Method HandleConfigChange

controlplane/org_router.go:233–328

HandleConfigChange reconciles org stacks when the config snapshot changes.

(old, new *configstore.Snapshot)

// same mutex that guards the terminal shutdown transition. This ordering makes
// stackOps.Wait safe: once terminal is set, no later WaitGroup.Add can race it.
func (tr *OrgRouter) beginOrgStackOperation() (func(), bool) {
	tr.mu.Lock()
	defer tr.mu.Unlock()
	if tr.terminal {
		return nil, false
	}
	tr.stackOps.Add(1)
	return tr.stackOps.Done, true
}

// beginOrgStackMutation holds one per-org generation slot through either
// construction/publication or removal/teardown. OrgReservedPool.ShutdownAll is
// intentionally org-scoped rather than pool-instance-scoped, so allowing old
// teardown to overlap replacement construction could retire the replacement's
// workers.
func (tr *OrgRouter) beginOrgStackMutation(orgID string) (func(), error) {
	finishOperation, ok := tr.beginOrgStackOperation()
	if !ok {
		return nil, fmt.Errorf("org router is shutting down")
	}

	for {
		tr.mu.Lock()
		if tr.terminal {
			tr.mu.Unlock()
			finishOperation()
			return nil, fmt.Errorf("org router is shutting down")
		}
		if tr.orgStackMutations == nil {
			tr.orgStackMutations = make(map[string]chan struct{})
		}
		if wait, exists := tr.orgStackMutations[orgID]; exists {
			tr.mu.Unlock()
			<-wait
			continue
		}

		done := make(chan struct{})
		tr.orgStackMutations[orgID] = done
		tr.mu.Unlock()

		var once sync.Once
		return func() {
			once.Do(func() {
				tr.mu.Lock()
				delete(tr.orgStackMutations, orgID)
				close(done)
				tr.mu.Unlock()
				finishOperation()
			})
		}, nil
	}
}

// beginOrgStackCreation acquires the per-org generation slot and verifies that
// no published stack exists before the caller constructs any org-scoped pool.
func (tr *OrgRouter) beginOrgStackCreation(orgID string) (func(), error) {
	finish, err := tr.beginOrgStackMutation(orgID)