deploysafety

type Effective struct {
	// SuccessThreshold is how many consecutive readiness passes a new
	// container needs before it may take traffic.
	SuccessThreshold int `json:"success_threshold"`
	// StableWindow is how long a new container must stay running, without
	// a restart or OOM kill, before it may take traffic.
	StableWindow time.Duration `json:"stable_window"`
	// DrainTimeout is the minimum time the previous release keeps serving
	// after cutover, so in-flight requests finish before it stops.
	DrainTimeout     time.Duration `json:"drain_timeout"`
	WatchWindow      time.Duration `json:"watch_window"`
	WatchMaxRestarts int           `json:"watch_max_restarts"`
	WatchErrorRate   float64       `json:"watch_error_rate"`
	WatchMinRequests int           `json:"watch_min_requests"`
	// AutoRollback is derived from WatchMode (auto).
	AutoRollback bool `json:"auto_rollback"`
	// WatchMode is off, notify or auto.
	WatchMode string `json:"watch_mode"`
	// WatchLatencyRatio trips the soft latency signal when the new
	// release's p95 reaches this multiple of the previous release's; 0
	// turns the signal off.
	WatchLatencyRatio float64 `json:"watch_latency_ratio"`
	// WatchLatencyMinDelta is the absolute p95 increase also required, so
	// a 4ms to 9ms move is never a regression.
	WatchLatencyMinDelta time.Duration `json:"watch_latency_min_delta"`
	// WatchSoftTicks is how many consecutive evaluations a soft signal must
	// hold before it counts.
	WatchSoftTicks int `json:"watch_soft_ticks"`
	// WatchSoftRollback lets a soft signal roll back (mode auto only);
	// otherwise it only notifies.
	WatchSoftRollback bool `json:"watch_soft_rollback"`
	// RollbackPins is how many past releases per app stay pinned.
	RollbackPins  int           `json:"rollback_pins"`
	WatchInterval time.Duration `json:"watch_interval"`
}

type ExitObservation struct {
	Running    bool
	OOMKilled  bool
	ExitCode   int
	StartedAt  time.Time
	FinishedAt time.Time
	// ObservedAt stands in for FinishedAt when the transport cannot report it.
	ObservedAt time.Time
}

type ExitVerdict struct {
	// Exited is true once the container stopped running.
	Exited bool
	// Failed is true when the exit is a failure for this workload.
	Failed  bool
	Reason  string
	Message string
	// Ran is how long the container ran, zero when unknown.
	Ran time.Duration
}

type GateObservation struct {
	Running   bool
	OOMKilled bool
	ExitCode  int
	// RestartCount and StartedAt are compared against the values seen
	// when the gate began; a zero StartedAt means the runtime cannot tell.
	RestartCount         int
	BaselineRestartCount int
	StartedAt            time.Time
	BaselineStartedAt    time.Time
	ConsecutivePasses    int
	SinceStart           time.Duration
	BudgetExhausted      bool
}

type Verdict string

type WatchObservation struct {
	SinceCutover time.Duration
	Restarts     int
	Exited       bool
	OOMKilled    bool
	Requests     float64
	Errors5xx    float64
	// P95Ms is the new release's p95 since cutover; BaselineP95Ms and
	// BaselineRequests describe the release it replaced over the same span
	// before cutover. A zero baseline means there is nothing to compare to.
	P95Ms            float64
	BaselineP95Ms    float64
	BaselineRequests float64
}

type WatchStatus struct {
	State         string
	Mode          string
	StartedAt     time.Time
	EndsAt        time.Time
	RemainingSecs int
	WindowSecs    int
	// Reason and Message describe the trip or the rollback; Notice carries a
	// soft signal that only alerted.
	Reason  string
	Message string
	Notice  string
}

type Windows struct {
	Drain, Stable, Watch, Hold time.Duration
}

type Workload string