pub struct IceCommands<'a> { /* private fields */ }Expand description
Break-glass operator surface. Constructed via
DeckClient::ice; each method returns an IceProposal
that must be simulate()d before commit() per the plan’s
locked decision #4 (blast-radius simulation is mandatory
before any ICE commit).
Implementations§
Source§impl<'a> IceCommands<'a>
impl<'a> IceCommands<'a>
Sourcepub fn freeze_cluster(&self, ttl: Duration) -> IceProposal<'a>
pub fn freeze_cluster(&self, ttl: Duration) -> IceProposal<'a>
Propose a cluster-wide freeze. The returned
IceProposal must be simulated then committed.
Sourcepub fn flush_avoid_lists(&self, scope: AvoidScope) -> IceProposal<'a>
pub fn flush_avoid_lists(&self, scope: AvoidScope) -> IceProposal<'a>
Propose flushing avoid-list entries under scope.
See super::meshos::ice::IceActionProposal::FlushAvoidLists
for the three scope semantics.
Sourcepub fn force_evict_replica(
&self,
chain: ChainId,
victim: NodeId,
) -> IceProposal<'a>
pub fn force_evict_replica( &self, chain: ChainId, victim: NodeId, ) -> IceProposal<'a>
Propose force-evicting victim from chain bypassing
the scheduler’s rebalance cooldown. Only the chain’s
elected leader emits the resulting RequestEviction
action; non-leader nodes fold the admin event silently.
Sourcepub fn force_restart_daemon(&self, daemon: DaemonRef) -> IceProposal<'a>
pub fn force_restart_daemon(&self, daemon: DaemonRef) -> IceProposal<'a>
Propose force-restarting daemon by resetting its
supervisor backoff gate so reconcile fires StartDaemon
on the next tick. No-op if the daemon is already in
Idle backoff state.
Sourcepub fn force_cutover(&self, chain: ChainId, target: NodeId) -> IceProposal<'a>
pub fn force_cutover(&self, chain: ChainId, target: NodeId) -> IceProposal<'a>
Propose force-placing chain on target, bypassing
the placement scorer. Only the chain’s elected leader
emits the resulting RequestPlacement action with
target: Some(target); non-leader nodes fold silently.
No-op if target is already a holder.
Sourcepub fn kill_migration(&self, migration: MigrationId) -> IceProposal<'a>
pub fn kill_migration(&self, migration: MigrationId) -> IceProposal<'a>
Propose aborting an in-flight migration. The wire-form substrate plumbing records the commit on the audit ring; the dispatcher hookup that finds the running migration and stops it is future substrate work, so until that lands the proposal commits without actually halting the migration. The audit trail tracks the operator’s intent regardless.
Sourcepub fn thaw_cluster(&self) -> IceProposal<'a>
pub fn thaw_cluster(&self) -> IceProposal<'a>
Propose cancelling an in-effect cluster freeze.