新增 SPIFFE OpenBao 与 Nexus Actions

2026-09-21 03:28:20 +00:00
parent 6192a52a6a
commit b95289d5b0
6 changed files with 158 additions and 1 deletions
@@ -0,0 +1,16 @@
+name: SPIFFE OpenBao Login
+description: Exchange a JWT-SVID for a short-lived OpenBao token and revoke it in post
+inputs:
+  bao-address:
+    default: https://bao.ad.ddupan.top:8200
+  role:
+    description: Exact OpenBao jwt-spire role
+    required: true
+  audience:
+    default: openbao
+  socket-path:
+    default: /run/spire/agent-sockets/spire-agent.sock
+runs:
+  using: node20
+  main: dist/main.js
+  post: dist/post.js