Open WebUI + AI Studio
Open WebUI is an extensible and user-friendly chat interface for large language models. In this build Open WebUI uses Yandex AI Studio as its backend: no models need to be hosted on the VM, requests are routed to the managed cloud service.
Out of the box you get AI Studio models via the regular model picker and AI Studio agents via a preinstalled pipe function.
Highlights
- No GPU or model storage required.
- Full catalog of AI Studio models via a familiar ChatGPT-like UI.
- Admin user is created automatically with a password stored in Lockbox.
- Flexible public-access modes: HTTPS with a self-signed certificate, HTTPS with a Yandex Certificate Manager certificate, or SSH tunnel only.
Use cases
- Chat with Yandex AI Studio models and agents.
- Text generation, summarization, programming assistance.
- Translation and language tasks.
- Integration with custom MCP servers and Workflows.
- Make sure you have a Network with at least one Subnet.
- In the management console, open Cloud Apps, find Open WebUI and click Use.
- Fill in the form:
- Application name and subnet.
- Admin name and email (the email is used as the login).
- Admin password: auto-generate or bind an existing Lockbox secret.
- Public-access mode.
- SSH access (optional).
- Click Install and wait for the deployment to finish.
- In Application Resources:
- The
webui_urloutput is the link to the web UI. - The auto-generated admin password is in the Lockbox secret referenced in the application outputs.
- The
- Open
webui_urland sign in with the admin email and password. Yandex AI Studio models are available via the model picker. - To use Yandex AI Studio agents:
- Go to Admin Panel → Functions → Yandex AI Studio Agents → Valves.
- Fill in
AGENT_IDSandAGENT_NAMES(comma-separated, with IDs and names matching by index). - Save and enable the function via the toggle.
Custom domain with a TLS certificate
To access Open WebUI via your own domain with a trusted certificate (no browser warnings), do this before installing the application:
- Delegate your domain to Yandex Cloud DNS: create a public DNS zone for your domain and set the Yandex Cloud nameservers at your registrar.
- In Yandex Certificate Manager, issue a managed Let’s Encrypt certificate for your name (e.g.
webui.example.com) using DNS validation via CNAME — Certificate Manager will show the required record; add it to your public DNS zone and wait for the certificate to reachISSUEDstatus. - When installing the application, choose HTTPS with a certificate from Certificate Manager in the Public access field and pick the issued certificate.
- After the deployment finishes, take the VM public IP from the application resources and add an
Arecordwebui.example.com → <public_ip>to your DNS zone. - Open Open WebUI at
https://webui.example.com. The certificate is renewed automatically in Certificate Manager; the VM periodically picks up the new version.
- Chat with Yandex AI Studio models and agents.
- Text generation and summarization.
- Programming assistance.
- Translation and language tasks.
- Integration with MCP and Workflows.
Yandex Cloud technical support is available 24/7. The types of requests you can submit and the appropriate response time depend on your pricing plan. You can switch to the paid support plan in the management console. Details on technical support terms.
Yandex Cloud does not provide technical support for the product itself. For product-related issues, please refer to the developer’s resources.
| Resource type | Quantity |
|---|---|
| Service account | 1 |
| Service account API key | 1 |
| Access rights for folder | 7 |
| VPC security group | 1 |
| VPC IP address | 1 |
| Virtual machine | 1 |
| Disk | 1 |
| Lockbox secrets | 2 |
| Lockbox secret versions | 2 |
| Access bindings for Lockbox secret | 2 |