Files
seaweedfs/weed/s3api/s3vectors/discovery.go
T
Chris Lu 8236c8d136 vector: integrate engine health, admin management, and local deployment (#12517)
* vector: expose request metrics and registration-aware health endpoints

* vector: report immutable read cache and storage fetch metrics

* docs: describe vector engine health, metrics, and maintenance

* vector: count canceled requests when their handler is dropped

* vector: account for uncached large immutable storage reads

* vector: reliably release the stalled credential reader in tests

* vector: observe large reads as their streamed body is consumed

* vector: bound heartbeats on established master registration streams

* test: exercise hardened vector maintenance on Go and Rust volumes

* vector: register engines in their configured filer group

* vector: make retried index creation preserve compatible datasets

* vector: allow registration to advertise a separate address

* test: release stalled credential readers without blocking FIFO cleanup

* test: allow hardened vector coverage in a named filer group

* vector: discover engines in the same filer group as their gateway

* vector: fall back when the advertised address is empty

* admin: expose vector readiness, maintenance, and management tools (#12520)

* s3vectors: share vector discovery with trusted management clients

* admin: show vector engine readiness and recent maintenance activity

* admin: suggest S3 Vectors IAM actions from the supported operations

* admin: manage vector indexes, policies, tags, encryption, and query data

* admin: validate SSE-S3 support before creating encrypted vector buckets

* admin: discover vector engines in their registration group

* admin: probe vector engines concurrently with independent time budgets

* admin: verify encryption capability on the remote S3 gateway

* admin: defer discovery until after the HTTP server can start

* admin: distinguish unknown vector health services from failed engines

* admin: count workers that can execute vector index maintenance

* admin: allow read-only users to query vectors and inspect tags

* vector: scope gateway and admin discovery to the configured filer group

* admin: refresh policy state after mutations and serialize policy controls

* vector: drain active RPCs before closing replaced discovery connections

* vector: respect request cancellation while waiting for discovery

* vector: prefer another registered engine after a transport failure

* admin: check all masters before reporting no registered vector engines

* iam: honor attached vector policies without broadening legacy grants

* vector: allow short-lived discovery clients to close their connections

* vector: refresh cached master addresses for each discovery lookup

* iam: enforce vector bucket tag conditions in attached policies

* iam: authorize vector bucket creation with the requested tags

* test: exercise vector IAM grants and tag denies on Go and Rust volumes

* admin: reject authenticated vector mutations without an admin role

* test: run vector IAM assertions before the shared engine is stopped

* vector: add native mini startup, shell tools, and a runnable Compose example (#12522)

* s3vectors: share vector discovery with trusted management clients

* admin: show vector engine readiness and recent maintenance activity

* admin: suggest S3 Vectors IAM actions from the supported operations

* admin: manage vector indexes, policies, tags, encryption, and query data

* admin: validate SSE-S3 support before creating encrypted vector buckets

* admin: discover vector engines in their registration group

* admin: probe vector engines concurrently with independent time budgets

* admin: verify encryption capability on the remote S3 gateway

* admin: defer discovery until after the HTTP server can start

* admin: distinguish unknown vector health services from failed engines

* admin: count workers that can execute vector index maintenance

* admin: allow read-only users to query vectors and inspect tags

* vector: scope gateway and admin discovery to the configured filer group

* admin: refresh policy state after mutations and serialize policy controls

* vector: drain active RPCs before closing replaced discovery connections

* vector: respect request cancellation while waiting for discovery

* vector: prefer another registered engine after a transport failure

* admin: check all masters before reporting no registered vector engines

* iam: honor attached vector policies without broadening legacy grants

* vector: allow short-lived discovery clients to close their connections

* vector: refresh cached master addresses for each discovery lookup

* iam: enforce vector bucket tag conditions in attached policies

* iam: authorize vector bucket creation with the requested tags

* test: exercise vector IAM grants and tag denies on Go and Rust volumes

* admin: reject authenticated vector mutations without an admin role

* test: run vector IAM assertions before the shared engine is stopped

* mini: optionally start and supervise the vector engine

* mini: bootstrap vector buckets with existing Lance catalog helpers

* shell: manage vector buckets, indexes, and vector data

* docs: provide a runnable vector and maintenance worker Compose stack

* shell: scope vector discovery to the session and close its connections

* mini: honor the bind address for vector and metrics listeners

* mini: reserve vector ports before assigning gRPC and compatibility listeners

* mini: wait for vector storage setup and master registration

* mini: create requested vector buckets without requiring the Lance HTTP listener

