feat: Phase 1 completion — VSOCK guest agent, probes, Prometheus metrics, Helm monitors, Kind E2E

Author: syscod3

.github/workflows/ci.yml

@@ -7,7 +7,7 @@ on:
     branches: [main]
 
 env:
-  GO_VERSION: "1.24"
+  GO_VERSION: "1.25"
 
 jobs:
   lint:
@@ -105,3 +105,24 @@ jobs:
       - name: Cleanup
         if: always()
         run: talosctl cluster destroy --name imp-e2e
+
+  e2e-kind:
+    name: E2E (Kind)
+    runs-on: ubuntu-latest
+    needs: [lint, build]
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+
+      - uses: helm/kind-action@v1
+        with:
+          cluster_name: imp-e2e
+
+      - name: Install Helm
+        uses: azure/setup-helm@v4
+
+      - name: Run E2E tests
+        run: go test -tags e2e ./test/e2e/... -v -timeout 15m

api/v1alpha1/impvm_types.go

@@ -72,6 +72,10 @@ type ImpVMSpec struct {
 	// Probes override probe settings inherited from ImpVMTemplate or ImpVMClass.
 	// +optional
 	Probes *ProbeSpec `json:"probes,omitempty"`
+
+	// GuestAgent controls guest agent injection. Overrides defaults when set.
+	// +optional
+	GuestAgent *GuestAgentConfig `json:"guestAgent,omitempty"`
 }
 
 // UserDataSource references a ConfigMap containing cloud-init user-data.
@@ -97,6 +101,14 @@ type ImpVMStatus struct {
 	// +optional
 	RuntimePID int64 `json:"runtimePID,omitempty"`
 
+	// ScheduledAt is the time the VM was first assigned to a node.
+	// +optional
+	ScheduledAt *metav1.Time `json:"scheduledAt,omitempty"`
+
+	// RunningAt is the time the VM first reached Running phase.
+	// +optional
+	RunningAt *metav1.Time `json:"runningAt,omitempty"`
+
 	// Conditions follow the standard k8s condition convention.
 	// +optional
 	// +listType=map

api/v1alpha1/impvmclass_types.go

@@ -27,6 +27,10 @@ type ImpVMClassSpec struct {
 	// Can be overridden by ImpVMTemplate or ImpVM.
 	// +optional
 	Probes *ProbeSpec `json:"probes,omitempty"`
+
+	// GuestAgent controls guest agent injection. Overrides defaults when set.
+	// +optional
+	GuestAgent *GuestAgentConfig `json:"guestAgent,omitempty"`
 }
 
 // +kubebuilder:object:root=true

api/v1alpha1/impvmtemplate_types.go

@@ -18,6 +18,10 @@ type ImpVMTemplateSpec struct {
 	// Probes overrides probes inherited from the ImpVMClass.
 	// +optional
 	Probes *ProbeSpec `json:"probes,omitempty"`
+
+	// GuestAgent controls guest agent injection. Overrides defaults when set.
+	// +optional
+	GuestAgent *GuestAgentConfig `json:"guestAgent,omitempty"`
 }
 
 // +kubebuilder:object:root=true

api/v1alpha1/shared_types.go

@@ -89,6 +89,16 @@ const (
 	ArchMulti Arch = "multi"
 )
 
+// GuestAgentConfig controls guest agent injection into the VM rootfs.
+// When enabled (default), the node agent injects /.imp/guest-agent at boot,
+// enabling probes, env injection, and VM-side metrics.
+// Set enabled: false for bare VMs that prioritise fast boot over observability.
+type GuestAgentConfig struct {
+	// Enabled controls guest agent injection. Defaults to true when omitted.
+	// +optional
+	Enabled *bool `json:"enabled,omitempty"`
+}
+
 // HTTPCheckSpec configures the operator-side HTTP health check (opt-in).
 // Enabled per-VM via spec.probes.httpCheck or cluster-wide via ClusterImpConfig.spec.defaultHttpCheck.
 type HTTPCheckSpec struct {

api/v1alpha1/zz_generated.deepcopy.go

@@ -0,0 +1,13 @@
+version: v2
+managed:
+  enabled: true
+  override:
+    - file_option: go_package_prefix
+      value: github.com/syscode-labs/imp
+plugins:
+  - local: protoc-gen-go
+    out: internal/proto
+    opt: paths=source_relative
+  - local: protoc-gen-go-grpc
+    out: internal/proto
+    opt: paths=source_relative

buf.gen.yaml

@@ -0,0 +1,3 @@
+version: v2
+modules:
+  - path: internal/proto

buf.yaml

@@ -43,6 +43,10 @@ spec:
               fieldPath: spec.nodeName
         - name: FC_KERNEL
           value: {{ .Values.agent.env.kernelPath | required "agent.env.kernelPath is required" | quote }}
+        ports:
+        - name: metrics
+          containerPort: 9090
+          protocol: TCP
         resources:
           {{- toYaml .Values.agent.resources | nindent 10 }}
         securityContext:

charts/imp/templates/agent/daemonset.yaml

@@ -0,0 +1,21 @@
+{{- if .Values.metrics.podMonitor.enabled }}
+apiVersion: monitoring.coreos.com/v1
+kind: PodMonitor
+metadata:
+  name: {{ include "imp.fullname" . }}-agent
+  namespace: {{ .Release.Namespace }}
+  labels:
+    {{- include "imp.labels" . | nindent 4 }}
+    app.kubernetes.io/component: agent
+spec:
+  selector:
+    matchLabels:
+      {{- include "imp.selectorLabels" . | nindent 6 }}
+      app.kubernetes.io/component: agent
+  podMetricsEndpoints:
+    - port: metrics
+      interval: {{ .Values.metrics.podMonitor.interval | quote }}
+  namespaceSelector:
+    matchNames:
+      - {{ .Release.Namespace }}
+{{- end }}