mirrors/pikasTech-agentrun
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #270 from pikasTech/docs/runner-secretref-runtime
Pipelines as Code CI / agentrun-nc01-v02-ci-d99772d13c468432a33c8803af3e6970e9a3485f Success
Details

Browse Source 
docs: 固化 runner SecretRef 运行要求
This commit is contained in:
Lyon
2026-07-10 14:52:08 +08:00
committed by GitHub
parent 9d5feb9483 471f310985
commit d99772d13c
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/reference/spec-v01-agentrun-mgr.md
+1
View File
@@ -24,6 +24,7 @@
- Migration 必须在 readiness 前完成或显式 fail fast，不能以空 schema 静默启动。
- Provider credential、Codex auth/config、Postgres DSN 明文不进数据库、event、trace、日志或 CLI 输出。
- Manager 可以保存 SecretRef 和 credential source reference，但不得读取 provider Secret 值后存库。
- 手动 dispatch 与 durable dispatcher 必须共用部署 YAML 投影的 `AGENTRUN_RUNNER_API_KEY_SECRET_NAME` / `AGENTRUN_RUNNER_API_KEY_SECRET_KEY`；缺失时 manager 启动失败，不得从 Kubernetes Secret 反解或生成隐藏默认值。
- Kafka 发布在本阶段是 produce-only 可见性链路：manager 将 `createRun`、`createCommand`、`appendEvent`、`finishCommand` 和 `finishRun` 等 durable store 写入镜像到 `agentrun.event.v1`，schema 为 `agentrun.event.v1`。不得让 Kafka consumer 反向驱动 manager 状态，也不得把 HWLAB event 或 Codex stdio raw 混入该 topic。
## API 接口说明