coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Link Temporal UI from ops console; propose SSO access WP-0025
All checks were successful
CI Smoke / host-smoke (push) Successful in 1s
Details
CI Smoke / container-smoke (push) Successful in 5s
Details
Build and Publish Container Image / build-and-push (push) Successful in 1m45s
Details

Browse source 
Add nav/deep link to Temporal Web UI (configurable URL, default
127.0.0.1:8080 for port-forward). Document dual port-forward and draft
ACTIVITY-WP-0025 for Keycloak SSO ingress without port-forward.
This commit is contained in:
tegwick 2026-07-22 00:30:17 +02:00
parent 6c34e2c1f1
commit 7761acf86a
4 changed files with 283 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

22
docs/runbook.md
View file

@ -105,15 +105,31 @@ the UI** — change definition files and sync.
### Production access (railiance01)
API remains **ClusterIP** (no public Ingress in WP-0024).
API remains **ClusterIP** (no public Ingress in WP-0024; SSO planned in
ACTIVITY-WP-0025). Use the **hosteurope / railiance01** kubeconfig, not a local
empty cluster.
```bash
# From a machine with kubectl to railiance01:
export KUBECONFIG=~/.kube/config-hosteurope
# Ops console (activity-core API)
kubectl -n activity-core port-forward svc/actcore-api 8010:8010
# Browser: http://127.0.0.1:8010/ops/ui
# Ensure ACTIVITY_CORE_OPERATOR_TOKEN is set on actcore-api (runtime secret key).
# Temporal Web UI (second terminal — linked from ops nav as "Temporal UI")
kubectl -n activity-core port-forward svc/actcore-temporal-ui 8080:8080
# Browser: http://127.0.0.1:8080
```
Override the Temporal link target if needed:
```bash
# on actcore-api
ACTIVITY_CORE_TEMPORAL_UI_URL=http://127.0.0.1:8080
```
Ensure `ACTIVITY_CORE_OPERATOR_TOKEN` is set on actcore-api (runtime secret key).
Bootstrap token (operator workstation; never commit the value):
```bash