* shell: refresh master addresses during vector discovery

* mini: resolve sibling vector executables with platform extensions

* vector: preserve uncertain creates and fix mini listener allocation (#12525)

* vector: retain catalog records when index creation has an unknown outcome

* mini: keep chosen listener ports reserved throughout allocation

* mini: resolve hostname binds before starting vector listeners

* vector: fix integration test imports and recover interrupted index creation (#12533)

* shell: register vector operations from the command package

* s3vectors: resume interrupted index initialization safely

* mini: exclude disabled WebDAV from listener allocation

* s3vectors: retain uncertain creates across refused retries

* s3vectors: claim pending indexes before retrying initialization

* s3vectors: compare resolved distance metrics during recovery

* s3vectors: preserve metadata keys when retrying initialization

* s3vectors: verify ownership before initializing new catalog records
2026-11-10 04:21:18 -08:00

359 lines
9.1 KiB
Go

package s3vectors
import (
"context"
"github.com/seaweedfs/seaweedfs/weed/glog"
"github.com/seaweedfs/seaweedfs/weed/pb"
"github.com/seaweedfs/seaweedfs/weed/pb/master_pb"
"github.com/seaweedfs/seaweedfs/weed/pb/vector_pb"
"google.golang.org/grpc"
"google.golang.org/grpc/codes"
"google.golang.org/grpc/status"
"sync"
"time"
)
func NewVectorDiscovery(masters func() []pb.ServerAddress, dialOption grpc.DialOption, filerGroup string) *vectorDiscovery {
return &vectorDiscovery{masters: masters, grpcDialOption: dialOption, discover: func(m []pb.ServerAddress, opt grpc.DialOption) []string {
return discoverVectorWorkers(m, opt, filerGroup)
}}
}
type vectorDiscovery struct {
masters func() []pb.ServerAddress
grpcDialOption grpc.DialOption
discover func([]pb.ServerAddress, grpc.DialOption) []string
mu sync.Mutex
closed bool
worker string
failed string
active map[vector_pb.VectorServiceClient]int
retired map[vector_pb.VectorServiceClient]*grpc.ClientConn
conn *grpc.ClientConn
client vector_pb.VectorServiceClient
nextResolve time.Time
resolving chan struct{} // closed when the in-flight resolve lands
}
func (d *vectorDiscovery) Close() error {
d.mu.Lock()
defer d.mu.Unlock()
d.closed = true
d.retire()
d.worker, d.conn, d.client = "", nil, nil
return nil
}
func (d *vectorDiscovery) reset(c vector_pb.VectorServiceClient) {
d.mu.Lock()
defer d.mu.Unlock()
if c != d.client {
return
}
d.failed = d.worker
d.retire()
d.worker, d.conn, d.client = "", nil, nil
d.nextResolve = time.Time{}
}
func (d *vectorDiscovery) retire() {
if d.conn == nil {
return
}
if d.active[d.client] == 0 {
_ = d.conn.Close()
return
}
if d.retired == nil {
d.retired = make(map[vector_pb.VectorServiceClient]*grpc.ClientConn)
}
d.retired[d.client] = d.conn
}
func (d *vectorDiscovery) release(c vector_pb.VectorServiceClient) {
d.mu.Lock()
defer d.mu.Unlock()
d.active[c]--
if d.active[c] == 0 {
delete(d.active, c)
if conn := d.retired[c]; conn != nil {
_ = conn.Close()
delete(d.retired, c)
}
}
}
func isTransportError(err error) bool {
return status.Code(err) == codes.Unavailable
}
func (d *vectorDiscovery) resolve() {
var masters []pb.ServerAddress
if d.masters != nil {
masters = d.masters()
}
workers := d.discover(masters, d.grpcDialOption)
d.mu.Lock()
defer d.mu.Unlock()
// Measured from lookup end so a slow lookup cannot leave the next one already due.
defer func() {
interval := vectorRecheckInterval
if d.client != nil {
interval = vectorResolveInterval
}
d.nextResolve = time.Now().Add(interval)
close(d.resolving)
d.resolving = nil
}()
if d.closed || len(workers) == 0 {
return
}
worker := workers[0]
for _, w := range workers {
if w != d.failed {
worker = w
break
}
}
for _, w := range workers {
if w == d.worker && w != d.failed {
worker = w
break
}
}
if worker != d.worker {
conn, err := pb.GrpcDial(context.Background(), worker, false, d.grpcDialOption)
if err != nil {
glog.Warningf("S3 Vectors: dial weed-vector %s: %v", worker, err)
return
}
d.retire()
d.worker, d.conn = worker, conn
d.client = vector_pb.NewVectorServiceClient(conn)
}
}
const (
vectorResolveInterval = 5 * time.Second
vectorRecheckInterval = 500 * time.Millisecond
)
var errNoVectorWorker = status.Error(codes.Unavailable, "no weed-vector registered on master")
