feat: protect game fleet during voluntary disruption

This commit is contained in:
Josh Creek
2026-08-31 22:01:18 +01:00
parent 72d4a604c2
commit 52a96de8d6
5 changed files with 28 additions and 3 deletions
+2 -2
View File
@@ -141,8 +141,8 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
requests/limits and node density from measurements plus 30% headroom.
- [ ] Add 30 s no-show handling, Go PID-1 TERM/drain supervision, PDB/Fleet
drain, signed result annotation/retry, RPO <=5 m and RTO <=30 m. The Go
drain boundary is now authenticated and loopback-only; lifecycle/PDB/Fleet
integration remains.
drain boundary is now authenticated and loopback-only, and the base PDB
protects the two-Ready floor; lifecycle/PDB/Fleet integration remains.
- [ ] Rehearse migration only after the second provider's EU/NA locations have
Valve approval, POP/certs, public UDP/firewall and coordinator trust.