feat: bound supervisor drain termination

This commit is contained in:
Josh Creek
2026-09-01 09:18:19 +01:00
parent e7c835af52
commit 58508bd87c
4 changed files with 108 additions and 3 deletions
+3 -2
View File
@@ -150,8 +150,9 @@ product policy are in [`docs/MATCHMAKING.md`](docs/MATCHMAKING.md).
requests/limits and node density from measurements plus 30% headroom.
- [ ] Add 30 s no-show handling, Go PID-1 TERM/drain supervision, PDB/Fleet
drain, signed result annotation/retry, RPO <=5 m and RTO <=30 m. The Go
drain boundary is now authenticated and loopback-only, and the base PDB
protects the two-Ready floor; lifecycle/PDB/Fleet integration remains.
supervisor now owns bounded drain-before-kill orchestration, the drain
boundary is authenticated and loopback-only, and the base PDB protects the
two-Ready floor; lifecycle/PDB/Fleet integration remains.
- [ ] Rehearse migration only after the second provider's EU/NA locations have
Valve approval, POP/certs, public UDP/firewall and coordinator trust.