joshsiv-mulga a4d409ea57 feat(network/reconcile): L6 intent-actual reconciler replaces 5-pass startup ...

Build spinifex/spinifex/network/reconcile/ package per Phase 2.2 of the
network layer redesign. Reads desired state from NATS KV filtered by
vpc.AZ (with legacy empty-AZ matches-all rule), scans actual state from
OVN NB DB, diffs and applies with VPC → Subnet → Port → SG → IGW →
EIP/NATGW topological ordering.

Atomic port-group join via CreateLogicalSwitchPortInGroups closes the
racy gap the legacy scanENIPortMembership pass used to revive 30s later.
A 5-minute drift goroutine (leader-gated via JetStream KV CAS) replaces
the old 30s ReconcileSGsLoop.

Adds AZ field to VPCRecord stamped at create time. Empty AZ on pre-Phase
2.2 records matches every local AZ, so no migration pass is required.

Replaces and removes the 5-pass startup sequence in services/vpcd:
  - Reconcile + ReconcileFromKV
  - ReconcileSGsOnce + ReconcileSGsLoop
  - RetrofitAllExternalLocalnetOptions
  - RetrofitAllGatewayPortNetworks

IGW fresh-create continues to flow through the legacy NATS handler path
(handleIGWAttach) so the dhcpManager wiring stays intact until Phase
2.3; the reconciler only rebinds gateway-chassis on existing IGW
topology.

Closes mulga-siv-125.3.2.

2026-05-24 21:08:53 +10:00

..

dhcptest

feat: VFIO GPU passthrough (#188)

2026-05-06 09:52:23 +10:00

installer

refactor(vpcd): remove macvlan bridge mode

2026-05-24 21:08:52 +10:00

lb-agent

feat: use FIPS compliant cryptography (#225)

2026-05-14 15:42:53 +10:00

spinifex

feat(network/reconcile): L6 intent-actual reconciler replaces 5-pass startup

2026-05-24 21:08:53 +10:00