kubesphere-devops-tenant

Operate KubeSphere DevOps pipelines within namespace-scoped tenant isolation.

17.0k|2.8k|Updated Apr 21, 2018
One-click install
npx skills add https://github.com/kubesphere/kubesphere --skill kubesphere-devops-tenant
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: kubesphere-devops-tenant
Source: https://github.com/kubesphere/kubesphere/tree/main/skills/kubesphere-devops-tenant
Command: npx skills add https://github.com/kubesphere/kubesphere --skill kubesphere-devops-tenant

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Enables namespace-scoped tenants to operate KubeSphere DevOps without cluster-admin access by using KubeSphere APIs.

Core Features & Use Cases

  • Tenant-focused DevOps operations within a single namespace, including pipeline management and runs via KubeSphere APIs.
  • Enforces isolation between tenants by using workspace/namespace-scoped endpoints and OAuth authentication.
  • Provides workflows to list pipelines, trigger runs, fetch logs and artifacts, and manage credentials in tenant contexts.

Quick Start

Authenticate via KubeSphere OAuth and start performing tenant-scoped DevOps tasks against the kapis/devops.kubesphere.io endpoints within your namespace.

Frequently Asked Questions about kubesphere-devops-tenant

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I trigger KubeSphere DevOps pipelines as a namespace tenant without cluster-admin access?

You can trigger KubeSphere DevOps pipelines as a namespace tenant by using KubeSphere APIs with OAuth-based authentication, which enforces workspace and namespace isolation without requiring cluster-admin access.

Can I retrieve pipeline logs and artifacts from KubeSphere DevOps as a non-admin user?

Yes, you can retrieve pipeline logs and artifacts from KubeSphere DevOps as a non-admin user by using the tenant-scoped kapis endpoints with OAuth authentication to maintain namespace isolation.

How does workspace and namespace isolation work for KubeSphere DevOps tenant operations?

Workspace and namespace isolation for KubeSphere DevOps tenant operations works by using workspace and namespace-scoped kapis endpoints with OAuth authentication, restricting tenant access to resources within their own namespace.

Do I need OAuth authentication to list pipelines and runs in KubeSphere DevOps?

Yes, you need OAuth authentication to list pipelines and runs in KubeSphere DevOps, as it secures the kapis endpoints and enforces namespace-scoped tenant isolation for pipeline management.

What KubeSphere DevOps tenant operations can I perform within a single namespace?

Within a single namespace, you can perform KubeSphere DevOps tenant operations including listing pipelines, triggering pipeline runs, fetching logs and artifacts, and managing credentials via the DevOps API.

Does the kubesphere-devops-tenant Skill support managing credentials for namespace-scoped pipelines?

Yes, the kubesphere-devops-tenant Skill supports managing credentials for namespace-scoped pipelines, allowing tenants to handle credential management in tenant contexts via KubeSphere DevOps APIs.