mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-21 06:11:31 +08:00
Roland HussandDrew Newberry
8dc55e21ee
* feat(sdk/go): complete Go SDK with domain clients, auth, and hardening Add the Go SDK implementation covering all gateway RPC services with domain-typed clients, comprehensive OIDC authentication flows, fake test doubles, and proto converters. Domain clients: Sandbox, Provider, Exec, File, TCP, SSH, Policy, Profile, Health, Service, Config, Workspace, Inference, Refresh. Each client validates inputs, resolves sandboxes by name, and converts between domain types and proto at the boundary. Auth: OIDC authorization code (PKCE), device code (RFC 8628), and client credentials (RFC 6749 Section 4.4) flows with gateway config auto-resolution. Token refresh with singleflight deduplication and exponential backoff. Edge tunnel proxy for gRPC-over-WebSocket. Gateway: On-disk gateway discovery with user/system directory precedence, lazy token loading, and auth mode mapping. Testing: In-memory fake client with deep-copy isolation, watch broadcasting with filtering, and workspace-scoped object stores. Bufconn-based gRPC tests for all domain clients. Ref: #2044 Signed-off-by: Roland Huß <rhuss@redhat.com> * feat(sdk/go): add gateway client options for logger, timeout, and retry Add WithLogger, WithTimeout, and WithRetryPolicy options to the gateway package's NewClient function. These forward the corresponding Config fields (Logger, Timeout, RetryPolicy) through to the underlying SDK client, giving callers full control over observability, connection timeouts, and retry behavior when constructing clients from on-disk gateway configurations. Also adds RetryPolicy type to types package and extends Config with the three new fields. * fix(mise): sync sccache lock entry Signed-off-by: Drew Newberry <anewberry@nvidia.com> --------- Signed-off-by: Roland Huß <rhuss@redhat.com> Signed-off-by: Drew Newberry <anewberry@nvidia.com> Co-authored-by: Drew Newberry <anewberry@nvidia.com>
38 lines
1.1 KiB
Go
38 lines
1.1 KiB
Go
// SPDX-FileCopyrightText: Copyright (c) 2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
// SPDX-License-Identifier: Apache-2.0
|
|
|
|
package v1
|
|
|
|
import (
|
|
"context"
|
|
"io"
|
|
|
|
"github.com/NVIDIA/OpenShell/sdk/go/openshell/v1/types"
|
|
)
|
|
|
|
// SSHSession represents an SSH session created for a sandbox.
|
|
type SSHSession = types.SSHSession
|
|
|
|
// tunnelConfig accumulates options for the Tunnel method.
|
|
type tunnelConfig struct {
|
|
serviceID string
|
|
}
|
|
|
|
// TunnelOption configures an SSH tunnel opened via [SSHInterface.Tunnel].
|
|
type TunnelOption func(*tunnelConfig)
|
|
|
|
// WithTunnelServiceID sets an optional service identifier on the tunnel's
|
|
// init frame for audit and correlation purposes.
|
|
func WithTunnelServiceID(id string) TunnelOption {
|
|
return func(c *tunnelConfig) {
|
|
c.serviceID = id
|
|
}
|
|
}
|
|
|
|
// SSHInterface defines operations for managing SSH sessions.
|
|
type SSHInterface interface {
|
|
CreateSession(ctx context.Context, workspace, sandboxID string) (*SSHSession, error)
|
|
RevokeSession(ctx context.Context, workspace, token string) (bool, error)
|
|
Tunnel(ctx context.Context, workspace, sandboxName string, port uint32, opts ...TunnelOption) (io.ReadWriteCloser, error)
|
|
}
|