Merge pull request #69 from Eeshu-Yadav/container-deploy-support-clean

Better support container deploy

Author: kmesh-bot

Cargo.lock

@@ -7,7 +7,7 @@ fmt-check:
 	cargo fmt --all -- --check
 
 lint:
-	cargo clippy --all-targets --all-features -- -D warnings
+	cargo clippy --all-targets --all-features
 
 build:
 	cargo build --workspace --release --locked
@@ -18,7 +18,7 @@ test:
 # Sequential CI (keep for local/dev reproducibility)
 ci: init
 	cargo fmt --all -- --check
-	cargo clippy --all-targets --all-features -- -D warnings
+	cargo clippy --all-targets --all-features
 	cargo build --workspace --release --locked
 	cargo test --workspace --release --locked
 
@@ -28,7 +28,7 @@ ci-parallel: init
 	@bash -ec '\
 	set -o pipefail; \
 	cargo fmt --all -- --check & pid_fmt=$$!; \
-	cargo clippy --all-targets --all-features -- -D warnings & pid_clippy=$$!; \
+	cargo clippy --all-targets --all-features & pid_clippy=$$!; \
 	cargo build --workspace --release --locked & pid_build=$$!; \
 	wait $$pid_fmt; rc_fmt=$$?; \
 	wait $$pid_clippy; rc_clippy=$$?; \

Makefile

@@ -28,6 +28,37 @@ Orion Proxy configuration is generated from Envoy's xDS protobuf definitions. Or
 
 ## Quick Start
 
+**Note:** To control how many CPU cores/threads Orion uses (especially in containers), set the `ORION_CPU_LIMIT` environment variable. In Kubernetes, use the Downward API:
+
+```yaml
+env:
+    - name: ORION_CPU_LIMIT
+        valueFrom:
+            resourceFieldRef:
+                resource: limits.cpu
+                divisor: "1"
+```
+
+## CPU/Thread Limit Configuration
+
+Orion can be configured to use a specific number of CPU cores/threads by setting the `ORION_CPU_LIMIT` environment variable. This is especially useful in containerized environments where access to `/sys/fs` may be restricted.
+
+### Kubernetes Example (Downward API)
+
+Add the following to your container spec to set `ORION_CPU_LIMIT` to the container's CPU limit:
+
+```yaml
+env:
+    - name: ORION_CPU_LIMIT
+        valueFrom:
+            resourceFieldRef:
+                resource: limits.cpu
+                divisor: "1"
+```
+
+Orion will automatically use this value to determine the number of threads/cores.
+
+
 ### Building
 ```console
 git clone https://github.com/kmesh-net/orion

README.md

@@ -77,6 +77,19 @@ docker run -d \
 | ------------------ | ---------------------------------------- | ----------- |
 | `CONTROL_PLANE_IP` | IP address of the control plane          | `127.0.0.1` |
 | `LOG_LEVEL`        | Logging level (debug, info, warn, error) | `info`      |
+| `ORION_CPU_LIMIT`  | Number of CPU cores/threads to use. Set this to control Orion's concurrency, especially in containers. | (auto-detect) |
+### Example: Setting CPU Limit in Docker
+
+To explicitly set the number of CPU cores/threads Orion should use:
+
+```bash
+docker run -d \
+  -e ORION_CPU_LIMIT=2 \
+  --name orion-proxy \
+  orion-proxy
+```
+
+Or, in Kubernetes, use the Downward API as shown in the main README.
 
 ## Verification
 

docker/README.md

@@ -46,6 +46,7 @@ url.workspace = true
 
 [dev-dependencies]
 tracing-test.workspace = true
+tempfile = "3.8"
 
 [features]
 default           = ["envoy-conversions"]

orion-configuration/Cargo.toml

@@ -157,6 +157,7 @@ mod envoy_conversions {
                 grpc_async_client_manager_config,
                 stats_flush,
                 memory_allocator_manager,
+                ..
             } = envoy;
             unsupported_field!(
                 // node,

orion-configuration/src/config/bootstrap.rs

@@ -68,6 +68,7 @@ mod envoy_conversions {
                 use_tag_extracted_name,
                 prefix,
                 protocol_specifier,
+                ..
             } = value;
             unsupported_field!(
                 // prefix,

orion-configuration/src/config/metrics.rs

@@ -985,6 +985,7 @@ mod envoy_conversions {
                 per_request_buffer_limit_bytes,
                 request_mirror_policies,
                 metadata,
+                ..
             } = envoy;
             unsupported_field!(
                 // name,
@@ -1160,6 +1161,7 @@ mod envoy_conversions {
                 per_request_buffer_limit_bytes,
                 stat_prefix,
                 action,
+                ..
             } = envoy;
             unsupported_field!(
                 //name,