From 956210ea06224f7c6cd3e5082a96d3f80039404b Mon Sep 17 00:00:00 2001 From: Ruben Fiszel Date: Thu, 6 Aug 2026 12:01:12 +0200 Subject: [PATCH] feat: improve duckdb isolation (#10565) * [ee] feat: improve duckdb isolation Co-Authored-By: Claude Opus 4.8 * chore: update ee-repo-ref to c4e6cbc1a1efeca5b71920c7903db2347d0eeda0 This commit updates the EE repository reference after PR #713 was merged in windmill-ee-private. Previous ee-repo-ref: f630f7e73cb863e312430738d81d802a3971f7cd New ee-repo-ref: c4e6cbc1a1efeca5b71920c7903db2347d0eeda0 Automated by sync-ee-ref workflow. --------- Co-authored-by: Claude Opus 4.8 Co-authored-by: windmill-internal-app[bot] --- backend/ee-repo-ref.txt | 2 +- backend/windmill-worker/src/duckdb_executor.rs | 4 ++++ backend/windmill-worker/src/lib.rs | 2 ++ 3 files changed, 7 insertions(+), 1 deletion(-) diff --git a/backend/ee-repo-ref.txt b/backend/ee-repo-ref.txt index c882e591c0..326eea2e7b 100644 --- a/backend/ee-repo-ref.txt +++ b/backend/ee-repo-ref.txt @@ -1 +1 @@ -c1665a881b61616f96ffe7702b44840905304660 +c4e6cbc1a1efeca5b71920c7903db2347d0eeda0 diff --git a/backend/windmill-worker/src/duckdb_executor.rs b/backend/windmill-worker/src/duckdb_executor.rs index ce9784331c..e91a1957c6 100644 --- a/backend/windmill-worker/src/duckdb_executor.rs +++ b/backend/windmill-worker/src/duckdb_executor.rs @@ -1597,6 +1597,10 @@ pub async fn do_duckdb( ) .await?; + #[cfg(feature = "private")] + let query_block_list = + crate::duckdb_isolation_ee::apply_duckdb_isolation(query_block_list)?; + let base_internal_url = client.base_internal_url.clone(); let w_id = job.workspace_id.clone(); let job_dir = job_dir.to_string(); diff --git a/backend/windmill-worker/src/lib.rs b/backend/windmill-worker/src/lib.rs index 8cb0551254..e3e7868548 100644 --- a/backend/windmill-worker/src/lib.rs +++ b/backend/windmill-worker/src/lib.rs @@ -43,6 +43,8 @@ mod deno_executor; mod docker_v2; #[cfg(feature = "duckdb")] mod duckdb_executor; +#[cfg(all(feature = "duckdb", feature = "private"))] +mod duckdb_isolation_ee; mod global_cache; mod go_executor; mod graphql_executor;