel model = new VespaModel(new NullConfigModelRegistry(), new DeployState.Builder()
                 .modelHostProvisioner(provisioner)
                 .provisioned(provisioner.startProvisionedRecording())
                 .applicationPackage(applicationPackage)
-                .properties(new TestProperties().setMultitenant(true)
-                                                .setHostedVespa(true)
-                                                .setZone(new Zone(environment, RegionName.from(region))))
+                .properties(new TestProperties().setMultitenant(true).setHostedVespa(true))
                 .build());
         assertEquals(2, model.hostSystem().getHosts().size());
         assertEquals(1, provisioner.provisionedClusters().size());
-        assertEquals(expected,
-                     provisioner.provisionedClusters().iterator().next().zoneEndpoint());
+        assertEquals(List.of(expectedAllowedUrns),
+                     provisioner.provisionedClusters().iterator().next().loadBalancerSettings().allowedUrns());
     }
 
     @Test