mirror of
https://github.com/QwenLM/qwen-code.git
synced 2026-11-07 06:19:43 -10:00
jinye
9ebd2de171
* feat(managed): add experimental Kubernetes Helm deployment * feat(managed): add trusted-node tools and dedicated WebShell gateway * test(web-shell): isolate Managed gateway in boot tests * docs(managed): clarify Kubernetes gateway requirements * fix(managed): align Helm workspace identity with runtime broker * fix(web-shell): keep managed permission rules key distinct * fix(managed): align Helm lint and web test boundaries * codex: address PR review feedback (#15492)
24 lines
1.0 KiB
Plaintext
24 lines
1.0 KiB
Plaintext
Managed Agent exposes a signed API.
|
|
{{ if .Values.runtime.enabled }}
|
|
Trusted single-node Workspace files and foreground Shell are enabled.
|
|
Close every tool Session and confirm physical holders are clear before replacing the Pod.
|
|
{{ else }}
|
|
Workspace tools are disabled.
|
|
{{ end }}
|
|
|
|
Connect locally:
|
|
kubectl -n {{ .Release.Namespace }} port-forward service/{{ .Release.Name }} 8080:8080
|
|
|
|
Run deploy/kubernetes/smoke.mjs with the signing key from Secret {{ include "managed-agent.secret" . }}.
|
|
See deploy/kubernetes/README.md for the command and upgrade procedure.
|
|
{{ if .Values.web.enabled }}
|
|
|
|
Connect to WebShell:
|
|
kubectl -n {{ .Release.Namespace }} port-forward service/{{ .Release.Name }} 4171:4171
|
|
Authenticate using web-token from Secret {{ include "managed-agent.secret" . }}.
|
|
The fixed browser identity is {{ .Values.web.tenantId }}/{{ .Values.web.actorId }}.
|
|
{{ end }}
|
|
|
|
Uninstall retains the managed Secret, MySQL PVC and any Runtime/Workspace PVCs. Back them up before upgrades.
|
|
Do not use automatic Helm rollback across database migrations.
|