Repository navigation
Conversation
Add a Failure and Recovery page covering gateway outages, supervisor and supervisor-sandbox link loss, responses to policy violations, and the gateway and sandbox configuration that controls them. Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
Auto-sync is disabled for draft pull requests in this repository. Workflows must be run manually. Contributors can view more details about this message here. |
|
🌿 Preview your docs: https://nvidia-preview-pr-4274.docs.buildwithfern.com/openshell |
Describe three failure modes (gateway unreachable, supervisor unreachable, sandbox process or compute runtime failure), drop the policy-violation responses and per-sandbox failure_handling override, and document which recovery limits are configurable. Signed-off-by: Drew Newberry <anewberry@nvidia.com>
|
This pull request has had no activity for 14 days and is now marked stale. |
github-actions
Bot
added
the
state:stale
FrostGod
self-requested a review
October 28, 2026 06:23
3 of 5 tasks
#4993) Correct the failure and recovery page for the shared supervisor pool: a pool member takes over a sandbox whose supervisor crashed, within a 60 second window set by [openshell.gateway.supervisor_pool] recovery_timeout_secs. Note that losing one gateway replica is not an outage, and document the pool table in the gateway configuration page. Signed-off-by: divesh <dgude@nvidia.com>
github-actions
Bot
removed
the
state:stale
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds a draft Failure and Recovery page that models what happens to sandbox workloads when the gateway goes down or the supervisor or its link to the sandbox goes down, how a sandbox responds to policy violations, and how operators configure that behavior. The page is forward looking: the gateway outage limit, violation responses, and
failure_handlingconfiguration describe intended behavior that is not implemented yet.Related Issue
None yet.
Changes
docs/how-it-works/sandboxes/failure-and-recovery.mdxcovering:openshell sandbox start.[openshell.gateway.failure_handling], with sandbox policy overrides that can only tighten them.docs/index.yml.Testing
mise run docs:build:strictpasses (0 errors)Checklist