CloudNebulaProject/reddwarf
Watch
1
0
Fork
You've already forked reddwarf
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Honor native Pod resources and health probe semantics #14

Merged
toasterson merged 2 commits from codex/node03-pod-semantics-20261007 into main 2026-10-08 05:31:06 +00:00
Conversation 0 Commits 2 Files changed 20 +4245 -285
toasterson commented 2026-10-07 15:25:48 +00:00
Owner
Copy link

Preserve Kubernetes quantity, request/limit and probe semantics when mapping Pods to native illumos zones. Use checked quantity arithmetic and exact zone CPU controls, reject unsupported requirements before allocation, and implement HTTP/TLS/header and named-port probes with consecutive-success readiness thresholds.

Validate initial HTTP targets and raw redirect Location values before normalization: /denied/%2e%2e/ready cannot silently reach a different healthy endpoint. Supported redirects preserve same-host policy, the ten-request limit, headers/Host, Referer rules and the overall timeout. Tests include 182 pinned apimachinery quantity cases, 229 pinned Go target cases and actual HTTP/TLS paths.

Stacked on PR13/PR12. Review revision: 97f38097984aa571d6336c5ae488aa6a9f22ed5b, capacity 9d920a61a95fa0c40b3822a8a77a5370cdfa0c22, foundation d43465c788363e7ccbccb21f5c7b6f9dc0503427. Both semantics commits remain patch-equivalent; inherited registration/error-path repairs are described in PR12.

Validation: foundation d43465c788363e7ccbccb21f5c7b6f9dc0503427 passes 452 local workspace tests and strict Clippy. Combined 97f38097984aa571d6336c5ae488aa6a9f22ed5b passes 486 tests (0 failed, 2 existing ignored) and strict workspace/all-target Clippy. Both the foundation and rebuilt combined binaries pass the actual API, cluster, lifecycle and authentication smoke sequence, with all 47 tracked child processes reaped in each sequence. Both dependent two-commit ranges remain patch-equivalent.

Current-head native23 (52 mandatory regressions plus actual cluster/lifecycle smokes), target ABI/package, canonical review/CI and merge remain pending. Prior native22 proves its recorded source only. Installation, public distribution and migration acceptance are not claimed.

Actual zone-cap enforcement and workload networking require separate native acceptance. WI-12: 01a11682-182f-7511-a12f-044d4ca7c2b0. Preserve AGENTS.md, docs/architecture-contract.md and docs/node03-migration.md.

Preserve Kubernetes quantity, request/limit and probe semantics when mapping Pods to native illumos zones. Use checked quantity arithmetic and exact zone CPU controls, reject unsupported requirements before allocation, and implement HTTP/TLS/header and named-port probes with consecutive-success readiness thresholds. Validate initial HTTP targets and raw redirect Location values before normalization: `/denied/%2e%2e/ready` cannot silently reach a different healthy endpoint. Supported redirects preserve same-host policy, the ten-request limit, headers/Host, Referer rules and the overall timeout. Tests include 182 pinned apimachinery quantity cases, 229 pinned Go target cases and actual HTTP/TLS paths. Stacked on PR13/PR12. Review revision: `97f38097984aa571d6336c5ae488aa6a9f22ed5b`, capacity `9d920a61a95fa0c40b3822a8a77a5370cdfa0c22`, foundation `d43465c788363e7ccbccb21f5c7b6f9dc0503427`. Both semantics commits remain patch-equivalent; inherited registration/error-path repairs are described in PR12. Validation: foundation `d43465c788363e7ccbccb21f5c7b6f9dc0503427` passes 452 local workspace tests and strict Clippy. Combined `97f38097984aa571d6336c5ae488aa6a9f22ed5b` passes 486 tests (0 failed, 2 existing ignored) and strict workspace/all-target Clippy. Both the foundation and rebuilt combined binaries pass the actual API, cluster, lifecycle and authentication smoke sequence, with all 47 tracked child processes reaped in each sequence. Both dependent two-commit ranges remain patch-equivalent. Current-head native23 (52 mandatory regressions plus actual cluster/lifecycle smokes), target ABI/package, canonical review/CI and merge remain pending. Prior native22 proves its recorded source only. Installation, public distribution and migration acceptance are not claimed. Actual zone-cap enforcement and workload networking require separate native acceptance. WI-12: `01a11682-182f-7511-a12f-044d4ca7c2b0`. Preserve `AGENTS.md`, `docs/architecture-contract.md` and `docs/node03-migration.md`.
toasterson force-pushed codex/node03-pod-semantics-20261007 from 3e44e76c5d to 740f43abf8 2026-10-07 17:05:23 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 740f43abf8 to fdc4f58ec8 2026-10-07 19:40:56 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from c20862be0e to 10fe27012c 2026-10-07 20:53:43 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 10fe27012c to 488c96354a 2026-10-07 21:55:26 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 488c96354a to 15d1f7583e 2026-10-07 22:14:37 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 15d1f7583e to 70a8dbd3a6 2026-10-07 22:51:33 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 70a8dbd3a6 to 2bafdaef79 2026-10-07 23:21:40 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 2bafdaef79 to 46e2b1db90 2026-10-07 23:36:22 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 46e2b1db90 to 0fe87a713c 2026-10-07 23:57:39 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from 0fe87a713c to b0395ad03c 2026-10-08 00:24:48 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from b0395ad03c to a4461585c6 2026-10-08 01:33:53 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from a4461585c6 to e27f6caea6 2026-10-08 02:03:05 +00:00 Compare
toasterson force-pushed codex/node03-pod-semantics-20261007 from e27f6caea6 to 97f3809798 2026-10-08 03:25:15 +00:00 Compare
toasterson changed target branch from codex/node03-native-migration-20261007 to main 2026-10-08 05:30:15 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
CloudNebulaProject/reddwarf!14
No description provided.