* fix: pass node_condition_prefix to backend-worker deployment (#448) * #148 - Add user mapping into OSMO (#418) * Sync main into feature/PROJ-148-user-mapping (#375) * fix: update extraArgs to render string properly (#362) * Remove auth router in agent service (#371) * Various fixes to stabilize GitHub actions on self-hosted nodes (#366) * Add subagents to help debug CI * Pin digests in Github actions * Add safe Bazel and workspace cleanup to ci-internal Add filesystem cleanup steps that don't interfere with concurrent jobs. Testcontainers handles Docker resource cleanup automatically via ryuk. Changes: - Add Bazel cache cleanup to prevent unbounded local cache growth - Add workspace cleanup for pytest and temporary files - Keep concurrency control per PR - Rely on Testcontainers for Docker resource cleanup Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * Add 30-minute timeout to ci-internal job Prevent jobs from running indefinitely if tests hang. 30 minutes provides sufficient time for normal test execution while ensuring hung jobs don't block the runner. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * Use bazel clean --expunge to prevent unbounded cache growth Change from 'bazel clean' to 'bazel clean --expunge' to remove repository cache in addition to build outputs. This prevents unbounded growth of external dependencies on self-hosted runners. Uses synchronous --expunge (not --expunge_async) since we're in a Docker container that will terminate after the job completes. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * Add resource limits to Docker-in-Docker service Limit DinD service to 4GB memory and 2 CPUs to prevent runaway resource consumption and OOM conditions on self-hosted runners. These limits provide sufficient resources for Testcontainers while leaving headroom for the main job container and preventing memory leaks from exhausting runner resources. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> * Tune Bazel CI config * Testcontainers resource limit * Clean up testcontainers networkedcontainer list * Shutdown bazel at the end of job * Close docker client in test utils * SandboxedWorker shutdown in tests * Add docker clean up * Add clean up * Add node dep * Add docker deps * Use the right image * Tune bazel in CI * Remove golang.org/x/crypto from root module * Pylint suppress * Fix redis closure in tests * Fix jinja_sandbox test * Clean up in jinja_sandbox test * Fix jinja_sandbox test and lint * Enhance cleanup * Fix pr-checks yaml --------- Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> --------- Co-authored-by: Vivian Pan <vivianp@nvidia.com> Co-authored-by: RyaliNvidia <ryali@nvidia.com> Co-authored-by: Fernando L <fernandol@nvidia.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * #294 #295 - Add user table and user-role mapping (#373) --------- Co-authored-by: Vivian Pan <vivianp@nvidia.com> Co-authored-by: Fernando L <fernandol@nvidia.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> * #339 - Add documentation for creating PAT and service accounts (#395) * Rename pat (#428) * #403 - Set optional default admin during service creation + fix PAT wording (#404) * use base64 for access tokens (#437) * Merge main into feature (#441) * Support Non-AWS S3 storage without environment variables (#421) * Add override_url to data credentials and remove cache_config * Update local run and quickstart * Make sure local dev works * Revert unnecessary changes * Update from workflows/ to cookbook/ (#419) * Update from workflows/ to cookbook/ * Update README * Update links from workflows/ to cookbook/ * Update paths * Update README * Revert to pass link test * Update links to cookbook instead of workflows in Github (#432) * Update links to cookbook instead of workflows in Github * Update more links --------- Co-authored-by: Fernando L <fernandol@nvidia.com> Co-authored-by: ethany-nv <ethany@nvidia.com> * Modify profile list api to show role info (#442) --------- Co-authored-by: OSMO CI Bot <255188861+svc-osmo-ci@users.noreply.github.com> Co-authored-by: Vivian Pan <vivianp@nvidia.com> Co-authored-by: Fernando L <fernandol@nvidia.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> Co-authored-by: ethany-nv <ethany@nvidia.com> * Add override_url when forwarding default_credential to StaticDataCredential (#444) * Oauth2 proxy design (#436) * design for oauth2 proxy * format * update design after POC * update format * update design per envoy / UI changes * #356 - Group Template Implementation (#454) - Add group templates as a new type of config - Allow group templates to be assigned to pools - When a workflow is submitted, group templates will be instantiated per group, and when it is completed, they will be destroyed - Cleanup logic for creating kubernetes objects in the backend by using kubernetes dynamic client. * Client install location is determined by service (#447) * Revert "Remove auth router in agent service (#371)" (#390) This reverts commit fac90f2. * dupe * remove --------- Co-authored-by: tdewanNvidia <tdewan@nvidia.com> Co-authored-by: OSMO CI Bot <255188861+svc-osmo-ci@users.noreply.github.com> Co-authored-by: Vivian Pan <vivianp@nvidia.com> Co-authored-by: Fernando L <fernandol@nvidia.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> Co-authored-by: ethany-nv <ethany@nvidia.com> Co-authored-by: ecolternv <ecolter@nvidia.com>

Group Templates Implementation #356

Description

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions