open-source/qinglong
1
0
Fork 0
mirror of https://github.com/whyour/qinglong.git synced 2026-09-22 10:32:40 +08:00
Code Issues Packages Projects Releases Wiki Activity

feat(ql3): distribute copilot console via signed admin image

Browse Source
This commit is contained in:
whyour
2026-08-16 05:14:17 +08:00
parent c4a1238a92
commit fba8dfb602
22 changed files with 1176 additions and 29 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/ql3-cluster-admin/README.md
+7 -4
View File
@@ -16,10 +16,13 @@ Host/Origin, no-store responses and a closed CSP, renders model text only via
`textContent`, and keeps diagnose/cancel, polling, cache, WebSocket,
ServiceWorker and legacy session authority absent.
The reviewed operator-workstation setup, private-file ceremony, preflight and
session lifecycle are documented in
`deploy/console/ql3-cluster-copilot/README.md`. Do not expose the Console
through a container port mapping, Kubernetes workload or shared network.
The reviewed operator-workstation setup, private-file ceremony, release
verification, preflight and session lifecycle are documented in
`deploy/console/ql3-cluster-copilot/README.md`. Native execution binds host
loopback directly. The signed Admin OCI also carries an exact launcher which
uses a container-internal listener only with a fixed publication on host
`127.0.0.1`; arbitrary port mappings, Kubernetes workloads and shared-network
listeners remain forbidden.
The admin role can append Identity/API Credential mutations and their security
audit in one serializable transaction, and can perform bounded read-only audit