4bb2df0dc4
The operator sees the shared pool box's real state on the hub: total box fill vs
capacity, Σ(shared soft quotas) vs capacity (the oversubscription ratio), per-customer
usage/quota bars, and a box-level operator alert (fill % + oversub ratio) on the existing
dispatcher's operator channel. Per-customer fill alerts already existed; the box-level
aggregate was the gap. READ-ONLY against Hetzner (GET only).
Phase-0 probe (gate PASSED): the live pool box 611714 returns capacity via
storage_box_type.size (1 TiB / bx11) and usage via a stats object (size/size_data/
size_snapshots), all bytes; our token reads it (200).
- hetznerapi: additive StorageBoxType + StorageBoxStats on StorageBox (no existing field/
method changed); fake carries them + a GetBoxCalls counter; golden decode test.
- monitor.OffsiteBoxChecker: OffsiteChecker-sibling for the box; fetch-throttled (1 GET/
15min), cached BoxSnapshot, escalation-only + recovery re-arm. FILL (used/capacity 80/90)
+ OVERSUB (Σ shared+enabled quotas / capacity, 2.0x) — independent. Σ from the ConfigJSON
Descriptor (offsite.ReadDescriptor, new), never the report echo; dedicated+disabled
excluded. Scope "pool-box" -> operator channel only, no SaveEvent. Failed fetch keeps the
last snapshot degraded; missing data never becomes 0% and never transitions a band.
- config: Alerting.OffsiteBoxFill{Warn,Crit}Percent + OffsiteOversubWarnRatio (80/90/2.0
defaults; thresholds pending Viktor's ruling). Constructed in the HETZNER_TOKEN branch,
60s sweep, snapshot handed to the web server.
- web: Offsite-tab panel (fill bar, Σ+ratio, per-customer usage/quota rows) + a compact
dashboard tile; reads the cached snapshot only, never fetches; nil -> "not configured".
Tests: 10 new + 4 red-proofs (throttle, Σ filter, escalation-only, failed-fetch honesty),
all confirmed red then restored. go build/vet/test all pass; hub confirm gate OK.
46 lines
1.7 KiB
Go
46 lines
1.7 KiB
Go
package hetznerapi
|
|
|
|
import (
|
|
"encoding/json"
|
|
"testing"
|
|
)
|
|
|
|
// goldenPoolBox is the (redacted, non-secret) response captured from the Phase-0 probe of the live pool
|
|
// box 611714 (2026-07-17): GET /storage_boxes/{id}. The stats/capacity extension must decode it EXACTLY.
|
|
const goldenPoolBox = `{
|
|
"storage_box": {
|
|
"id": 611714,
|
|
"username": "u629488",
|
|
"name": "storage-box-pool-1",
|
|
"status": "active",
|
|
"server": "u629488.your-storagebox.de",
|
|
"storage_box_type": { "id": 1333, "name": "bx11", "description": "BX11", "size": 1099511627776 },
|
|
"stats": { "size": 2746220544, "size_data": 2746220544, "size_snapshots": 0 }
|
|
}
|
|
}`
|
|
|
|
// TestStorageBox_DecodesProbeShape pins the type extension to the live API shape: capacity is the box
|
|
// TYPE's size (1 TiB), and stats carries the total/data/snapshot split, all in bytes.
|
|
func TestStorageBox_DecodesProbeShape(t *testing.T) {
|
|
var out struct {
|
|
StorageBox StorageBox `json:"storage_box"`
|
|
}
|
|
if err := json.Unmarshal([]byte(goldenPoolBox), &out); err != nil {
|
|
t.Fatalf("decode golden pool-box: %v", err)
|
|
}
|
|
b := out.StorageBox
|
|
if b.ID != 611714 || b.Name != "storage-box-pool-1" || b.Status != "active" {
|
|
t.Fatalf("base fields wrong: %+v", b)
|
|
}
|
|
if b.StorageBoxType.Name != "bx11" || b.StorageBoxType.Size != 1099511627776 {
|
|
t.Fatalf("capacity (storage_box_type.size) wrong: %+v", b.StorageBoxType)
|
|
}
|
|
if b.Stats.Size != 2746220544 || b.Stats.SizeData != 2746220544 || b.Stats.SizeSnapshots != 0 {
|
|
t.Fatalf("stats wrong: %+v", b.Stats)
|
|
}
|
|
// Sanity: the split sums to the total (the invariant the live box holds).
|
|
if b.Stats.SizeData+b.Stats.SizeSnapshots != b.Stats.Size {
|
|
t.Fatalf("data+snapshots (%d) != total (%d)", b.Stats.SizeData+b.Stats.SizeSnapshots, b.Stats.Size)
|
|
}
|
|
}
|