Commit Graph

202 Commits

Author SHA1 Message Date
lyon 064773c96b fix: tune v03 edge proxy health probe budget 2026-06-18 00:53:38 +08:00
lyon 2afdb2d9ea fix: tune v03 cloud api health probe budget 2026-06-18 00:19:09 +08:00
lyon 191b785944 fix: bound workbench turn status refresh 2026-06-17 23:15:58 +08:00
lyon fe0cf433af fix: scope runtime readiness to rollout services 2026-06-17 22:50:21 +08:00
lyon 0c474007e5 fix: track gitops render source in runtime readiness 2026-06-17 22:42:40 +08:00
lyon e22b0171eb fix: render runtime service declaration env 2026-06-17 22:30:55 +08:00
lyon 0a388e8c52 chore: bump v03 observability runtime config 2026-06-17 22:16:09 +08:00
lyon 6a24c0f193 fix: label v03 workbench metrics namespace 2026-06-17 21:51:45 +08:00
lyon 62cc77b10b fix: harden user-billing login transient handling 2026-06-17 00:33:48 +08:00
Lyon 0cd238c795 fix: extend edge trace idle timeout (#1346) 2026-06-16 22:50:25 +08:00
lyon d70390bf07 fix: authenticate agentrun provider delegation 2026-06-14 04:25:14 +08:00
lyon c71de6830f fix: restore v03 admin crud parity 2026-06-14 03:34:41 +08:00
Lyon 3f8fc6b80c feat: connect cloud api code agent billing (#1139) 2026-06-13 20:19:07 +08:00
Lyon 032857361f fix: disable cgo for user billing runtime (#1135) 2026-06-13 18:17:53 +08:00
Lyon ea3b26b895 fix: scope Go envreuse packages to Go services (#1131) 2026-06-13 16:22:21 +08:00
Lyon 0edcf9e588 feat: add v03 user billing service (#1128) 2026-06-13 14:26:37 +08:00
Codex Agent 1b026d01c4 fix: use external postgres for v0.3 runtime lane 2026-06-09 10:05:49 +08:00
Codex Agent a15dffeb90 fix: allow v0.3 frp ports 2026-06-09 08:50:47 +08:00
Codex Agent bdc90fb294 fix: align v0.3 public ports 2026-06-09 03:13:32 +08:00
Codex Agent 187fb80a5d refactor: make v0.3 runtime node-scoped 2026-06-08 22:19:30 +08:00
Codex Agent 1ce1a40292 refactor: model runtime lanes by node config 2026-06-08 17:44:25 +08:00
Codex Agent f4b6c12488 Configure runtime lane download stack 2026-06-08 15:39:17 +08:00
Codex Agent 6c5166d816 Add HWLAB v0.3 lane expansion config 2026-06-08 14:08:18 +08:00
Codex Agent a5f38a95ee docs: document v02 deploy yaml source 2026-06-08 13:21:26 +08:00
Codex Agent 435ce50f11 fix: refresh full trace aggregates in caserun 2026-06-08 13:14:53 +08:00
Codex Agent e17d7f92b2 docs: use deploy config reader in smoke example 2026-06-08 12:40:05 +08:00
Codex Agent 8bbad10a01 fix: finish deploy yaml config cleanup 2026-06-08 12:35:31 +08:00
Codex Agent 7021c693be docs: align v02 deploy config references 2026-06-08 12:22:54 +08:00
Codex Agent 916838bde4 feat: update caserun aggregation and v02 deploy config 2026-06-08 12:21:09 +08:00
Codex Agent 18bdaf313f fix: launch v02 bridge containers with env reuse 2026-06-07 21:49:54 +08:00
Codex Agent 1b76fb3760 fix: enable v02 env reuse for runtime services 2026-06-07 21:26:07 +08:00
Codex Agent a94b76b94c fix: keep Cloud Web alive on client disconnect 2026-06-06 13:34:34 +08:00
Codex Agent a3ffd45e55 fix: enforce api key auth boundary 2026-06-05 21:58:16 +08:00
Codex Agent 3e7131f6ab refactor: converge hwpod node-ops channel 2026-06-05 17:23:56 +08:00
Codex Agent d6769bf1d3 fix: remove v02 authorization residue 2026-06-05 14:00:13 +08:00
Codex Agent fd1b8c0e5a fix(v02): remove legacy code agent control plane 2026-06-05 01:35:35 +08:00
Codex Agent e64ee92fb1 fix(v0.2): align Keycloak auth to HTTPS session API key 2026-06-04 15:01:30 +08:00
Codex Agent e70dab1f88 fix(v02): wire Keycloak OIDC runtime 2026-06-04 15:01:30 +08:00
Codex Agent 36b264f212 fix(keycloak): use supported admin bootstrap env 2026-06-04 15:01:30 +08:00
Codex 4d48db9e7c feat(hwlab-cli): client auth oidc-login returns Keycloak authorize URL 2026-06-04 15:01:30 +08:00
Codex 6b93ebd0ef fix(k8s): keycloak admin bootstrap Job - simpler mount and script 2026-06-04 15:01:30 +08:00
Codex 0370135a35 feat(k8s+tests): keycloak bootstrap Job + AgentRun actor trace tests
- new deploy/k8s/keycloak/keycloak-bootstrap-job.yaml: one-shot Job that waits for Keycloak, authenticates as admin, creates hwlab realm + hwlab-cloud-web OIDC client via REST API
- secret hwlab-cloud-web-client holds the OIDC client_secret used by cloud-api
- kustomization.yaml picks up the new Job and Secret
- access-control.test.ts: cloud api AgentRun trace records real actor.userId from OIDC-upserted user (issue 788 spec)
- access-control.test.ts: cloud api /v1/users/me returns actor with authMethod=api-key for HWLAB_API_KEY Bearer token
- 31 pass / 4 pre-existing fail
2026-06-04 15:01:30 +08:00
Codex 1ba5103d33 fix(k8s): add --bootstrap-admin-username/password CLI args to keycloak 2026-06-04 15:01:30 +08:00
Codex ca5ff418dd feat(k8s): keycloak namespace manifests + apply on G14
- new deploy/k8s/keycloak/ kustomization with namespace, keycloak-postgres StatefulSet, keycloak Deployment
- keycloak Deployment uses quay.io/keycloak/keycloak:25.0 with --hostname-strict=false, postgres backend
- PVC data-keycloak-postgres-0 (5Gi local-path) bound to the StatefulSet
- secrets keycloak-postgres / keycloak-admin provisioned in keycloak namespace
- OIDC discovery endpoint confirmed reachable via port-forward; master realm issuer http://.../realms/master
- next round will provision the hwlab realm + OIDC client
2026-06-04 15:01:30 +08:00
Codex bacfa24289 fix: replace device pod lease with api key 2026-06-02 18:11:32 +08:00
Codex 0fb8004896 fix: reuse agent worker env image in v02 ci 2026-06-01 22:29:54 +08:00
Codex 3d10fd275b feat: 接入 AgentRun v0.1 adapter 2026-06-01 17:06:11 +08:00
Codex ca714bfa27 fix: 优化 device-pod CLI 短入口 2026-05-31 19:16:17 +08:00
Codex ff5da23083 fix: checkout env reuse runtime from source refs 2026-05-31 15:50:02 +08:00
Codex 89b83465e4 fix: add cloud web env reuse runtime 2026-05-31 14:37:28 +08:00