77948ef56c
The per-agent companion container (the egress/git-gate/supervise data plane run once per bottle) is the pre-consolidation architecture. Remove it and disable the backends that still depend on it, per the #385 thread. - Delete `backend/docker/sidecar_bundle.py`; docker's live path uses the consolidated shared gateway, not a per-bottle bundle. - Disable the firecracker and macos-container backends: their `launch()` fails closed (they launched a per-bottle companion; firecracker's consolidated relaunch is #354, macos follows). Their `enumerate` return empty and `cleanup` drop the companion-container discovery (firecracker keeps VMM/run-dir cleanup). - Fail-close both backends' `egress_apply` reload (it signalled the per-bottle container); consolidated egress policy resolves per-request against the orchestrator, so gateway-side apply is a follow-up. - Rename `egress_sidecar_env_entries` → `egress_gateway_env_entries`, `SIDECAR_PORTS` → `GATEWAY_PORTS`. - Move the shared DockerBottlePlan fixture to `tests/unit/_docker_bottle_plan.py`; delete tests for the removed launch paths; update cleanup/egress-apply tests. Docker consolidated launch verified end-to-end (multitenant isolation integration test passes). macos/firecracker are intentionally disabled. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01WBMWTEtQdJ4W5UrWuLHCck
28 lines
936 B
Python
28 lines
936 B
Python
"""Host-side egress route-apply for the macos-container backend.
|
|
|
|
The per-bottle companion container this used to signal (`container kill
|
|
--signal HUP <container>`) was removed in the de-sidecar cleanup (#385),
|
|
along with the disabled macOS launch path. Fails closed until the macOS
|
|
backend grows the consolidated gateway.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
from ..egress_apply import EgressApplicator, EgressApplyError
|
|
|
|
|
|
class MacOSContainerEgressApplicator(EgressApplicator):
|
|
def _signal_bundle_reload(self, slug: str) -> None:
|
|
del slug
|
|
raise EgressApplyError(
|
|
"live egress route-apply was removed with the per-bottle "
|
|
"companion container (#385); the macos-container backend is "
|
|
"disabled until it uses the consolidated gateway."
|
|
)
|
|
|
|
|
|
applicator = MacOSContainerEgressApplicator()
|
|
|
|
|
|
__all__ = ["MacOSContainerEgressApplicator", "EgressApplyError", "applicator"]
|