mirror of
https://github.com/stablyai/orca.git
synced 2026-11-14 01:47:24 +00:00
Neil
340c917429
* relay: edge export skip on sustained outage, evacuation drain sweep, account allow scoped by region - Leaving hosts skip the edge export once it has been unavailable for 120 s (ORCA_RELAY_EDGE_EXPORT_SKIP_AFTER_MS), keeping Postgres devices and fencing best effort, instead of 503ing until the edge is back. - Directors drain edge hosts that left the cohort (POST /__admin/drain, 20 per jittered 60 s tick) so connected desktops re-ask and move off. - Account-allowlisted hosts must also be in the edge regions. - Tests for the invite-socket edge branch. * relay: export skip needs continuous failures; evacuation sweep runs soon after start, then every 10 min Failures more than 30 s apart restart the unavailable clock, so one old failure cannot skip an export. The sweep reads the edge rows (cell_id has no index): first pass 45-75 s after start (a cohort change is a new revision), every 45-75 s while hosts are queued, else every 7.5-12.5 min.