homelab-frontend

Author	SHA1	Message	Date
Admin Bot	da361f2a21	fix(sessions): nil map panic in updateSandboxSummary goroutine CI / CI (pull_request) Successful in 2m24s Details r.Context() is cancelled when HTTP handler returns; fetchEntitySummary returns nil on cancelled context. Two fixes: 1. Detached request with context.Background() for the goroutine call 2. Nil guard on current before map assignment	2026-09-29 16:10:43 +08:00
Admin Bot	1e17706367	feat(sessions): SandboxFleet integration — fleet controller primary, SandboxManager fallback FleetClient calls tool-definition-controller:8788 /sessions/{id}/assign as the primary sandbox create path. Falls back to direct k8s SandboxManager if fleet controller is unreachable. handleSandboxCreate: 1. fleet.Assign() → podSvcDns from pre-warmed fleet pod (fast, no wait) 2. fallback: sandbox.CreateOrResume() → dedicated pod (slow, 30s wait) handleSandboxDelete: fleet.Release() + sandbox.Delete() both run (non-fatal). updateSandboxSummary: extracted helper, updates session memory_entity with pod_name / svc_dns / last_active_at. NetworkPolicy: added port 8788 to poimen egress (fleet controller REST API). Response adds fleet:true field when served by fleet.	2026-09-29 16:10:43 +08:00
rock	49c9071a59	Merge pull request 'feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4)' (#60 ) from feat/sessions-sandbox-manager into main CI / CI (push) Successful in 3m22s Details	2026-09-28 14:02:53 +00:00
Admin Bot	16ddd6d4ad	feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4) CI / CI (pull_request) Successful in 2m8s Details New X-Resource: sandbox on X-Service: sessions POST ?session_id= → CreateOrResume 1. Ensure PVC workspace-session-<id> (Longhorn 1Gi) 2. If pod already Running → return DNS (resume path, idempotent) 3. Ensure pi-session-sandbox NetworkPolicy (shared, created once) 4. Create Pod pi-session-<id> + Service pi-session-<id>:8787 5. Wait up to 30s for Pod Ready 6. Fire-and-forget: merge pod_name/pvc_name/svc_dns/last_active_at into session memory_entity summary DELETE ?session_id= → delete Pod + Service + PVC Idle reaper goroutine (5min interval, configurable via SANDBOX_REAPER_INTERVAL_MINUTES): lists pi-session-* pods, deletes Succeeded/Failed ones, preserves PVCs for resume. Security: runAsNonRoot/1000, readOnlyRootFilesystem, drop ALL caps, RuntimeDefault seccomp, automountServiceAccountToken:false. Resources: 500m/512Mi req, 1/1Gi limit. NetworkPolicy: egress → DNS + api:8080 only; ingress ← poimen-frontend. RBAC: Role session-sandbox-manager + RoleBinding in poimen ns. 7 unit tests — all pass (mock k8s server). Image: forgejo.riotpiao.com/riotpiao-poimen/poimen-pi-session-runtime:latest	2026-09-28 19:53:37 +08:00

Compare commits

Diff Content Not Available