Users, roles, and permissions
Use user, role, menu, and API permissions to define access. Separate viewing results, editing policies, and authorizing execution. Grant machine credentials minimal permissions for their purpose.
Directory authentication
Configure LDAP under System → System parameters: connection, user and group queries, role mapping, checks, and synchronization. LDAPS / StartTLS settings are supported. Local accounts keep local authentication for emergency access.
Tasks and global settings
The task center manages schedules and execution records. Review inputs and errors before retrying. Global settings hold safety gates, look-ahead controls, and defaults; modules hold workload-specific policies and bounds.
Storage and display time
Store timestamps in UTC. The platform defaults to UTC+8, configurable through KUBE_RES_FORESIGHT_TIMEZONE for logs, database sessions, and new module schedules. Pages display UTC+8 regardless of browser timezone. Schedule intervals use explicit IANA timezones.
Logs, retention, and export
Login logs record authentication; operation logs track configuration and exports. Recommendation, execution, admission, and degradation records explain resource changes. Set retention for review needs and back up both the database and stable encryption key.
Control history and admission record volume
Set forecast.history_retention_days to override history retention; the default 0 keeps each record type's built-in period. forecast.evaluation_max_per_module keeps the latest 20,000 measured evaluations per module by default, with a minimum of 100.
Admission calls need request_uid to create records, with deduplication by UID. With revision information, admission records creation and the first Pod of each new revision. Later scaling or replacement Pods are processed normally without individual records. Enable forecast.admission_record_scaling to include them. Calls with a UID but no revision information continue to be recorded individually.
AI configuration and notifications
assistant.enabled controls the chat entry. AI configuration manages LLM connections, skills, and scheduled tasks. Grant their menu permissions separately from assistant:chat.
Email uses notify.email.* under notification settings. Check the model connection, user email, and SMTP; inspect task results through task records and the task center.