Files
kandev/docs/specs/executors/requirements/kubernetes-worker-presets.md
T
2026-09-10 11:05:05 +01:00

3.0 KiB

status, system, created, owners
status system created owners
active executors 2026-09-09
kandev

Kubernetes Worker Presets Requirements

Overview

Administrators need a tested starting configuration for Kubernetes task sessions. The executor system owns workload preparation and its compatibility with session bootstrap, credentials, and storage. These presets extend the Kubernetes foundation.

Terminology

  • Preset: A documented image recipe, PodTemplate, and workspace configuration.
  • Minimal: The existing Kandev base image with no additional language tools. This name does not promise a smaller image than the published base.
  • Prepared image: An image with its documented toolchain installed before task launch.

Requirements

REQ-EXECUTORS-K8S-PRESETS-001: Reproducible starting configurations

Intent: Administrators can prepare common workloads without discovering basic toolchain or volume-permission requirements through failed sessions.

Acceptance criteria

  • AC-EXECUTORS-K8S-PRESETS-001.1: Kandev shall provide minimal, Node/pnpm, and Python presets with exact image-build inputs and an explicit Linux architecture.
  • AC-EXECUTORS-K8S-PRESETS-001.2: Each preset shall identify its installed tools, CPU and memory requests, memory limit, runtime user, and workspace mode.
  • AC-EXECUTORS-K8S-PRESETS-001.3: Each preset shall support a non-root session that writes runtime files, credentials, and workspace files without privileged containers or host mounts.
  • AC-EXECUTORS-K8S-PRESETS-001.4: Before launch, an administrator shall be able to use the existing configuration test and save the preset through the existing profile flow.

REQ-EXECUTORS-K8S-PRESETS-002: Verified workload compatibility

Intent: Examples describe behavior that the release's executor can perform.

Acceptance criteria

  • AC-EXECUTORS-K8S-PRESETS-002.1: Each preset shall pass an actual task launch, terminal command, Git operation, and its documented toolchain smoke workload.
  • AC-EXECUTORS-K8S-PRESETS-002.2: The documented managed workspace shall preserve a marker across Stop and Resume. Terminal cleanup shall remove only owned resources.
  • AC-EXECUTORS-K8S-PRESETS-002.3: Preset instructions shall state the exact tested architecture and distinguish image-build verification from Kubernetes lifecycle verification.
  • AC-EXECUTORS-K8S-PRESETS-002.4: Presets shall preserve credential delivery and runtime injection. Image layers and templates shall contain no task credentials or private repository content.

Out of scope

  • New registry publication channels, changes to Stable or Nightly releases, and a Helm chart.
  • A preset picker, automatic profile creation, or changes to existing profiles.
  • Warm pools, image pre-pull controllers, build caches, and startup performance guarantees.
  • Provider logins or successful calls to paid agent services as a test prerequisite.
  • Guaranteed compatibility with every CSI driver or restricted-cluster policy.