Native Kubernetes boundaries and Rust OCI tools for OpenIndiana

toasterson commented

2026-10-06 17:04:33 +00:00

Owner

Implement a Rust Kubernetes-compatible control plane and native illumos worker through standard API and kubelet boundaries. The worker consumes Node/Lease/assigned-Pod APIs, serves authenticated kubelet HTTPS and bounded SPDY exec, and manages zones, SMF, routing and Service backends. RedDwarf produces standard EndpointSlices; externally enrolled workers consume the cluster's slices. The fixed profile rejects unsupported requirements truthfully.

Rust OCI tooling validates manifests/configs, platforms, digests, DiffIDs and ordered layers; builds from pinned IPS packages; exports IPS metadata; and supports standard Distribution backed by SeaweedFS S3. Preserve image shutdown semantics and ship disabled-by-default SMF services.

Runtime reconciliation verifies live ownership before effects, isolates independent failures, and preserves UID/resourceVersion and allocation fences. Unsupported deadline updates stop owned workloads through a durable cutoff and require observed stop proof. Custom readiness gates use fresh API conditions without redundant status writes. Service backends follow successfully synchronized live-peer routes; failed inventory or route synchronization withdraws NAT and reports unhealthy state. Server shutdown cancels active watches before bounded HTTP/TLS draining; supervisor records use exclusive concurrent-safe temporary files.

Node registration rejects 401/403 authorization denial and genuine admission conflicts, while preserving AlreadyExists recovery and retrying transient server or response-body transport failures. Real HTTP/TCP regressions cover denial, truncated 409 recovery through Node/status/Lease writes, and truncated denial diagnostics. Lifecycle smoke retains bounded diagnostic tails and reaps owned children without hiding the original failure.

Review revision: d43465c788363e7ccbccb21f5c7b6f9dc0503427.

Validation: foundation d43465c788363e7ccbccb21f5c7b6f9dc0503427 passes 452 local workspace tests and strict Clippy. Combined 97f38097984aa571d6336c5ae488aa6a9f22ed5b passes 486 tests (0 failed, 2 existing ignored) and strict workspace/all-target Clippy. Both the foundation and rebuilt combined binaries pass the actual API, cluster, lifecycle and authentication smoke sequence, with all 47 tracked child processes reaped in each sequence. Both dependent two-commit ranges remain patch-equivalent.

Current-head native23 (52 mandatory regressions plus actual cluster/lifecycle smokes), target ABI/package, canonical review/CI and merge remain pending. Prior native22 proves its recorded source only. Installation, public distribution and migration acceptance are not claimed.

Live acceptance remains explicit: WI-15 direct node03/Talos canary; WI-25 official kubelet; WI-26 public IPS/OCI/S3 and standard OpenIndiana walkthrough; WI-27 complete demonstration. WI-24 gates stor02 retirement. This source delivery is not a Kubernetes conformance claim.

WI-10: 01a111ef-a628-74f1-bbc1-03a59003381d. Preserve AGENTS.md and docs/architecture-contract.md.

Implement a Rust Kubernetes-compatible control plane and native illumos worker through standard API and kubelet boundaries. The worker consumes Node/Lease/assigned-Pod APIs, serves authenticated kubelet HTTPS and bounded SPDY exec, and manages zones, SMF, routing and Service backends. RedDwarf produces standard EndpointSlices; externally enrolled workers consume the cluster's slices. The fixed profile rejects unsupported requirements truthfully. Rust OCI tooling validates manifests/configs, platforms, digests, DiffIDs and ordered layers; builds from pinned IPS packages; exports IPS metadata; and supports standard Distribution backed by SeaweedFS S3. Preserve image shutdown semantics and ship disabled-by-default SMF services. Runtime reconciliation verifies live ownership before effects, isolates independent failures, and preserves UID/resourceVersion and allocation fences. Unsupported deadline updates stop owned workloads through a durable cutoff and require observed stop proof. Custom readiness gates use fresh API conditions without redundant status writes. Service backends follow successfully synchronized live-peer routes; failed inventory or route synchronization withdraws NAT and reports unhealthy state. Server shutdown cancels active watches before bounded HTTP/TLS draining; supervisor records use exclusive concurrent-safe temporary files. Node registration rejects 401/403 authorization denial and genuine admission conflicts, while preserving AlreadyExists recovery and retrying transient server or response-body transport failures. Real HTTP/TCP regressions cover denial, truncated 409 recovery through Node/status/Lease writes, and truncated denial diagnostics. Lifecycle smoke retains bounded diagnostic tails and reaps owned children without hiding the original failure. Review revision: `d43465c788363e7ccbccb21f5c7b6f9dc0503427`. Validation: foundation `d43465c788363e7ccbccb21f5c7b6f9dc0503427` passes 452 local workspace tests and strict Clippy. Combined `97f38097984aa571d6336c5ae488aa6a9f22ed5b` passes 486 tests (0 failed, 2 existing ignored) and strict workspace/all-target Clippy. Both the foundation and rebuilt combined binaries pass the actual API, cluster, lifecycle and authentication smoke sequence, with all 47 tracked child processes reaped in each sequence. Both dependent two-commit ranges remain patch-equivalent. Current-head native23 (52 mandatory regressions plus actual cluster/lifecycle smokes), target ABI/package, canonical review/CI and merge remain pending. Prior native22 proves its recorded source only. Installation, public distribution and migration acceptance are not claimed. Live acceptance remains explicit: WI-15 direct node03/Talos canary; WI-25 official kubelet; WI-26 public IPS/OCI/S3 and standard OpenIndiana walkthrough; WI-27 complete demonstration. WI-24 gates stor02 retirement. This source delivery is not a Kubernetes conformance claim. WI-10: `01a111ef-a628-74f1-bbc1-03a59003381d`. Preserve `AGENTS.md` and `docs/architecture-contract.md`.

toasterson added 16 commits

2026-10-06 17:04:34 +00:00