Skip to content

Cluster-wide rooms the platform holds - #43

Merged
vitramir merged 2 commits into
mainfrom
workloads-room
Aug 11, 2026
Merged

vitramir merged 2 commits into
mainfrom
workloads-room

Conversation

@vitramir

Copy link
Copy Markdown
Contributor

Adds agent_instances, sandboxes and workloads — flat, platform-only rooms — plus verification of a platform caller against admin on cluster:global rather than trusting the x-identity-type header.

A derived room set cannot be made correct for a cluster-wide reconciler: the event announcing a resource in an organization it has not enumerated goes to a room it does not hold, and these are Redis pub/sub with no replay.

Identity-keyed rooms stay closed to the platform — instance_inbox:, thread_participant:, sandbox_owner:.

Spec: Notifications — Cluster-wide rooms

Third of the cluster-wide rooms, for the same reason as the other two:
the Orchestrator reconciles every workload there is and cannot
subscribe per workload without racing the creation of the next one.
DevSpace validates command and pipeline names against
^[a-z0-9][a-z0-9-]*[a-z0-9]$ and refuses the whole file when one
carries a colon, so `devspace dev` failed before it did anything.

The probes go too, or nothing ever starts: DevSpace waits for the pod
to be ready before it syncs, the container waits for the sync before it
listens, and the liveness probe kills it at 40s -- so the sync it is
waiting for never arrives. The agents chart already nulls both.
@vitramir
vitramir merged commit f522b4d into main Aug 11, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant