mirror of
https://github.com/sredevopsorg/deepseek-kubernetes-sandbox.git
synced 2026-11-03 01:13:24 +00:00
3b70f179ac
* feat(repo)!: restructure around the dsh-harness image and one example per implementation
- the root Dockerfile is the primary artifact; versions.env is the single source of truth
- merge gateway-api/dsh-demo into examples/dsh-agents-as-a-service (manifests/, exposure variants)
- move the single-tenant template into examples/minimal-single-tenant
- publish the gateway as a nested package under the repository image
- mirror the DSH ref for release identities (first release dsh-v0.2.1-rc.2-r2)
- CI: lint/python/manifests/gateway-image, reusable multi-arch build, tag-driven release, weekly e2e
- docs: README, docs/{main-image,examples,gitflow,versioning}, example READMEs, AGENTS.md, governance
- SSO is opt-in again; gateway pull policy and cookie defaults match the documented demo
BREAKING CHANGE: example manifest paths, the gateway image name, and the removal
of deploy/ and gateway-api/ affect existing deployments; see the migration table
in README.md.
* docs(changelog): generate initial changelog from history
* fix(scripts): make set-version update Dockerfile and sample revision pins
* build(hadolint): document intentional lint exceptions for the main image
---------
Co-authored-by: SREDevOpsAgents <agents@sredevops.org>
36 lines
1.3 KiB
Plaintext
36 lines
1.3 KiB
Plaintext
# Copy to .env and fill in. Never commit a real key.
|
|
#
|
|
# The version values below are documentation only: versions.env is the single
|
|
# source of truth, and scripts/check-versions.sh fails if they drift.
|
|
|
|
# --- Main DSH Web image (root Dockerfile) ---
|
|
DEEPSEEK_API_KEY=
|
|
DSH_VERSION=dsh-v0.2.1-rc.2
|
|
RELEASE_REVISION=r2
|
|
PNPM_VERSION=11.28.5
|
|
# Container port, and the host port published by "make run".
|
|
DSH_PORT=3080
|
|
# Comma/space separated extra Host allow-list entries for DSH (for a proxy or
|
|
# public hostname). localhost and 127.0.0.1 are always trusted.
|
|
DSH_TRUSTED_HOSTS=
|
|
|
|
# --- agents-as-a-service example ---
|
|
NAMESPACE=dsh-demo
|
|
POOL=dsh-pool
|
|
# Seconds a sandbox may stay idle before the sweeper suspends it, and the max
|
|
# time a proxied request waits for a suspended sandbox to become Ready.
|
|
IDLE_TIMEOUT=360
|
|
WAKE_TIMEOUT=240
|
|
DSH_CONTAINER=dsh-web
|
|
DSH_LOG_TAIL_LINES=2000
|
|
COOKIE_NAME=dsh_gw_session
|
|
# Set to true only behind HTTPS; secure cookies are not sent over plain HTTP
|
|
# (localhost counts as a secure context in browsers).
|
|
COOKIE_SECURE=false
|
|
COOKIE_MAX_AGE=604800
|
|
MAX_BODY_MB=32
|
|
HTTP_TIMEOUT=300
|
|
# SSO is opt-in. Set this only when the gateway Service is reachable
|
|
# exclusively through oauth2-proxy (see the example exposure docs).
|
|
# AUTH_PROXY_HEADER=X-Forwarded-User
|