Add D601 platform-infra secret plane PoC

This commit is contained in:
Codex
2026-06-27 08:59:35 +00:00
parent 9a5cc21393
commit a78fa346d0
4 changed files with 1328 additions and 2 deletions
+7 -2
View File
@@ -314,7 +314,7 @@ export interface ManagedResourceCleanupPlan {
export function platformInfraHelp(): unknown {
const target = sub2ApiHelpTargetSummary();
return {
command: "platform-infra sub2api|langbot|n8n|wechat-archive|observability ...",
command: "platform-infra sub2api|langbot|n8n|wechat-archive|observability|secret-plane ...",
output: "json",
usage: [
"bun scripts/cli.ts platform-infra sub2api plan [--target G14|D601]",
@@ -360,8 +360,13 @@ export function platformInfraHelp(): unknown {
"bun scripts/cli.ts platform-infra observability search --target D601 --grep 'no rollout found' [--lookback-minutes 360] [--candidate-limit 80] [--limit 20]",
"bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --business-trace-id <trc_...> [--full|--raw]",
"bun scripts/cli.ts platform-infra observability diagnose-code-agent --target D601 --run-id <run_...> [--command-id <cmd_...>] [--runner-job-id <rjob_...>]",
"bun scripts/cli.ts platform-infra secret-plane plan --target D601",
"bun scripts/cli.ts platform-infra secret-plane apply --target D601 --dry-run",
"bun scripts/cli.ts platform-infra secret-plane apply --target D601 --confirm",
"bun scripts/cli.ts platform-infra secret-plane status --target D601",
"bun scripts/cli.ts platform-infra secret-plane validate --target D601",
],
description: "Operate YAML-controlled platform-infra services such as Sub2API, LangBot, n8n, WeChat archive workflows and OpenTelemetry tracing. Public services use PK01 Caddy+FRP rather than Kubernetes Ingress, NodePort, or LoadBalancer.",
description: "Operate YAML-controlled platform-infra services such as Sub2API, LangBot, n8n, WeChat archive workflows, OpenTelemetry tracing and the independent D601 secret plane. Public services use PK01 Caddy+FRP rather than Kubernetes Ingress, NodePort, or LoadBalancer.",
target,
codexPool: {
usage: [