Skip to content

feat(control): implement control api access over idm #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
azenla wants to merge 4 commits into
base: main
Choose a base branch
from
Draft

feat(control): implement control api access over idm #13

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
adbe2e1
feat(control): implement control api access over idm
azenla Dec 19, 2025
4b8dc08
feat(control): introduce resource origin apis
azenla Dec 23, 2025
bfb1bdb
implement basic control snoop support
azenla Dec 25, 2025
99f7886
add user agent field to ResourceOrigin
azenla Dec 25, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 18 additions & 0 deletions protect/control/v1/common.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,10 +5,17 @@ package protect.control.v1;
import "google/protobuf/struct.proto";
import "google/protobuf/timestamp.proto";

message ResourceOrigin {
string zone_id = 1;
string workload_id = 2;
string user_agent = 3;
}

message Zone {
string id = 1;
ZoneSpec spec = 2;
ZoneStatus status = 3;
ResourceOrigin origin = 4;
}

message ZoneSpec {
Expand All @@ -25,6 +32,16 @@ message ZoneSpec {
ZoneVirtualizationOptionsSpec virtualization_options = 9;
ZoneScratchDiskSpec scratch_disk = 10;
repeated OciImageSpec addons = 11;
ZoneControlApiSpec control_api = 12;
}

enum ZoneControlApiAccess {
ZONE_CONTROL_API_ACCESS_DENY = 0;
ZONE_CONTROL_API_ACCESS_ALLOW = 1;
}

message ZoneControlApiSpec {
ZoneControlApiAccess access = 1;
}

enum ZoneResourceAdjustmentPolicy {
Expand Down Expand Up @@ -386,6 +403,7 @@ message Workload {
string id = 1;
WorkloadSpec spec = 2;
WorkloadStatus status = 3;
ResourceOrigin origin = 4;
}

enum HostCpuTopologyClass {
Expand Down
25 changes: 25 additions & 0 deletions protect/control/v1/control.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,7 @@ import "protect/control/v1/common.proto";
service ControlService {
rpc GetHostStatus(GetHostStatusRequest) returns (GetHostStatusReply);
rpc SnoopIdm(SnoopIdmRequest) returns (stream SnoopIdmReply);
rpc SnoopControl(SnoopControlRequest) returns (stream SnoopControlReply);
rpc GetHostCpuTopology(GetHostCpuTopologyRequest) returns (GetHostCpuTopologyReply);

rpc ListDevices(ListDevicesRequest) returns (ListDevicesReply);
Expand Down Expand Up @@ -426,6 +427,30 @@ message SnoopIdmPacket {
bytes packet = 3;
}

message SnoopControlRequest {}

message SnoopControlReply {
repeated SnoopControlPacket packets = 1;
uint64 skipped = 2;
}

enum SnoopControlPacketForm {
SNOOP_CONTROL_PACKET_FORM_UNKNOWN = 0;
SNOOP_CONTROL_PACKET_FORM_REQUEST = 1;
SNOOP_CONTROL_PACKET_FORM_ERROR = 2;
SNOOP_CONTROL_PACKET_FORM_RESPONSE = 3;
}

message SnoopControlPacket {
uint64 id = 1;
ResourceOrigin origin = 2;
string service = 3;
string method = 4;
SnoopControlPacketForm form = 5;
string payload = 6;
bool closed = 7;
}

message PullImageRequest {
string image = 1;
OciImageFormat format = 2;
Expand Down