fix: 保真渲染 AgentRun 多键工具凭据

config/agentrun.yaml

@@ -306,6 +306,10 @@ controlPlane:
           name: agentrun-v02-mgr-db
           key: DATABASE_URL
         localPostgresExpectedAbsent: true
+      toolCredentials:
+        - extends: controlPlane.templates.toolCredentials.githubPr
+        - extends: controlPlane.templates.toolCredentials.unideskSsh
+        - extends: controlPlane.templates.toolCredentials.githubSsh
       secrets:
         - id: manager-api-key
           sourceRef: hwlab/nc01-v03-admin.env
@@ -478,6 +482,8 @@ controlPlane:
             profile: dsflash-go
         - extends: controlPlane.templates.secrets.githubPrRawToken
         - extends: controlPlane.templates.secrets.unideskSshToken
+        - extends: controlPlane.templates.secrets.githubSshPrivateKey
+        - extends: controlPlane.templates.secrets.githubSshKnownHosts
       extends: controlPlane.templates.agentrunV02Lane
       variables:
         NODE: NC01
@@ -533,6 +539,46 @@ controlPlane:
         argoNamespace: argocd
         argoApplication: "${argoApplication}"
         repoURL: http://git-mirror-http.devops-infra.svc.cluster.local:8080/pikasTech/agentrun.git
+    toolCredentials:
+      githubPr:
+        id: github-pr
+        tool: github
+        purpose: github-pr
+        secretRef:
+          namespace: agentrun-v02
+          name: agentrun-v01-tool-github-pr
+          keys:
+            - GH_TOKEN
+        projection:
+          kind: env
+          envName: GH_TOKEN
+          secretKey: GH_TOKEN
+      unideskSsh:
+        id: unidesk-ssh
+        tool: unidesk-ssh
+        purpose: ssh-passthrough
+        secretRef:
+          namespace: agentrun-v02
+          name: agentrun-v01-tool-unidesk-ssh
+          keys:
+            - UNIDESK_SSH_CLIENT_TOKEN
+        projection:
+          kind: env
+          envName: UNIDESK_SSH_CLIENT_TOKEN
+          secretKey: UNIDESK_SSH_CLIENT_TOKEN
+      githubSsh:
+        id: github-ssh
+        tool: github
+        purpose: github-ssh
+        secretRef:
+          namespace: agentrun-v02
+          name: agentrun-v01-tool-github-ssh
+          keys:
+            - id_ed25519
+            - known_hosts
+        projection:
+          kind: volume
+          mountPath: /home/agentrun/.ssh
     secrets:
       githubPrRawToken:
         id: tool-github-pr-token
@@ -551,3 +597,19 @@ controlPlane:
           namespace: agentrun-v02
           name: agentrun-v01-tool-unidesk-ssh
           key: UNIDESK_SSH_CLIENT_TOKEN
+      githubSshPrivateKey:
+        id: tool-github-ssh-private-key
+        sourceMode: file
+        sourceRef: deploy-ssh/github.com/id_ed25519
+        targetRef:
+          namespace: agentrun-v02
+          name: agentrun-v01-tool-github-ssh
+          key: id_ed25519
+      githubSshKnownHosts:
+        id: tool-github-ssh-known-hosts
+        sourceMode: file
+        sourceRef: deploy-ssh/github.com/known_hosts
+        targetRef:
+          namespace: agentrun-v02
+          name: agentrun-v01-tool-github-ssh
+          key: known_hosts