Reconcile owned native service networking and worker storage

toasterson commented

2026-10-01 22:25:43 +00:00

Owner

Workers now reconcile only their recorded native peer routes and service NAT rules, withdrawing unhealthy or deleted endpoints while preserving unrelated policy. Dedicated worker dataset arguments allow the sandbox to use explicitly owned storage instead of shared default datasets.

Work item: 01a0f6e0-dce0-7260-a78d-2fc324f8bb2e (WI-4)
Expected head: ae94ca55ed

The implementation checks native command failures and readback, persists owned route/NAT intent, uses additive apply/removal without global flushes, validates interface/fabric ownership, and admits only fresh Ready peers and named TCP/UDP targets on healthy admitted Pods. The smoke harness preserves literal guest arguments across zlogin's shell boundary.

Validation: exact-head OpenIndiana full checks passed: 225 native tests, formatting, strict all-target Clippy, build, SMF validation and four process smoke suites. Three native guest-argument harness tests passed. Real isolated-zone packets proved service HTTP/NAT, node-loss withdrawal, recovery, Pod deletion and empty owned cleanup; the unrelated NAT canary remained exactly equal. Final task zones, links, datasets and snapshots were absent, and global networking policy/files/routes/forwarding matched the pre-test state. Global IPFilter stayed disabled.

The packet fixture feeds injected Pod/Node inventory into real native networking. It does not establish cross-physical-host or API-fed packet acceptance. Authenticated API/worker inventory has separate process proof. Full sandbox packaging and native CI/job execution belong to WI-6; canonical Anima review/CI/acceptance remain required before this item's terminal completion.

Workers now reconcile only their recorded native peer routes and service NAT rules, withdrawing unhealthy or deleted endpoints while preserving unrelated policy. Dedicated worker dataset arguments allow the sandbox to use explicitly owned storage instead of shared default datasets. Work item: 01a0f6e0-dce0-7260-a78d-2fc324f8bb2e (WI-4) Expected head: ae94ca55ed4eadd70b2c9d1595f12a041554918a The implementation checks native command failures and readback, persists owned route/NAT intent, uses additive apply/removal without global flushes, validates interface/fabric ownership, and admits only fresh Ready peers and named TCP/UDP targets on healthy admitted Pods. The smoke harness preserves literal guest arguments across zlogin's shell boundary. Validation: exact-head OpenIndiana full checks passed: 225 native tests, formatting, strict all-target Clippy, build, SMF validation and four process smoke suites. Three native guest-argument harness tests passed. Real isolated-zone packets proved service HTTP/NAT, node-loss withdrawal, recovery, Pod deletion and empty owned cleanup; the unrelated NAT canary remained exactly equal. Final task zones, links, datasets and snapshots were absent, and global networking policy/files/routes/forwarding matched the pre-test state. Global IPFilter stayed disabled. The packet fixture feeds injected Pod/Node inventory into real native networking. It does not establish cross-physical-host or API-fed packet acceptance. Authenticated API/worker inventory has separate process proof. Full sandbox packaging and native CI/job execution belong to WI-6; canonical Anima review/CI/acceptance remain required before this item's terminal completion.

toasterson added 7 commits

2026-10-01 22:25:44 +00:00

Own worker gateways, peer routes and service NAT rules (WI-4) 98fb0861dd

Retain network ownership until cleanup is verified 031c361dc7

Write complete native networking snapshot inputs 328f0ce8f6

Integrate scoped API identity with owned service networking d1c2a58c3c

Allow idle NAT reconciliation without kernel resources e089f64e80

Integrate bound pod generation guards with service networking 705d84e735

Allow workers to select owned storage datasets ad677436ea

toasterson added 1 commit

2026-10-02 19:04:59 +00:00

Preserve native zlogin guest arguments in network smoke ae94ca55ed

toasterson changed title from ~~[WIP] Reconcile owned native service networking and worker storage~~ to Reconcile owned native service networking and worker storage

2026-10-02 19:14:31 +00:00

toasterson merged commit ed5c1f3af0 into main

2026-10-03 02:51:26 +00:00

toasterson referenced this pull request from a commit

2026-10-03 02:51:27 +00:00

Merge pull request 'Reconcile owned native service networking and worker storage' (#6) from codex/owned-networking-20261001 into main

Rows
Columns

Reconcile owned native service networking and worker storage #6