Skip to content

fix(chaos): harden k8s backend — supervise port-forward, guard fixture dir - #2346

Open
akshaychitneni wants to merge 1 commit into
apache:mainfrom
akshaychitneni:fix/harden-k8s-chaos-backend
Open

fix(chaos): harden k8s backend — supervise port-forward, guard fixture dir#2346
akshaychitneni wants to merge 1 commit into
apache:mainfrom
akshaychitneni:fix/harden-k8s-chaos-backend

Conversation

@akshaychitneni

@akshaychitneni akshaychitneni commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

Follow-ups from #2244:

  • Supervise the scheduler kubectl port-forward: a background task restarts it on exit and captures its stderr for dump_diagnostics, so a scheduler-pod restart or a transient apiserver/idle drop self-heals instead of leaving a permanently dead relay.
  • Guard CHAOS_FIXTURE_DIR before clearing it: refuse '/' or $HOME, and any non-empty directory the harness did not create (marker file), so a stray env var cannot turn the clear into a recursive delete.

Which issue does this PR close?

Closes #. #2302

Rationale for this change

What changes are included in this PR?

Are there any user-facing changes?

…e dir

Follow-ups from apache#2244 (closes apache#2302):
- Supervise the scheduler kubectl port-forward: a background task restarts it
  on exit and captures its stderr for dump_diagnostics, so a scheduler-pod
  restart or a transient apiserver/idle drop self-heals instead of leaving a
  permanently dead relay.
- Guard CHAOS_FIXTURE_DIR before clearing it: refuse '/' or $HOME, and any
  non-empty directory the harness did not create (marker file), so a stray env
  var cannot turn the clear into a recursive delete.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant