feat(sandbox-manager): support auto-resume (wake-on-traffic) sandboxes#495
feat(sandbox-manager): support auto-resume (wake-on-traffic) sandboxes#495AiRanthem wants to merge 6 commits into
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
Codecov Report❌ Patch coverage is Additional details and impacted files@@ Coverage Diff @@
## master #495 +/- ##
==========================================
+ Coverage 79.37% 79.91% +0.54%
==========================================
Files 189 194 +5
Lines 13308 13776 +468
==========================================
+ Hits 10563 11009 +446
- Misses 2365 2379 +14
- Partials 380 388 +8
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Persist the wake-on-traffic configuration on Sandbox CRs from E2B create and keep it synchronized with timeout updates. Add the AutoResume wire field, timeout annotation mutation support, validation for autoResume without autoPause, and focused tests for the manager and E2B surfaces. Also carries the initial wake-on-traffic design spec so reviewers can evaluate the persisted configuration contract alongside the implementation. Signed-off-by: AiRanthem <zhongtianyun.zty@alibaba-inc.com>
Introduce the cluster-scoped system key, route-level system auth scope, and cross-owner connect path used by the gateway. Thread AllowAnyOwner through the manager lookup path while keeping normal API-key ownership checks unchanged. System callers receive no sandbox access token and get gateway-retryable wake failures mapped to HTTP 409; connect not-found behavior is mapped to 404. Signed-off-by: AiRanthem <zhongtianyun.zty@alibaba-inc.com>
Add the gateway-side wake package, manager connect client, system-key reader, route WakeOnTraffic propagation, refresh behavior for paused routes, and async filter wake gate. The filter waits for the registry to observe Running before forwarding the original request and maps wake failures to local 502 responses. Also shares the wake-on-traffic timeout codec with the E2B manager path and folds in review-driven fixes for system-key readiness, route refresh updates, and the design spec. Signed-off-by: AiRanthem <zhongtianyun.zty@alibaba-inc.com>
Signed-off-by: AiRanthem <zhongtianyun.zty@alibaba-inc.com>
Signed-off-by: AiRanthem <zhongtianyun.zty@alibaba-inc.com>
f0115c0 to
e2cea07
Compare
|
@AiRanthem: PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository. |
Summary
Test Plan