Skip to content

Feat: HTCondor core - #33

Draft
Alexander-Auer wants to merge 77 commits into
DIRACGrid:mainfrom
Alexander-Auer:stack/htcondor-1-core
Draft

Alexander-Auer wants to merge 77 commits into
DIRACGrid:mainfrom
Alexander-Auer:stack/htcondor-1-core

Conversation

@Alexander-Auer

@Alexander-Auer Alexander-Auer commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

feat: the shared HTCondor core

Part of #23; #21 will reuse it. PR 1 of 6 for the HTCondor-CE backend.

No dependencies: this applies directly to main and can merge before or after #30.

Adds _backends/_htcondor, which holds what interCEde knows about HTCondor itself. Nothing calls it yet: the backend arrives in #35.

What's added

  • submit: renders a submit description from a plan, with one process per copy and per-copy values indexed by ProcId.
  • commands: builds the tools' command lines, splits job ids into chunks of 100, and reads the output of condor_submit -terse and condor_rm.
  • status: reads job ads from condor_q and condor_history and maps them to JobStatus.
  • test_fake_backend.py moves to tests/unit/backends/fake/, unchanged, so each backend has its own test folder.

Decisions to check

  • Finished jobs stay queued until purged (leave_in_queue = (JobStatus == 4)), so output can be collected again. This is the only policy set on a job: no holds, retries or periodic removal.
  • A job held for any reason other than spooling its inputs (hold code 16) counts as Aborted.
  • A removed job keeps its result: LastJobStatus decides, so a finished job that was purged stays Done or Failed.
  • Values a description cannot hold (a line break, a comma in a file list, a bad variable name) raise ValueError.

Testing

80 new unit tests, with no HTCondor needed. Expected values were checked against HTCondor 25 (condor_submit -dry-run and a live schedd).

alexander and others added 30 commits October 2, 2026 16:54
* feat: Models the core contract needs

* Feat: Protocols and Exceptions added for the core contract

* Feat: Private protocols for the BatchBackend

* feat: a fake backend to run unit tests against

* fix: some code cleanup in the helper functions

* feat: setup for the unit test suite

* chore: style fix

* chore: styling, unit test fixture

* chore: single letter var `h` refering to hanlde changed to `handle`

* fix: unused parameter in `test_injected_failure_is_reported_per_job()` removed

* feat: Models the core contract needs

* Feat: Protocols and Exceptions added for the core contract

* Feat: Private protocols for the BatchBackend

* feat: a fake backend to run unit tests against

* fix: some code cleanup in the helper functions

* feat: setup for the unit test suite

* chore: style fix

* chore: styling, unit test fixture

* chore: single letter var `h` refering to hanlde changed to `handle`

* fix: unused parameter in `test_injected_failure_is_reported_per_job()` removed

* fix: made the OutputSpec optional as it is not suppoerted by all and a consumer should choose to use it or not

---------

Co-authored-by: alexander <alexander.auer@cern.ch>
alexander added 18 commits October 26, 2026 09:53
- Google-style docstrings with Args, Returns and Raises for resolve() and every registry and configuration helper, and docstrings for the settings classes; ruff now checks docstrings against the Google convention.
- Remove vm_max_lifetime_s: removing VMs after a lifetime is the consumer's policy, not interCEde's.
- Import Callable from collections.abc, like the rest of the code.
A verb says that the call builds something, and get_backend() no longer reads like the backend itself.
ARCConfig, HTCondorCEConfig, CloudConfig, BatchLocalConfig and BatchSSHConfig
replace the flat BackendConfig, which is now their union, chosen by kind (and
by transport for batch). A consumer can still pass a plain mapping, such as a
TOML table.

- Every field is declared once, on the model of its kind: the internal
  settings classes, the hand-kept field lists and resolve() are gone, so a
  configuration is validated once instead of twice.
- validate_config() checks a configuration and returns its model;
  registry.get_backend() uses it. A model is checked again, so one changed
  with model_copy() cannot carry fields of another transport to a backend.
- Errors never repeat a value they were given, since it may be a secret, and
  name the expected fields when a field does not belong to the kind.
- The configuration tests use the public API only.

The SSH auth mode is now one value (auth = "key") instead of a list.
griffe-pydantic renders every field of each configuration model, inherited
ones included, with its type, default and description, so the reference cannot
drift from the code like the hand-written table could.
The merge of stack/registry kept a helper and a section header from the old test_config.py; the helper referred to resolve() and BackendConfig.model_validate(), which no longer exist.
Brings in the per-kind configuration models of stack/registry, and moves the
credential code onto them:

- credential_requirements(config, scopes) in _backends/credentials.py replaces
  the methods on the removed internal settings classes, with the same rules:
  a CE asks for its endpoint with the configured token and/or proxy, SSH for
  user@host:port unless an SSH agent holds the key, and a local batch system
  for nothing.
- registry.get_backend(config, credentials) checks the provider and passes it
  to the parts that authenticate: single-class backends and transports.
- The credential requirement tests move from test_config.py to
  test_credentials.py and build their configurations through validate_config().
Two tests had moved without changing, which only made the diff harder to read.
# Conflicts:
#	src/intercede/_backends/fake.py
#	src/intercede/registry.py
#	tests/unit/conftest.py
#	tests/unit/test_registry.py
A value given by mistake, such as a misspelled field or plain data in a
CredentialSet, may be the secret itself. Validation errors now hide their
input, as the configuration models already do.
The message comes from the consumer's code and may hold a token or a
secret URL. The AuthenticationError names only its type; the exception
itself is still available as __cause__.
The fields were described in comments, which the generated reference does
not show. They now use attribute docstrings, as the configuration models do.
Name every argument and the return value, and drop the blank lines
before closing quotes.
alexander and others added 7 commits November 4, 2026 13:52
…only allow one credential type instead of combinations
…n, and removed auth value from config as it was not used
Moves test_fake_backend.py to tests/unit/backends/fake/, ready for the
HTCondor tests that follow. The tests themselves do not change.

Part of DIRACGrid#23.
Renders a submit description from a plan: one process per copy, per-copy
values indexed by ProcId, quoting, and refusing what a description cannot
hold. It sets no policy on the job except keeping finished jobs until they
are purged, so output can be collected again.

Shared with the HTCondor scheduler to come (DIRACGrid#21), so it knows nothing about
any backend. Expected values were checked against HTCondor 25.

Part of DIRACGrid#23.
Builds the tools' command lines and reads what they print: condor_submit
-terse, condor_rm, and the job ads of condor_q and condor_history, mapped
to the common JobStatus.

A finished job's result comes from its exit, a removed job keeps the result
it had, and any hold that interCEde did not cause counts as aborted.

Part of DIRACGrid#23.
interCEde no longer supports proxies, so a description has nothing to say about one.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant