feat: separate scheduler lanes for iceberg, lifecycle, and volume management (#8787)

* feat: introduce scheduler lanes for independent per-workload scheduling

Split the single plugin scheduler loop into independent per-lane
goroutines so that volume management, iceberg compaction, and lifecycle
operations never block each other.

Each lane has its own:
- Goroutine (laneSchedulerLoop)
- Wake channel for immediate scheduling
- Admin lock scope (e.g. "plugin scheduler:default")
- Configurable idle sleep duration
- Loop state tracking

Three lanes are defined:
- default: vacuum, volume_balance, ec_balance, erasure_coding, admin_script
- iceberg: iceberg_maintenance
- lifecycle: s3_lifecycle (new, handler coming in a later commit)

Job types are mapped to lanes via a hardcoded map with LaneDefault as
the fallback. The SchedulerJobTypeState and SchedulerStatus types now
include a Lane field for API consumers.

* feat: per-lane execution reservation pools for resource isolation

Each scheduler lane now maintains its own execution reservation map
so that a busy volume lane cannot consume execution slots needed by
iceberg or lifecycle lanes. The per-lane pool is used by default when
dispatching jobs through the lane scheduler; the global pool remains
as a fallback for the public DispatchProposals API.

* feat: add per-lane scheduler status API and lane worker UI pages

- GET /api/plugin/lanes returns all lanes with status and job types
- GET /api/plugin/workers?lane=X filters workers by lane
- GET /api/plugin/scheduler-states?lane=X filters job types by lane
- GET /api/plugin/scheduler-status?lane=X returns lane-scoped status
- GET /plugin/lanes/{lane}/workers renders per-lane worker page
- SchedulerJobTypeState now includes a "lane" field

The lane worker pages show scheduler status, job type configuration,
and connected workers scoped to a single lane, with links back to
the main plugin overview.

* feat: add s3_lifecycle worker handler for object store lifecycle management

Implements a full plugin worker handler for S3 lifecycle management,
assigned to the new "lifecycle" scheduler lane.

Detection phase:
- Reads filer.conf to find buckets with TTL lifecycle rules
- Creates one job proposal per bucket with active lifecycle rules
- Supports bucket_filter wildcard pattern from admin config

Execution phase:
- Walks the bucket directory tree breadth-first
- Identifies expired objects by checking TtlSec + Crtime < now
- Deletes expired objects in configurable batches
- Reports progress with scanned/expired/error counts
- Supports dry_run mode for safe testing

Configurable via admin UI:
- batch_size: entries per filer listing page (default 1000)
- max_deletes_per_bucket: safety cap per run (default 10000)
- dry_run: detect without deleting
- delete_marker_cleanup: clean expired delete markers
- abort_mpu_days: abort stale multipart uploads

The handler integrates with the existing PutBucketLifecycle flow which
sets TtlSec on entries via filer.conf path rules.

* feat: add per-lane submenu items under Workers sidebar menu

Replace the single "Workers" sidebar link with a collapsible submenu
containing three lane entries:
- Default (volume management + admin scripts) -> /plugin
- Iceberg (table compaction) -> /plugin/lanes/iceberg/workers
- Lifecycle (S3 object expiration) -> /plugin/lanes/lifecycle/workers

The submenu auto-expands when on any /plugin page and highlights the
active lane. Icons match each lane's job type descriptor (server,
snowflake, hourglass).

* feat: scope plugin pages to their scheduler lane

The plugin overview, configuration, detection, queue, and execution
pages now filter workers, job types, scheduler states, and scheduler
status to only show data for their lane.

- Plugin() templ function accepts a lane parameter (default: "default")
- JavaScript appends ?lane= to /api/plugin/workers, /job-types,
  /scheduler-states, and /scheduler-status API calls
- GET /api/plugin/job-types now supports ?lane= filtering
- When ?job= is provided (e.g. ?job=iceberg_maintenance), the lane is
  auto-derived from the job type so the page scopes correctly

This ensures /plugin shows only default-lane workers and
/plugin/configuration?job=iceberg_maintenance scopes to the iceberg lane.

* fix: remove "Lane" from lane worker page titles and capitalize properly

"lifecycle Lane Workers" -> "Lifecycle Workers"
"iceberg Lane Workers" -> "Iceberg Workers"

* refactor: promote lane items to top-level sidebar menu entries

Move Default, Iceberg, and Lifecycle from a collapsible submenu to
direct top-level items under the WORKERS heading. Removes the
intermediate "Workers" parent link and collapse toggle.

* admin: unify plugin lane routes and handlers

* admin: filter plugin jobs and activities by lane

* admin: reuse plugin UI for worker lane pages

* fix: use ServerAddress.ToGrpcAddress() for filer connections in lifecycle handler

ClusterContext addresses use ServerAddress format (host:port.grpcPort).
Convert to the actual gRPC address via ToGrpcAddress() before dialing,
and add a Ping verification after connecting.

Fixes: "dial tcp: lookup tcp/8888.18888: unknown port"

* fix: resolve ServerAddress gRPC port in iceberg and lifecycle filer connections

ClusterContext addresses use ServerAddress format (host:httpPort.grpcPort).
Both the iceberg and lifecycle handlers now detect the compound format
and extract the gRPC port via ToGrpcAddress() before dialing. Plain
host:port addresses (e.g. from tests) are passed through unchanged.

Fixes: "dial tcp: lookup tcp/8888.18888: unknown port"

* align url

* Potential fix for code scanning alert no. 335: Incorrect conversion between integer types

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* fix: address PR review findings across scheduler lanes and lifecycle handler

- Fix variable shadowing: rename loop var `w` to `worker` in
  GetPluginWorkersAPI to avoid shadowing the http.ResponseWriter param
- Fix stale GetSchedulerStatus: aggregate loop states across all lanes
  instead of reading never-updated legacy schedulerLoopState
- Scope InProcessJobs to lane in GetLaneSchedulerStatus
- Fix AbortMPUDays=0 treated as unset: change <= 0 to < 0 so 0 disables
- Propagate listing errors in lifecycle bucket walk instead of swallowing
- Implement DeleteMarkerCleanup: scan for S3 delete marker entries and
  remove them
- Implement AbortMPUDays: scan .uploads directory and remove stale
  multipart uploads older than the configured threshold
- Fix success determination: mark job failed when result.errors > 0
  even if no fatal error occurred
- Add regression test for jobTypeLaneMap to catch drift from handler
  registrations

* fix: guard against nil result in lifecycle completion and trim filer addresses

- Guard result dereference in completion summary: use local vars
  defaulting to 0 when result is nil to prevent panic
- Append trimmed filer addresses instead of originals so whitespace
  is not passed to the gRPC dialer

* fix: propagate ctx cancellation from deleteExpiredObjects and add config logging

- deleteExpiredObjects now returns a third error value when the context
  is canceled mid-batch; the caller stops processing further batches
  and returns the cancellation error to the job completion handler
- readBoolConfig and readInt64Config now log unexpected ConfigValue
  types at V(1) for debugging, consistent with readStringConfig

* fix: propagate errors in lifecycle cleanup helpers and use correct delete marker key

- cleanupDeleteMarkers: return error on ctx cancellation and SeaweedList
  failures instead of silently continuing
- abortIncompleteMPUs: log SeaweedList errors instead of discarding
- isDeleteMarker: use ExtDeleteMarkerKey ("Seaweed-X-Amz-Delete-Marker")
  instead of ExtLatestVersionIsDeleteMarker which is for the parent entry
- batchSize cap: use math.MaxInt instead of math.MaxInt32

* fix: propagate ctx cancellation from abortIncompleteMPUs and log unrecognized bool strings

- abortIncompleteMPUs now returns (aborted, errors, ctxErr) matching
  cleanupDeleteMarkers; caller stops on cancellation or listing failure
- readBoolConfig logs unrecognized string values before falling back

* fix: shared per-bucket budget across lifecycle phases and allow cleanup without expired objects

- Thread a shared remaining counter through TTL deletion, delete marker
  cleanup, and MPU abort so the total operations per bucket never exceed
  MaxDeletesPerBucket
- Remove early return when no TTL-expired objects found so delete marker
  cleanup and MPU abort still run
- Add NOTE on cleanupDeleteMarkers about version-safety limitation

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

weed/admin/plugin/plugin_scheduler.go

@@ -48,7 +48,9 @@ type schedulerPolicy struct {
 	ExecutorReserveBackoff time.Duration
 }
 
-func (r *Plugin) schedulerLoop() {
+// laneSchedulerLoop is the main scheduling goroutine for a single lane.
+// Each lane runs independently with its own timing, lock scope, and wake channel.
+func (r *Plugin) laneSchedulerLoop(ls *schedulerLaneState) {
 	defer r.wg.Done()
 	for {
 		select {
@@ -57,16 +59,16 @@ func (r *Plugin) schedulerLoop() {
 		default:
 		}
 
-		hadJobs := r.runSchedulerIteration()
-		r.recordSchedulerIterationComplete(hadJobs)
+		hadJobs := r.runLaneSchedulerIteration(ls)
+		r.recordLaneIterationComplete(ls, hadJobs)
 
 		if hadJobs {
 			continue
 		}
 
-		r.setSchedulerLoopState("", "sleeping")
-		idleSleep := defaultSchedulerIdleSleep
-		if nextRun := r.earliestNextDetectionAt(); !nextRun.IsZero() {
+		r.setLaneLoopState(ls, "", "sleeping")
+		idleSleep := LaneIdleSleep(ls.lane)
+		if nextRun := r.earliestLaneDetectionAt(ls.lane); !nextRun.IsZero() {
 			if until := time.Until(nextRun); until <= 0 {
 				idleSleep = 0
 			} else if until < idleSleep {
@@ -82,7 +84,7 @@ func (r *Plugin) schedulerLoop() {
 		case <-r.shutdownCh:
 			timer.Stop()
 			return
-		case <-r.schedulerWakeCh:
+		case <-ls.wakeCh:
 			if !timer.Stop() {
 				<-timer.C
 			}
@@ -92,7 +94,90 @@ func (r *Plugin) schedulerLoop() {
 	}
 }
 
