Leave identity headroom above a fleet's active ceiling
Leave identity headroom above a fleet's active ceiling When a controller gives each managed worker a name from a finite namespace, its active maximum is not the namespace maximum. Replacements can coexist with predecessors during draining, and failed creations can retain names. …