func (d *vectorDiscovery) cli(ctx context.Context) (vector_pb.VectorServiceClient, error) {
if err := ctx.Err(); err != nil {
return nil, status.FromContextError(err).Err()
}
d.mu.Lock()
if d.closed {
d.mu.Unlock()
return nil, status.Error(codes.Canceled, "vector discovery closed")
}
if d.resolving == nil && !time.Now().Before(d.nextResolve) {
d.resolving = make(chan struct{})
go d.resolve()
}
if d.client == nil && d.resolving != nil {
resolving := d.resolving
d.mu.Unlock()
select {
case <-resolving:
case <-ctx.Done():
return nil, status.FromContextError(ctx.Err()).Err()
}
d.mu.Lock()
}
defer d.mu.Unlock()
if d.closed {
return nil, status.Error(codes.Canceled, "vector discovery closed")
}
if d.client == nil {
return nil, errNoVectorWorker
}
if d.active == nil {
d.active = make(map[vector_pb.VectorServiceClient]int)
}
d.active[d.client]++
return d.client, nil
}
func (d *vectorDiscovery) CreateIndex(ctx context.Context, in *vector_pb.CreateIndexRequest, opts ...grpc.CallOption) (resp *vector_pb.CreateIndexResponse, err error) {
var firstErr error
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
var resolveErr error
if c, resolveErr = d.cli(ctx); resolveErr != nil {
if attempt > 0 {
return nil, firstErr
}
return nil, resolveErr
}
resp, err = c.CreateIndex(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if firstErr == nil {
firstErr = err
}
if !isTransportError(err) {
return nil, firstErr
}
}
return nil, firstErr
}
func (d *vectorDiscovery) DropIndex(ctx context.Context, in *vector_pb.DropIndexRequest, opts ...grpc.CallOption) (resp *vector_pb.DropIndexResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.DropIndex(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func (d *vectorDiscovery) PutVectors(ctx context.Context, in *vector_pb.PutVectorsRequest, opts ...grpc.CallOption) (resp *vector_pb.PutVectorsResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.PutVectors(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func (d *vectorDiscovery) GetVectors(ctx context.Context, in *vector_pb.GetVectorsRequest, opts ...grpc.CallOption) (resp *vector_pb.GetVectorsResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.GetVectors(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func (d *vectorDiscovery) DeleteVectors(ctx context.Context, in *vector_pb.DeleteVectorsRequest, opts ...grpc.CallOption) (resp *vector_pb.DeleteVectorsResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.DeleteVectors(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func (d *vectorDiscovery) ListVectors(ctx context.Context, in *vector_pb.ListVectorsRequest, opts ...grpc.CallOption) (resp *vector_pb.ListVectorsResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.ListVectors(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func (d *vectorDiscovery) QueryVectors(ctx context.Context, in *vector_pb.QueryVectorsRequest, opts ...grpc.CallOption) (resp *vector_pb.QueryVectorsResponse, err error) {
for attempt := 0; attempt < 2; attempt++ {
var c vector_pb.VectorServiceClient
if c, err = d.cli(ctx); err != nil {
return nil, err
}
resp, err = c.QueryVectors(ctx, in, opts...)
if isTransportError(err) {
d.reset(c)
}
d.release(c)
if err == nil {
return resp, nil
}
if !isTransportError(err) {
return nil, err
}
}
return nil, err
}
func discoverVectorWorkers(masters []pb.ServerAddress, grpcDialOption grpc.DialOption, filerGroup string) []string {
for _, master := range masters {
ctx, cancel := context.WithTimeout(context.Background(), 5*time.Second)
conn, err := pb.GrpcDial(ctx, master.ToGrpcAddress(), false, grpcDialOption)
if err != nil {
cancel()
continue
}
resp, err := master_pb.NewSeaweedClient(conn).ListClusterNodes(ctx, &master_pb.ListClusterNodesRequest{
ClientType: "vector",
FilerGroup: filerGroup,
})
conn.Close()
cancel()
if err != nil {
continue
}
workers := make([]string, 0, len(resp.ClusterNodes))
for _, node := range resp.ClusterNodes {
glog.V(0).Infof("S3 Vectors: discovered weed-vector at %s via master %s", node.Address, master)
workers = append(workers, node.Address)
}
// A follower can answer with an empty list — workers register with
// the leader, so keep looking rather than accept "none."
if len(workers) > 0 {
return workers
}
}
return nil
}