+// schedulerLoop is kept for backward compatibility; it delegates to
+// laneSchedulerLoop with the default lane. New code should not call this.
+func (r *Plugin) schedulerLoop() {
+	ls := r.lanes[LaneDefault]
+	if ls == nil {
+		ls = newLaneState(LaneDefault)
+	}
+	r.laneSchedulerLoop(ls)
+}
+
+// runLaneSchedulerIteration runs one scheduling pass for a single lane,
+// processing only the job types assigned to that lane.
+func (r *Plugin) runLaneSchedulerIteration(ls *schedulerLaneState) bool {
+	r.expireStaleJobs(time.Now().UTC())
+
+	allJobTypes := r.registry.DetectableJobTypes()
+	// Filter to only job types belonging to this lane.
+	var jobTypes []string
+	for _, jt := range allJobTypes {
+		if JobTypeLane(jt) == ls.lane {
+			jobTypes = append(jobTypes, jt)
+		}
+	}
+	if len(jobTypes) == 0 {
+		r.setLaneLoopState(ls, "", "idle")
+		return false
+	}
+
+	r.setLaneLoopState(ls, "", "waiting_for_lock")
+	lockName := fmt.Sprintf("plugin scheduler:%s", ls.lane)
+	releaseLock, err := r.acquireAdminLock(lockName)
+	if err != nil {
+		glog.Warningf("Plugin scheduler [%s] failed to acquire lock: %v", ls.lane, err)
+		r.setLaneLoopState(ls, "", "idle")
+		return false
+	}
+	if releaseLock != nil {
+		defer releaseLock()
+	}
+
+	active := make(map[string]struct{}, len(jobTypes))
+	hadJobs := false
+
+	for _, jobType := range jobTypes {
+		active[jobType] = struct{}{}
+
+		policy, enabled, err := r.loadSchedulerPolicy(jobType)
+		if err != nil {
+			glog.Warningf("Plugin scheduler [%s] failed to load policy for %s: %v", ls.lane, jobType, err)
+			continue
+		}
+		if !enabled {
+			r.clearSchedulerJobType(jobType)
+			continue
+		}
+		initialDelay := time.Duration(0)
+		if runInfo := r.snapshotSchedulerRun(jobType); runInfo.lastRunStartedAt.IsZero() {
+			initialDelay = 5 * time.Second
+		}
+		if !r.markDetectionDue(jobType, policy.DetectionInterval, initialDelay) {
+			continue
+		}
+
+		detected := r.runJobTypeIteration(jobType, policy)
+		if detected {
+			hadJobs = true
+		}
+	}
+
+	r.pruneSchedulerState(active)
+	r.pruneDetectorLeases(active)
+	r.setLaneLoopState(ls, "", "idle")
+	return hadJobs
+}
+
+// runSchedulerIteration is kept for backward compatibility. It runs a
+// single iteration across ALL job types (equivalent to the old single-loop
+// behavior). It is only used by the legacy schedulerLoop() fallback.
 func (r *Plugin) runSchedulerIteration() bool {
+	ls := r.lanes[LaneDefault]
+	if ls == nil {
+		ls = newLaneState(LaneDefault)
+	}
+	// For backward compat, the old function processes all job types.
 	r.expireStaleJobs(time.Now().UTC())
 
 	jobTypes := r.registry.DetectableJobTypes()
@@ -147,16 +232,38 @@ func (r *Plugin) runSchedulerIteration() bool {
 	return hadJobs
 }
 
-func (r *Plugin) wakeScheduler() {
+// wakeLane wakes the scheduler goroutine for a specific lane.
+func (r *Plugin) wakeLane(lane SchedulerLane) {
 	if r == nil {
 		return
 	}
-	select {
-	case r.schedulerWakeCh <- struct{}{}:
-	default:
+	if ls, ok := r.lanes[lane]; ok {
+		select {
+		case ls.wakeCh <- struct{}{}:
+		default:
+		}
 	}
 }
 
+// wakeAllLanes wakes all lane scheduler goroutines.
+func (r *Plugin) wakeAllLanes() {
+	if r == nil {
+		return
+	}
+	for _, ls := range r.lanes {
+		select {
+		case ls.wakeCh <- struct{}{}:
+		default:
+		}
+	}
+}
+
+// wakeScheduler wakes the lane that owns the given job type, or all lanes
+// if no job type is specified. Kept for backward compatibility.
+func (r *Plugin) wakeScheduler() {
+	r.wakeAllLanes()
+}
+
 func (r *Plugin) runJobTypeIteration(jobType string, policy schedulerPolicy) bool {
 	r.recordSchedulerRunStart(jobType)
 	r.clearWaitingJobQueue(jobType)
@@ -454,6 +561,7 @@ func (r *Plugin) ListSchedulerStates() ([]SchedulerJobTypeState, error) {
 		jobType := jobTypeInfo.JobType
 		state := SchedulerJobTypeState{
 			JobType:           jobType,
+			Lane:              string(JobTypeLane(jobType)),
 			DetectionInFlight: detectionInFlight[jobType],
 		}
 
@@ -573,6 +681,35 @@ func (r *Plugin) markDetectionDue(jobType string, interval, initialDelay time.Du
 	return true
 }
 
