9
2
Fork
You've already forked platform
2

feat: spin up instances for builders on demand #131

Manually merged
anton merged 12 commits from on-demand-builders into main 2026年04月01日 05:06:11 +02:00
Owner
Copy link
No description provided.
@ -13,0 +29,4 @@
"c6i.2xlarge"=>0.34,
"c6a.xlarge"=>0.153,
"c6a.2xlarge"=>0.306,
_=>0.20,
Author
Owner
Copy link

We should fail if there is no proper rate mapping

We should fail if there is no proper rate mapping
anton marked this conversation as resolved
@ -75,0 +78,4 @@
BUILDER_SECURITY_GROUP_ID=
BUILDER_SUBNET_ID=
BUILDER_INSTANCE_PROFILE=
BUILDER_TIMEOUT_SECS=1200
Author
Owner
Copy link

This timeout may be too long.

This timeout may be too long.
@ -0,0 +38,4 @@
pubfn instance_type(&self)-> &'static str {
matchself{
Self::Small=>"c5.xlarge",
Self::Medium=>"c5.2xlarge",
Author
Owner
Copy link

make this c5.4xlarge

make this `c5.4xlarge`
anton marked this conversation as resolved
@ -0,0 +39,4 @@
matchself{
Self::Small=>"c5.xlarge",
Self::Medium=>"c5.2xlarge",
Self::Large=>"c5.4xlarge",
Author
Owner
Copy link

make this c5.9xlarge

make this `c5.9xlarge`
anton marked this conversation as resolved
@ -0,0 +40,4 @@
Self::Small=>"c5.xlarge",
Self::Medium=>"c5.2xlarge",
Self::Large=>"c5.4xlarge",
}
Author
Owner
Copy link

UI should show builder cost /minute, margin on this should be smaller than the confidential compute offering.

UI should show builder cost /minute, margin on this should be smaller than the confidential compute offering.
anton marked this conversation as resolved
@ -1153,0 +1185,4 @@
"builder_enabled": builder_enabled,
"options": [
{"id": "small","label": "Small","instance_type": "c5.xlarge","vcpus": 4,"ram_gb": 8},
{"id": "medium","label": "Medium","instance_type": "c5.2xlarge","vcpus": 8,"ram_gb": 16},
Author
Owner
Copy link

these should come from a config, and also be used for the other code part that mentions the builder sizes

these should come from a config, and also be used for the other code part that mentions the builder sizes
anton marked this conversation as resolved 
- Switch Terraform credential passing from CLI args to TF_VAR_ env vars
 to prevent exposure via process listing
- Sanitize Terraform error messages to not leak infrastructure details
- Add Content-Security-Policy and Permissions-Policy headers to gateway
- Return 400 on malformed webhook payloads (was 200)
- Reject auto top-up webhooks with non-positive amounts
- Remove console.log of Paddle transaction data from frontend
- Add S3 versioning on EIF storage bucket
- Add missing resource_name variable to ec2-app Terraform module
anton manually merged commit 36c3240f74 into main 2026年04月01日 05:06:11 +02:00
Author
Owner
Copy link

Merged via CLI

Merged via CLI
Sign in to join this conversation.
No reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Component/Enclave-Builder
This issue affects Enclave Builder (git-push and CLI)
Component/Infrastructure
This issue affects generic Caution hosted infra components
Deploy/BYOC
Relates to Caution Bring-your-own-compute
Deploy/Full-managed
Relates to Caution fully managed cloud
Deploy/Self-hosted
Relates to Caution deployed on self-hosted infra
Interface/API
This issue affects the API
Interface/CLI
This issue affects the command line interface
Interface/Git
This issue affects the Git `push` interface
Interface/Web
This issue affects the web dashboard
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
 The priority is critical
Priority
High
 The priority is high
Priority
Low
 The priority is low
Priority
Medium
 The priority is medium
Reviewed
Confirmed
 Issue has been confirmed
Reviewed
Duplicate
 This issue or pull request already exists
Reviewed
Invalid
 Invalid issue
Reviewed
Won't Fix
 This issue won't be fixed
Status
Abandoned
 Somebody has started to work on this but abandoned work
Status
Blocked
 Something is blocking this issue or pull request
Status
Need More Info
 Feedback is required to reproduce issue or to continue work
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
caution/platform!131
Reference in a new issue
caution/platform
No description provided.
Delete branch "on-demand-builders"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?