Add D601 platform-infra secret plane PoC

This commit is contained in:
Codex
2026-06-27 08:59:35 +00:00
parent 9a5cc21393
commit a78fa346d0
4 changed files with 1328 additions and 2 deletions
File diff suppressed because it is too large Load Diff
+7 -2
View File
@@ -314,7 +314,7 @@ export interface ManagedResourceCleanupPlan {
export function platformInfraHelp(): unknown {
const target = sub2ApiHelpTargetSummary();
return {
command: "platform-infra sub2api|langbot|n8n|wechat-archive|observability ...",
command: "platform-infra sub2api|langbot|n8n|wechat-archive|observability|secret-plane ...",
output: "json",
usage: [
"bun scripts/cli.ts platform-infra sub2api plan [--target G14|D601]",
@@ -360,8 +360,13 @@ export function platformInfraHelp(): unknown {
"bun scripts/cli.ts platform-infra observability search --target D601 --grep 'no rollout found' [--lookback-minutes 360] [--candidate-limit 80] [--limit 20]",
"bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --business-trace-id <trc_...> [--full|--raw]",
"bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --run-id <run_...> [--command-id <cmd_...>] [--runner-job-id <rjob_...>]",
"bun scripts/cli.ts platform-infra secret-plane plan --target D601",
"bun scripts/cli.ts platform-infra secret-plane apply --target D601 --dry-run",
"bun scripts/cli.ts platform-infra secret-plane apply --target D601 --confirm",
"bun scripts/cli.ts platform-infra secret-plane status --target D601",
"bun scripts/cli.ts platform-infra secret-plane validate --target D601",
],
description: "Operate YAML-controlled platform-infra services such as Sub2API, LangBot, n8n, WeChat archive workflows and OpenTelemetry tracing. Public services use PK01 Caddy+FRP rather than Kubernetes Ingress, NodePort, or LoadBalancer.",
description: "Operate YAML-controlled platform-infra services such as Sub2API, LangBot, n8n, WeChat archive workflows, OpenTelemetry tracing and the independent D601 secret plane. Public services use PK01 Caddy+FRP rather than Kubernetes Ingress, NodePort, or LoadBalancer.",
target,
codexPool: {
usage: [
+4
View File
@@ -56,6 +56,10 @@ export async function runPlatformInfraCommand(config: UniDeskConfig, args: strin
const { runPlatformObservabilityCommand } = await import("../platform-infra-observability");
return await runPlatformObservabilityCommand(config, args.slice(1));
}
if (target === "secret-plane") {
const { runSecretPlaneCommand } = await import("../platform-infra-secret-plane");
return await runSecretPlaneCommand(config, args.slice(1));
}
if (target !== "sub2api") return unsupported(args);
if (action === "plan" || action === undefined) {
const planArgs = args.slice(2);