mirror of
https://github.com/agent-substrate/substrate.git
synced 2026-10-02 03:24:42 +08:00
Zoe Zhao
6d3afdd63b
This PR moves sandbox config selection from the WorkerPool to the ActorTemplate. The existing behavior is preserved while we are designing the upgrade: sandbox config still cannot be updated once set (ActorTemplates are create-only and `sandbox_config` is immutable). For now the ActorTemplate still *requires* `sandbox_config.config_name` — there is no resolution of the cluster default (`spec.default`). This is temporary while we figure out the defaulting design. - [ ] Tests pass - [x] Appropriate changes to documentation are included in the PR
40 lines
1.8 KiB
YAML
40 lines
1.8 KiB
YAML
# Copyright 2026 Google LLC
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Cluster-wide SandboxConfig for the gVisor (runsc) sandbox class, shipped with
|
|
# the platform so gVisor ActorTemplates have a config to name via
|
|
# sandboxConfig.configName. atelet fetches the gVisor release tarball
|
|
# (gvisor.tar.zstd: runsc plus the gvisor-bin/ helpers runsc requires next to
|
|
# it) matching the worker node's architecture and extracts it locally. To pin a
|
|
# different release, edit the assets below or create another SandboxConfig and
|
|
# name it from the ActorTemplate.
|
|
apiVersion: ate.dev/v1alpha1
|
|
kind: SandboxConfig
|
|
metadata:
|
|
name: gvisor-default
|
|
spec:
|
|
sandboxClass: gvisor
|
|
# The root sandbox container's image. On GCP, prefer the in-project mirror
|
|
# gcr.io/gke-release/pause@sha256:bcbd57ba5653580ec647b16d8163cdd1112df3609129b01f912a8032e48265da.
|
|
pauseImage: "registry.k8s.io/pause:3.10.2@sha256:f548e0e8e3dc1896ca956272154dde3314e8cc4fde0a57577ee9fa1c63f5baf4"
|
|
assets:
|
|
amd64:
|
|
gvisor:
|
|
url: "gs://gvisor/releases/nightly/2026-09-02/x86_64/gvisor.tar.zstd"
|
|
sha256: "d547d81401461fd1c679c5c4fa0a6c2b8ef7dc3c22ce23c9e25dcc4c69cfd06f"
|
|
arm64:
|
|
gvisor:
|
|
url: "gs://gvisor/releases/nightly/2026-09-02/aarch64/gvisor.tar.zstd"
|
|
sha256: "a64916f9813ce7e4841a30480a599337f7dda07b421c6bf0123db2212aa7d1df"
|