添加 SPIRE JWT-SVID 冒烟测试

Merge pull request：实现首版 Gitea microVM runner
2026-09-16 13:29:04 +00:00 · 2026-09-16 13:11:39 +00:00
1 changed files with 33 additions and 0 deletions
@@ -0,0 +1,33 @@
+name: SPIRE identity smoke
+
+on:
+  workflow_dispatch:
+
+jobs:
+  jwt-svid:
+    runs-on: self-hosted
+    container:
+      volumes:
+        - /run/spire/agent-sockets:/run/spire/agent-sockets:ro
+    steps:
+      - name: Fetch pinned SPIRE CLI
+        shell: bash
+        run: |
+          set -euo pipefail
+          archive=/tmp/spire.tar.gz
+          curl --fail --location --silent --show-error \
+            --output "$archive" \
+            https://github.com/spiffe/spire/releases/download/v1.15.3/spire-1.15.3-linux-amd64-musl.tar.gz
+          printf '%s  %s\n' \
+            ca1a4d1155317bdd2afc7f36663828a10410c7c840e54725b90b4064b0a301c7 \
+            "$archive" | sha256sum --check --status
+          tar -xzf "$archive" -C /tmp spire-1.15.3/bin/spire-agent
+
+      - name: Fetch short-lived zot JWT-SVID
+        shell: bash
+        run: |
+          set -euo pipefail
+          /tmp/spire-1.15.3/bin/spire-agent api fetch jwt \
+            -audience zot \
+            -socketPath /run/spire/agent-sockets/spire-agent.sock \
+            >/dev/null
Author	SHA1	Message	Date
panxiao81	dfdcfd3b50	添加 SPIRE JWT-SVID 冒烟测试 test / shell (pull_request) Successful in 1m11s Details test / python (pull_request) Successful in 1m27s Details	2026-09-16 13:29:04 +00:00
panxiao81	917922882a	Merge pull request：实现首版 Gitea microVM runner test / shell (push) Successful in 18s Details test / python (push) Successful in 9s Details	2026-09-16 13:11:39 +00:00