dev

YYifan Zhaorefactor(runtime): remove user-facing namespace support

a1bfd5a3创建于 8月6日历史提交

文件	最后提交记录	最后更新时间
entry.go	refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	1 个月前
store.go	refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	1 个月前
store_test.go	refactor(runtime): remove user-facing namespace support Namespace-aware APIs exposed isolation, but state and runtime paths did not consistently enforce it. Sandbox, template, image, snapshot, and volume identifiers could therefore have conflicting scopes. Adopt a single runtime scope and make identifiers globally unique within the daemon. Remove namespace fields from APIs, state records, CLI flags, SDK payloads, configuration, and documentation. Route containerd access through the adapter's fixed internal scope. Keep sandbox uniqueness policy in the runtime service while BoltStore remains an upsert-only persistence layer. Return configuration parsing errors from client construction so namespace removal does not hide malformed YAML. This intentionally provides no migration for namespace-scoped state. Assisted-by: Codex:GPT-5.6-sol Signed-off-by: Yifan Zhao <stopire@gmail.com>	1 个月前