Consider a service which has a free-tier and a paid-tier. They might reasonably provision "good" machines for their paid-tier users and "cheap" machines for their free-tier users. When a free-tier user does something which causes an actor to be instantiated, we need to offer a way to designate that this actor must use only workers on the "cheap" machines.
This could be done as a k8s-style selector (the actor has a selector, the workers have labels like "tier=free"), but that's not the only way to do it, so before we lock it down, we should at least consider other approaches.
Perhaps it is a per-user concept rather than per-actor? Or per-namespaces (see #21)?
Is it something that the person who creates the actor is allowed to set? k8s pods having a node selector gives them a LOT of control over themselves, so much so that people impose policies to restrict those. If we are trying to keep this as simple as possible, we should seek to avoid things like webhook policy implementations. :)
Maybe it's better expressed on the worker: "this worker can handle actors from namespaces where tier=free".
We need to consider how the control plane will track and query for matches. K8s labels started simple (exactly equal) but added in, not-in, etc semantics. Ideally we can offload some of the matching to the optimized storage layer(s)?
Consider a service which has a free-tier and a paid-tier. They might reasonably provision "good" machines for their paid-tier users and "cheap" machines for their free-tier users. When a free-tier user does something which causes an actor to be instantiated, we need to offer a way to designate that this actor must use only workers on the "cheap" machines.
This could be done as a k8s-style selector (the actor has a selector, the workers have labels like "tier=free"), but that's not the only way to do it, so before we lock it down, we should at least consider other approaches.
Perhaps it is a per-user concept rather than per-actor? Or per-namespaces (see #21)?
Is it something that the person who creates the actor is allowed to set? k8s pods having a node selector gives them a LOT of control over themselves, so much so that people impose policies to restrict those. If we are trying to keep this as simple as possible, we should seek to avoid things like webhook policy implementations. :)
Maybe it's better expressed on the worker: "this worker can handle actors from namespaces where tier=free".
We need to consider how the control plane will track and query for matches. K8s labels started simple (exactly equal) but added in, not-in, etc semantics. Ideally we can offload some of the matching to the optimized storage layer(s)?