We’re building a fleet solution for Spinnaker. When a user hits the global load balancer at spinnaker.prod.aws.[domain].net/<user_seal_id>, an NGINX service consults a router service to determine the user’s dedicated Spinnaker instance and then routes the request to that instance.

Routing works today, but the browser URL updates to the underlying fleet instance. Instead, we want users to always see the global URL while transparently serving content from their assigned instance.

The goal is per-user instance routing (decided by the router service) with the instance address fully hidden behind the global endpoint, including for a session across Deck/Gate.