harden exec, log sessions adn sqlite #814
Merged
Merged
Conversation
Enable WAL, busy_timeout, and NORMAL synchronous pragmas on connect. Add withDbBusyRetry for task claims and improve SQLITE_BUSY detection in the transaction decorator and NATS reconcile claim path.
Introduce FogPlatformSpecs, FogPlatformStatuses, FogPlatformReconcileTasks, ServicePlatformReconcileTasks, and HubRouterConfigLocks with Sequelize models, managers, deduplicated enqueue, and stale task reclaim.
Extract router/NATS lifecycle into FogPlatformService with full recompute of service-derived TCP bridges. Add ServicePlatformService for hub connector/listener, K8s Service lifecycle, ConfigMap lock, and fog fan-out.
Run fog and service reconcile claims in one worker with backoff and max attempts. Add periodic drift sweep and delay reconcile-heavy jobs on boot to reduce SQLite lock contention on single-controller deployments.
…PIs. Enqueue fog and service reconcile tasks on create, update, and delete. Add spec fallback for router/nats modes, platformStatus on fog GET, manual reconcile endpoints, and agent warning gating during non-Ready phases.
Add platformStatus, provisioningStatus hub semantics, reconcile routes, and architecture overview for the three-layer reconcile model.
…c_b lifecycle. Enforce connection limits and fresh DB transactions on close, add HA AMQP fail-fast, 30s SIGTERM drain, stale session reconcile job, batched log session queries, and OTEL metrics.
Replace callback-based db.run/db.close with sqliteRun/sqliteClose and reliable rollback on failure.
… tests. Cover same-replica pairing, mock AMQP cross-replica relay, RBAC and rate limits, session quotas and timeouts, graceful drain, and a 500-pair load probe script.
Add architecture HA section, ws-sessions operations guide, and changelog entry for session hardening.
Scrub phase labels from Dockerfile, PKI guide, RBAC reference, rbac-audit script, and OIDC test README.
…ning Controller/16 ws exec log hardening
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.