didericis
cc4e29c3da
Mirror the Gateway work for the control plane. Add the backend-neutral `Orchestrator` service ABC in orchestrator/lifecycle.py — build the image/rootfs, `ensure_running` (start + health-gate), `is_running`/`is_healthy`/`stop`, `url()` (host-facing) vs `gateway_url()` (what the gateway resolves against), and a concrete `mint_gateway_token()` (the orchestrator holds the signing key, so it issues the gateway's token — #469). `DockerOrchestrator` (backend/docker/orchestrator.py) is the first impl, extracted out of `DockerInfraService`: the control-plane container run, the `--internal` control network, the source-hash recreate gate, health polling, and the orchestrator constants (name/label/network/image/dockerfile/hash-label). `DockerInfraService` now composes `orchestrator()` + `gateway()` — each builds its own image via `ensure_built`, the orchestrator comes up first, then the gateway is connected with the orchestrator-minted token. Its `url`/`is_healthy` delegate to the orchestrator service. Split the container-lifecycle tests into test_docker_orchestrator; test_docker_infra now covers the composition. macOS + firecracker follow. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
107 lines
3.7 KiB
Python
107 lines
3.7 KiB
Python
"""Per-host orchestrator service (PRD 0070).
|
|
|
|
A single persistent per-host service that will run the gateway functions
|
|
(egress / git-gate / supervise), coordinate with the console, and broker
|
|
agent launches. This package is being built bottom-up, starting with the
|
|
backend-neutral "consolidation core" that needs no VM packaging:
|
|
|
|
* `store.registry_store` — the SQLite runtime-state store + fail-closed
|
|
attribution (source IP + per-bottle identity token).
|
|
* `broker` — the signed, structured launch-request contract + a
|
|
`LaunchBroker` (stub for the harness) that verifies
|
|
provenance before acting.
|
|
* `gateway` — the consolidated per-host gateway: the `Gateway`
|
|
lifecycle contract (idempotent singleton). One
|
|
gateway shared by all bottles instead of one per
|
|
bottle; backend impls live under `backend/*/gateway`.
|
|
* `service` — the `OrchestratorCore`: owns the registry, brokers the
|
|
launch lifecycle (launch/teardown), manages the
|
|
shared gateway, attributes.
|
|
* `server` — the HTTP control-plane RPC (launch / teardown /
|
|
list / attribute / gateway / health).
|
|
|
|
The actual backend-native launch (a real docker/firecracker broker) and
|
|
the egress/git/supervise data plane land in later slices once this core is
|
|
proven (see the PRD sequencing: plain-process dev-harness -> docker
|
|
orchestrator -> firecracker).
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import TYPE_CHECKING, Any
|
|
|
|
if TYPE_CHECKING:
|
|
from .store.registry_store import BottleRecord, RegistryStore, new_identity_token
|
|
from .broker import (
|
|
BrokerAuthError,
|
|
LaunchBroker,
|
|
LaunchRequest,
|
|
StubBroker,
|
|
sign_request,
|
|
verify_request,
|
|
)
|
|
from .docker_broker import DockerBroker, DockerBrokerError
|
|
from ..gateway import Gateway, GatewayError
|
|
from .lifecycle import Orchestrator
|
|
from .service import OrchestratorCore
|
|
from .server import OrchestratorServer, dispatch, make_server
|
|
|
|
|
|
# Facade name -> submodule that defines it. Lazy so importing a leaf (or the
|
|
# parent package, e.g. via `orchestrator.store.store_manager`) doesn't drag the
|
|
# whole orchestrator — server, docker_broker + the docker backend, http — while
|
|
# `from bot_bottle.orchestrator import RegistryStore` keeps working.
|
|
_LAZY: dict[str, str] = {
|
|
"BottleRecord": ".store.registry_store",
|
|
"RegistryStore": ".store.registry_store",
|
|
"new_identity_token": ".store.registry_store",
|
|
"BrokerAuthError": ".broker",
|
|
"LaunchBroker": ".broker",
|
|
"LaunchRequest": ".broker",
|
|
"StubBroker": ".broker",
|
|
"sign_request": ".broker",
|
|
"verify_request": ".broker",
|
|
"DockerBroker": ".docker_broker",
|
|
"DockerBrokerError": ".docker_broker",
|
|
"Gateway": "..gateway",
|
|
"GatewayError": "..gateway",
|
|
"Orchestrator": ".lifecycle",
|
|
"OrchestratorCore": ".service",
|
|
"OrchestratorServer": ".server",
|
|
"dispatch": ".server",
|
|
"make_server": ".server",
|
|
}
|
|
|
|
|
|
def __getattr__(name: str) -> Any:
|
|
src = _LAZY.get(name)
|
|
if src is None:
|
|
raise AttributeError(f"module {__name__!r} has no attribute {name!r}")
|
|
from importlib import import_module
|
|
|
|
value = getattr(import_module(src, __name__), name)
|
|
globals()[name] = value
|
|
return value
|
|
|
|
|
|
__all__ = [
|
|
"BottleRecord",
|
|
"RegistryStore",
|
|
"new_identity_token",
|
|
"BrokerAuthError",
|
|
"LaunchBroker",
|
|
"LaunchRequest",
|
|
"StubBroker",
|
|
"sign_request",
|
|
"verify_request",
|
|
"DockerBroker",
|
|
"DockerBrokerError",
|
|
"Gateway",
|
|
"GatewayError",
|
|
"Orchestrator",
|
|
"OrchestratorCore",
|
|
"OrchestratorServer",
|
|
"dispatch",
|
|
"make_server",
|
|
]
|