添加嵌套 CI 的 SPIRE JWT broker

2026-09-16 13:37:40 +00:00
parent 0785d9a403
commit 7c3cd6a921
5 changed files with 114 additions and 1 deletions
@@ -1,3 +1,5 @@
+FROM ghcr.io/spiffe/spire-agent:1.15.3@sha256:41b0dcd8b258a69db9e2768292a060766fb76fd866e4bc925849981ea1b825ff AS spire
+
 FROM python:3.12.11-alpine3.22 AS build
 WORKDIR /src
 COPY pyproject.toml README.md ./
@@ -7,6 +9,7 @@ RUN python -m venv /venv && /venv/bin/pip install --no-cache-dir .
 FROM python:3.12.11-alpine3.22
 RUN addgroup -S -g 65532 runner && adduser -S -D -H -u 65532 -G runner runner
 COPY --from=build /venv /venv
+COPY --from=spire /opt/spire/bin/spire-agent /opt/spire/bin/spire-agent
 USER 65532:65532
 EXPOSE 8787
 ENTRYPOINT ["/venv/bin/gitea-microvm-controller"]