+// earliestLaneDetectionAt returns the earliest next detection time among
+// job types that belong to the given lane.
+func (r *Plugin) earliestLaneDetectionAt(lane SchedulerLane) time.Time {
+	if r == nil {
+		return time.Time{}
+	}
+
+	r.schedulerMu.Lock()
+	defer r.schedulerMu.Unlock()
+
+	var earliest time.Time
+	for jobType, nextRun := range r.nextDetectionAt {
+		if JobTypeLane(jobType) != lane {
+			continue
+		}
+		if nextRun.IsZero() {
+			continue
+		}
+		if earliest.IsZero() || nextRun.Before(earliest) {
+			earliest = nextRun
+		}
+	}
+
+	return earliest
+}
+
+// earliestNextDetectionAt returns the earliest next detection time across
+// all job types regardless of lane. Kept for backward compatibility and
+// the global scheduler status API.
 func (r *Plugin) earliestNextDetectionAt() time.Time {
 	if r == nil {
 		return time.Time{}
@@ -868,6 +1005,17 @@ func (r *Plugin) tryReserveExecutorCapacity(
 	executor *WorkerSession,
 	jobType string,
 	policy schedulerPolicy,
+) (func(), bool) {
+	return r.tryReserveExecutorCapacityForLane(executor, jobType, policy, JobTypeLane(jobType))
+}
+
+// tryReserveExecutorCapacityForLane reserves an execution slot on the
+// per-lane reservation pool so that lanes cannot starve each other.
+func (r *Plugin) tryReserveExecutorCapacityForLane(
+	executor *WorkerSession,
+	jobType string,
+	policy schedulerPolicy,
+	lane SchedulerLane,
 ) (func(), bool) {
 	if executor == nil || strings.TrimSpace(executor.WorkerID) == "" {
 		return nil, false
@@ -884,21 +1032,60 @@ func (r *Plugin) tryReserveExecutorCapacity(
 
 	workerID := strings.TrimSpace(executor.WorkerID)
 
-	r.schedulerExecMu.Lock()
-	reserved := r.schedulerExecReservations[workerID]
-	if heartbeatUsed+reserved >= limit {
+	ls := r.lanes[lane]
+	if ls == nil {
+		// Fallback to global reservations if lane state is missing.
+		r.schedulerExecMu.Lock()
+		reserved := r.schedulerExecReservations[workerID]
+		if heartbeatUsed+reserved >= limit {
+			r.schedulerExecMu.Unlock()
+			return nil, false
+		}
+		r.schedulerExecReservations[workerID] = reserved + 1
 		r.schedulerExecMu.Unlock()
+		release := func() { r.releaseExecutorCapacity(workerID) }
+		return release, true
+	}
+
+	ls.execMu.Lock()
+	reserved := ls.execRes[workerID]
+	if heartbeatUsed+reserved >= limit {
+		ls.execMu.Unlock()
 		return nil, false
 	}
-	r.schedulerExecReservations[workerID] = reserved + 1
-	r.schedulerExecMu.Unlock()
+	ls.execRes[workerID] = reserved + 1
+	ls.execMu.Unlock()
 
 	release := func() {
-		r.releaseExecutorCapacity(workerID)
+		r.releaseExecutorCapacityForLane(workerID, lane)
 	}
 	return release, true
 }
 
+// releaseExecutorCapacityForLane releases a reservation from the per-lane pool.
+func (r *Plugin) releaseExecutorCapacityForLane(workerID string, lane SchedulerLane) {
+	workerID = strings.TrimSpace(workerID)
+	if workerID == "" {
+		return
+	}
+
+	ls := r.lanes[lane]
+	if ls == nil {
+		r.releaseExecutorCapacity(workerID)
+		return
+	}
+
+	ls.execMu.Lock()
+	defer ls.execMu.Unlock()
+
+	current := ls.execRes[workerID]
+	if current <= 1 {
+		delete(ls.execRes, workerID)
+		return
+	}
+	ls.execRes[workerID] = current - 1
+}
+
 func (r *Plugin) releaseExecutorCapacity(workerID string) {
 	workerID = strings.TrimSpace(workerID)
 	if workerID == "" {