ced4568
a8e543234c
- Real server-side pagination (platform/api/src/pagination.js) on the audit log (was a flat LIMIT 200), student attempt history (was LIMIT 100), and assessment session history (was fully unbounded - the one genuine growth risk found). Frontend updated (AuditView, AssessmentsView, StudentsView). - Admission control: resource-policy.yaml's new (disabled-by-default) admission_control.max_concurrent_labs, checked before touching Docker at all, returns a clean 503 CAPACITY_EXCEEDED instead of failing mid-provision. Relayed as a clean student-facing message, never a raw 500. New GET /capacity endpoint feeds the instructor dashboard. - cohort_instructors.role_in_cohort (existed since Phase 2B, never read) is now enforced: teacher vs viewer, rbac.js's requireCohortWriteAccess/requireStudentCohortWriteAccess. - GET /api/version - app version, deployed Git SHA, latest migration as a schema-version stand-in. - Structured assessment authoring UI (AssessmentsView.jsx's PoolSpecEditor) replaces the raw-JSON pool_spec textarea, backed by a new GET /api/admin/scenario-catalog endpoint. Owner-only raw-JSON fallback remains for anything the structured editor doesn't cover. - NEEDS_ATTENTION_FAIL_THRESHOLD/STALE_DAYS moved to env-var configuration. Full regression suite (e2e-phase2a/2b/3a/3b, 67/67) re-run clean after these changes; frontend production build confirmed clean.
32 lines
1.6 KiB
YAML
32 lines
1.6 KiB
YAML
# Phase 1 resource policy — config-driven, not hard-coded (decision #4).
|
|
# No specific production numbers chosen yet; target host class for planning is ~16 cores/32
|
|
# threads, 128GB RAM, SSD/NVMe. Actual per-lab limits get set by benchmarking (see
|
|
# docs/PHASE1_PLATFORM_FOUNDATION.md §8 test 9), not guessed backward from the spec sheet.
|
|
# These defaults are sized for local single-machine Phase 1 dev/testing only.
|
|
|
|
default:
|
|
cpu_limit: 2.0 # vCPUs
|
|
mem_limit_mb: 4096
|
|
pids_limit: 512
|
|
storage_limit_mb: 8192 # only enforced if the host's Docker storage driver supports
|
|
# --storage-opt size= (see known-limitations in the SOP)
|
|
|
|
idle_threshold_minutes: 30 # past this: log a warning event only
|
|
abandoned_threshold_minutes: 120 # past this: reaper destroys for real
|
|
|
|
reaper_poll_interval_seconds: 60
|
|
|
|
health_check:
|
|
path: /api/health
|
|
timeout_ms: 240000 # k3s cold start in a nested container can be slow — matches the
|
|
# ~60-attempt wait already in scripts/entrypoint.sh
|
|
|
|
# Phase 4.1 §26 — admission control. Disabled (no cap) by default, on purpose: don't fabricate
|
|
# a concurrency number before it's measured against the real host (docs/CAPACITY_PLANNING.md).
|
|
# Set max_concurrent_labs from infra/scripts/capacity-model.js's real hard-admission-control
|
|
# output once the production host exists, so a full host rejects new Labs cleanly (503, "Lab
|
|
# capacity is temporarily full") instead of failing mid-provision once Docker itself runs out
|
|
# of room.
|
|
# admission_control:
|
|
# max_concurrent_labs: null
|