feat(supervisor): forward per-VM network endpoint labels to compute runs

Add an optional network_labels field to the internal compute client's create
and restore request schemas and forward per-VM endpoint labels on both paths,
so a restored VM keeps the same labels as a freshly-booted one. Mirrors the
label the Kubernetes workload manager already sets on the run pod.

Author: 0ski

.server-changes/compute-network-labels.md

@@ -0,0 +1,6 @@
+---
+area: supervisor
+type: feature
+---
+
+Forward per-VM network endpoint labels to compute runs on create and restore.

apps/supervisor/src/index.ts

@@ -286,6 +286,7 @@ class ManagedSupervisor {
                 envId: message.environment.id,
                 orgId: message.organization.id,
                 projectId: message.project.id,
+                hasPrivateLink: message.organization.hasPrivateLink,
                 dequeuedAt: message.dequeuedAt,
               });
 

apps/supervisor/src/workloadManager/compute.ts

@@ -112,6 +112,14 @@ export class ComputeWorkloadManager implements WorkloadManager {
     // Strip image digest - resolve by tag, not digest
     const imageRef = stripImageDigest(opts.image);
 
+    // Per-VM network endpoint labels, applied to the VM's network endpoint so
+    // network policy can select it. Mirrors the label the Kubernetes workload
+    // manager sets on the run pod.
+    const networkLabels: Record<string, string> = {};
+    if (opts.hasPrivateLink) {
+      networkLabels.privatelink = opts.orgId;
+    }
+
     // Wide event: single canonical log line emitted in finally
     const event: Record<string, unknown> = {
       // High-cardinality identifiers
@@ -152,6 +160,9 @@ export class ComputeWorkloadManager implements WorkloadManager {
             deploymentVersion: opts.deploymentVersion,
             machine: opts.machine.name,
           },
+          ...(Object.keys(networkLabels).length > 0
+            ? { network_labels: networkLabels }
+            : {}),
         })
       );
 
@@ -276,6 +287,7 @@ export class ComputeWorkloadManager implements WorkloadManager {
     envId?: string;
     orgId?: string;
     projectId?: string;
+    hasPrivateLink?: boolean;
     dequeuedAt?: Date;
   }): Promise<boolean> {
     const metadata: Record<string, string> = {
@@ -288,6 +300,14 @@ export class ComputeWorkloadManager implements WorkloadManager {
       TRIGGER_WORKER_INSTANCE_NAME: this.opts.runner.instanceName,
     };
 
+    // Carry the same network endpoint labels onto the restored VM (mirror of
+    // the create path) so network policy keeps matching after a restore —
+    // without them a restored run would lose its policy-based egress.
+    const networkLabels: Record<string, string> = {};
+    if (opts.hasPrivateLink && opts.orgId) {
+      networkLabels.privatelink = opts.orgId;
+    }
+
     this.logger.verbose("restore request body", {
       snapshotId: opts.snapshotId,
       runnerId: opts.runnerId,
@@ -301,6 +321,9 @@ export class ComputeWorkloadManager implements WorkloadManager {
         metadata,
         cpu: opts.machine.cpu,
         memory_gb: opts.machine.memory,
+        ...(Object.keys(networkLabels).length > 0
+          ? { network_labels: networkLabels }
+          : {}),
       })
     );
 

internal-packages/compute/src/types.ts

@@ -42,6 +42,10 @@ export const InstanceCreateRequestSchema = z.object({
   cpu: z.number(),
   memory_gb: z.number(),
   metadata: z.record(z.unknown()).optional(),
+  // Per-VM endpoint labels applied to the VM's network endpoint for
+  // network-policy selection. Distinct from metadata, which is
+  // observability-only.
+  network_labels: z.record(z.string()).optional(),
 });
 export type InstanceCreateRequest = z.infer<typeof InstanceCreateRequestSchema>;
 
@@ -66,6 +70,10 @@ export const SnapshotRestoreRequestSchema = z.object({
   metadata: z.record(z.string()),
   cpu: z.number(),
   memory_gb: z.number(),
+  // Per-VM endpoint labels applied to the restored endpoint for network-policy
+  // selection. A restored VM must carry the same policy labels as a
+  // freshly-booted one or its egress allows are lost.
+  network_labels: z.record(z.string()).optional(),
 });
 export type SnapshotRestoreRequest = z.infer<typeof SnapshotRestoreRequestSchema>;