6017b4a117
perf(egress-proxy): hostNetwork benchmark acceptance + single-active benchmark guard for #1077
...
Document the per-target egressProxy.hostNetwork YAML option and the
real-deps-500m production-ready throughput acceptance profile in
docs/reference/platform-infra.md, and add a single-active guard to the
k3s-build-benchmark start path so a new run deletes any prior target+profile
Job before applying the new one (preventing concurrent runs from making
status report the wrong Job, observed during #1077 regression on D518).
Basis: merges PR #1065 (real k3s dependency proxy benchmark + hostNetwork
egress proxy) as the production-ready scaffold; validated on D601 and D518
with real-deps-500m (both succeeded, apk=1231/npm=850/go=693/real_deps=2774
MiB, proxyserver cumulative 2.4 GiB / 10 GiB).
2026-06-26 19:05:08 +00:00
a75c2da56b
feat: add egress proxy traffic sampling
2026-06-26 12:11:38 +00:00
d1c189e498
docs: clarify sub2api multi-target public exposure ( #968 )
...
Co-authored-by: Codex <codex@noreply.local >
2026-06-26 12:35:47 +08:00
922f8f3f63
docs: record Sub2API D601 proxy runbook ( #844 )
...
Co-authored-by: Codex <codex@noreply.local >
2026-06-25 00:58:54 +08:00
ceb3fb4627
docs: converge trans shell examples
2026-06-15 05:25:59 +00:00
d6638655cc
fix: bind protected sub2api manual accounts to pool group
2026-06-14 14:55:34 +00:00
e3a953fcbb
docs: record Sub2API manual account proxy binding
2026-06-14 12:57:48 +00:00
128d406e6e
docs: record wechat archive blocker handling
2026-06-13 23:42:30 +00:00
c324200ecf
docs: document shared PK01 Caddy blocks
2026-06-13 14:26:15 +00:00
5574150c64
config: use D601 k3s namespace for WeChat collector
2026-06-13 12:06:51 +00:00
d7def22a3b
docs: add personal WeChat WCF ingress config
2026-06-13 11:45:40 +00:00
8008a4977d
docs: clarify sub2api sentinel restore authority
2026-06-13 10:22:15 +00:00
e78cc9a16d
fix: default codex sentinel protect retries
2026-06-13 06:57:35 +00:00
f4bfcb04e4
Merge remote-tracking branch 'origin/master' into fix/langbot-cli-n8n-binding
...
# Conflicts:
# AGENTS.md
2026-06-13 06:38:06 +00:00
16b8489e28
docs: document compromised secret rotation
2026-06-13 06:36:06 +00:00
37f48d4655
feat: enforce read-only wechat archive ingestion
2026-06-13 06:22:04 +00:00
501455d918
docs: document sub2api sentinel protect policy
2026-06-13 05:37:18 +00:00
c818d0cd44
feat: wire wechat archive through langbot and n8n
2026-06-13 04:32:52 +00:00
5a7afb5236
chore: make sub2api d601 primary
2026-06-13 04:01:57 +00:00
e47eca77ab
docs: codify yaml secret distribution principle
2026-06-13 03:09:11 +00:00
c08f307441
feat: add platform secret distribution cli
2026-06-13 02:49:51 +00:00
20b423d108
feat: add wechat baidu archive workflow
2026-06-13 00:51:17 +00:00
91b6c10d3d
feat: deploy n8n as platform infra service
2026-06-12 17:20:49 +00:00
cd025b6c84
docs: capture langbot platform infra rules
2026-06-12 16:44:36 +00:00
021e1f6ba9
feat: add platform-infra langbot service
2026-06-12 16:05:27 +00:00
c23d9b5ea0
feat: activate D601 sub2api external edge
2026-06-12 07:56:46 +00:00
9e8197e2cc
fix: use PK01 public PostgreSQL endpoint
2026-06-12 05:37:16 +00:00
b774e8d278
feat(platform-infra): add d601 sub2api standby target
2026-06-12 04:51:16 +00:00
5b8b3e50d3
fix: harden sub2api codex pool failover
2026-06-11 20:09:04 +00:00
01b19d9238
fix: disable sub2api builtin temp unschedulable
2026-06-11 16:03:06 +00:00
204a7570b7
docs: document sub2api sentinel trust cadence
2026-06-11 14:02:53 +00:00
ea92eed148
fix: add sub2api edge retry
2026-06-11 12:02:08 +00:00
73d9c2332b
docs: clarify config validation and test policy
2026-06-11 10:48:11 +00:00
9f85274da0
fix: gate changed sub2api accounts behind sentinel probes
2026-06-11 10:20:41 +00:00
0bef6e577a
feat: add marker-only sub2api sentinel reporting
2026-06-11 08:40:43 +00:00
27f6e4812a
docs: record sub2api timeout closeout and agentrun cli updates
2026-06-11 03:31:53 +00:00
20dda46e03
fix: manage platform-infra network policy
2026-06-10 16:12:34 +00:00
cdf7909f1c
docs: add k3s NetworkPolicy requirement for platform-infra
...
G14 k3s kube-router generates per-pod REJECT chains when any
NetworkPolicy CRD exists; without an allow-all policy in the
namespace, cross-pod traffic (Sub2API→PostgreSQL, Sub2API→Redis)
is silently blocked. Document the required allow-all NetworkPolicy
and diagnostic symptoms for future reference.
Ref: pikasTech/unidesk#254
2026-06-10 15:55:10 +00:00
375117271a
fix: harden sub2api codex pool sync controls
2026-06-10 13:26:31 +00:00
2485591138
docs: record sub2api codex pool long-run control path
2026-06-10 13:23:49 +00:00
5199f3f578
docs: document sub2api owner concurrency floor
2026-06-10 12:49:26 +00:00
0afc927d88
fix: cool sub2api upstream 400 responses failures
2026-06-10 11:35:44 +00:00
0b416bd388
docs: codify Sub2API upstream capability boundary
2026-06-10 09:50:47 +00:00
008a7d1361
test: validate Sub2API 2xx reclassification
2026-06-10 08:14:34 +00:00
3f55f2508b
Merge remote-tracking branch 'origin/master'
2026-06-10 07:54:19 +00:00
b78bb2c306
docs: track sub2api 2xx classification gap
2026-06-10 07:54:19 +00:00
38283fb413
fix: extend Sub2API compact proxy timeout
2026-06-10 07:49:47 +00:00
8735b4103c
fix: add compact timeout cooldown evidence
2026-06-10 07:42:21 +00:00
c0dde9d0e3
feat: add sub2api codex upstream profiles
2026-06-10 04:02:28 +00:00
6cc3cdc597
fix: disable unstable Sub2API Codex WS transport
2026-06-10 03:43:08 +00:00
Codex