Core Concepts
Operators & Settings
Cargo Operators
Cargo Operators are self-hosted execution agents that run CodeCargo workloads in your own infrastructure. They connect back to the CodeCargo platform and can execute workflows in isolated environments under your control.
Enabling Self-Hosted Operators
Navigate to Organization Settings → Operators to manage your cargo operators. Before creating an operator, you must enable the self-hosted feature using the toggle at the top of the page. Enabling or disabling self-hosted operators requires confirmation.
Creating an Operator
- Click Create Cargo Operator
- Provide a name for the operator
- Optionally set an initial token expiration date
- Click Create
After creation, you receive an access token and setup instructions for deploying the operator to your Kubernetes cluster.
Operator List
The operators table shows:
| Column | Description |
|---|---|
| Name | Clickable link to the operator detail page |
| Access ID | Unique identifier for the operator |
| Status | Connected (green) or Disconnected (gray) |
| Created At | When the operator was registered |
Operator status is monitored in real time via NATS — the status badge updates automatically as operators connect and disconnect.
Operator Detail Page
Click an operator name to view its detail page.
Setup Instructions
If the operator is not yet connected, setup instructions are shown automatically. The instructions walk through three steps:
- Create Namespace & Secret — set up a Kubernetes namespace and store the access token as a secret
- Install Helm Chart — deploy the cargo operator using the CodeCargo Helm chart from the OCI registry
- Verify Connection — confirm the operator is connected using
kubectlcommands
Once connected, you can collapse the instructions and expand them again from the Setup Instructions button if needed.
Status Overview
A summary grid shows four key metrics:
- Status — Connected or Disconnected
- Access Tokens — number of tokens issued for this operator
- Active Instances — number of currently connected operator instances
- Created At — registration timestamp
Access Tokens & Instances
Each operator can have multiple access tokens. Tokens are grouped in the detail view, and each token shows:
- Short ID — truncated token identifier
- Status — Active (green), Expired (red), or Never Used (gray)
- Expiration — expiration date, or "Never expires"
- Instance count — how many operator instances are using this token
Expand a token to see its connected instances, each showing instance name, connection status, connected/disconnected timestamps, and when the token was last used.
Token Security
When you create a new access token, copy it immediately — it will not be displayed again. Store it securely as a Kubernetes secret or in your organization's secret manager.
You can add new tokens, edit expiration dates, and delete tokens (as long as at least one token remains) from the manage menu on each token.
Organization Settings
Navigate to Organization Settings from the sidebar to manage general organization configuration.
General Settings
- Default Permissions for Project — set the default role (Admin, Viewer, or None) that new users receive when added to projects in this organization
- Manage CodeCargo App — opens the GitHub App installation page to manage repository access
- Resync Organization — triggers a full resync of users, teams, and repositories from GitHub
Agents Configuration
Agents in CodeCargo are reusable system prompts that organization administrators define and make available to all users in the GenAI Editor chat. When a user starts a chat session, they can select an agent to shape how the AI responds — for example, an agent tuned for Terraform migrations, security reviews, or CI/CD pipeline authoring. Each agent provides domain-specific instructions so the AI produces more relevant and consistent output for that use case.
The Agents page under organization settings lets you create and manage these agents. Each agent has:
- Name — a human-readable identifier users see when selecting an agent in chat
- Instructions — markdown-formatted prompt instructions that guide the AI's behavior when this agent is selected
You can create, edit, and delete agents. Instructions support full GitHub-Flavored Markdown with a write/preview toggle for editing.
CargoWall Configuration
The CargoWall settings page lets you enable or disable CargoWall for AI/LLM jobs and manage rules that control network egress from CodeCargo's AI agents.
