LookupCheckpoints returns Completed checkpoints whose canonical content matches the given criteria, freshest first. Used by NVCA's Hook A (via the /ap

NewCleaner creates a new storage class cleaner

NewCleaner creates a new persistent volume cleaner

Pid returns the pid of the child process. If no child process exists, 0 is returned.

Shadow dispatches the request to handler in a background goroutine with bounded concurrency and its own timeout. It returns nil when the request is ad

Start begins the polling for this runner. Any errors that occur will cause this function to push an item onto the runner's error channel and the halt

WithRetryMax sets the maximum number of retries. Default value is 2 retries. This option requires a dedicated client - use with NewHTTPClientV2. Exam

add returns the sum of a and b.

applyAll feeds a slice of bubbletea messages into the model in order and returns the final Model.

buildKubectlCommand builds a kubectl command with proper kubeconfig handling

demoLog broadcasts a log message to all WebSocket clients subscribed to demo:logs.

ingressAllowsTraffic returns true when pods in dstNS (matching dstSelector) are permitted to receive traffic from the source namespace on port/proto.

loopMonitor builds a Monitor wired with a capturing SendResult plus a thread safe captured slice. TaskCompleted is unbuffered to match production wiri

runWorker drives the worker through one DoWorkFunc run, returning after the work function completes or the context times out.

seedCatalogRow inserts a fully-populated CatalogInfo row for tests. Keeps the per-test boilerplate small.

Like [`wait_for_routing`] but sends the given `x-routing-key` header.

writeStatus is a tiny helper for handlers that just need a code + body.

Authenticate validates the request using webhook and returns auth result.

Close closes the pipe writer and response body

DeepCopy is an autogenerated deepcopy function, copying the receiver, creating a new ICMSRequest.

HandleRequest is used to handle a request and generate a response. The backends must check the operation type and handle appropriately.

NewLocal returns a Local Store rooted at dir. The directory is created if it doesn't exist.

NewRunner accepts a slice of TemplateConfigs and returns a pointer to the new Runner and any error that occurred during creation.

RefreshStatus refreshes the cached status for all status getters in the cache.

Render atomically renders a file contents to disk, returning a result of whether it would have rendered and actually did render.

RunPreflightForRole runs the shared local-host checks plus role-specific cluster-side checks. Use ctx for cancellation and sink for streaming events.

Sign returns a digital signature of the provided value. The SignerOpts param must provide the hash function that generated the value (if any). The op

UpdateSchedulerWorkloadMetrics recomputes the scheduler workload gauge from live cluster state. It counts active (non-terminal) ICMSRequests grouped b

Values produces a key-sorted list of the Items map's values

WithGPUDebounceTime sets the debounce time.

checkControlPlaneHealth verifies cluster health using three signals: 1. /readyz — canonical API-server health (works on every distribution). 2. Data-p

formatDuration renders a duration as either "NNs" or "NNmNNs". Negative durations clamp to zero.

getICMSRequestObjectMeta produces ObjectMeta for ICMSRequest (and historically v1 ICMSRequest). The name uses the same "sr-{requestId}" or "sr-{uuid}"

============================================================================ NVCT request helper =====================================================

makeWebhook returns a miniserviceMutatingWebhook backed by a fake k8s client that has the given ConfigMaps pre-populated.

Removes hop-by-hop headers from the given header map. Copied from httputil.ReverseProxy because it's private.