operator: follow-ups from the review of #494
Maintainers usually reply within 1 day
Nobody has claimed this yet.
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 68/100
- Issue type
- Refactor
- Clarity
- Clearly specified
- Activity status
- Active
- Tech stack
- rust
- Domain
- backend, documentation, security
Research direction
Start in crates/operator/src/controller/grid_network.rs around lines 3082 and 3101: compute remote eligibility once before the gateway loop, build peer_catalog from it, and clone only where an owned copy is needed. Then update docs/architecture/consumer-config.md around line 239 to state that gridNetworkRef and spec.endpoint are self-asserted and that RBAC on InferenceProvider create is the trust control. Done when the operator code no longer repeats the computation and the doc makes the local-provider trust model explicit.
Written by the indexing model from the issue text.
Description
Follow-ups from review of #494 that did not block it. Line numbers are at 46f5cf20.
-
Compute remote eligibility once per reconcile.
filter_eligible_remote_crdt_providersdoes not depend on the gateway, butcrates/operator/src/controller/grid_network.rscalls it once forpeer_catalog(around line 3082) and again inside the per-gateway loop (around line 3101), cloning the result each time. Compute it once before the loop, buildpeer_catalogfrom it, and clone per gateway only where an owned copy is needed. -
Name the trust control for local providers.
docs/architecture/consumer-config.md(around line 239) says a local candidate derives from anyInferenceProviderof the network on this cluster, and that creating one takes cluster RBAC. Say it outright:gridNetworkRefandspec.endpointare self-asserted, so anyone who can create anInferenceProvidercan add an upstream the generated gateway dials, and RBAC onInferenceProvidercreate is the control. The ambiguous-identity refusal covers only a clash with an existing identity, not a new one.
- Dominant language
- Rust
- Stars
- 10
- Forks
- 24
- Avg merge
- 1d 12h
- Merged PRs (30d)
- 155
Getting set up
- No Dockerfile or Docker Compose file
- No pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from praxis-proxy/grid
-
area/security triage/accepted
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
praxis-proxy/grid#504 · 1 comment ·
Maintainers usually reply within 1 day
-
area/security epic triage/accepted
Difficulty 5/5 Over a week Newbie friendliness 10/100
praxis-proxy/grid#508 ·
Maintainers usually reply within 1 day
-
area/security triage/accepted
Difficulty 4/5 3-5 days Newbie friendliness 45/100
praxis-proxy/grid#507 · 1 comment ·
Maintainers usually reply within 1 day
-
area/security triage/accepted
Difficulty 4/5 3-5 days Newbie friendliness 45/100
praxis-proxy/grid#506 · 1 comment ·
Maintainers usually reply within 1 day
-
area/security triage/accepted
Difficulty 3/5 1-2 days Newbie friendliness 70/100
praxis-proxy/grid#505 · 1 comment ·
Maintainers usually reply within 1 day
All issues in praxis-proxy/grid
Similar issues
-
bug duplicate enhancement priority: low ui
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
storytold/pdfcraft#5594 · 1 comment ·
Maintainers usually reply within 1 day
-
documentation good first issue help wanted
Difficulty 2/5 1-3 hours Newbie friendliness 86/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 68/100
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 85/100
open-jarvis/OpenJarvis#1212 ·
Maintainers usually reply within 4 days
-
bug good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
CakeRepository/agentshangout#38 ·
Maintainers usually reply within 1 day