修复只读根文件系统下的服务账号令牌挂载

Merge pull request：统一动态 Runner 命名并记录协议调度路线
2026-09-16 15:18:21 +00:00 · 2026-09-16 14:54:44 +00:00
1 changed files with 3 additions and 1 deletions
@@ -7,7 +7,9 @@ COPY src ./src
 RUN python -m venv /venv && /venv/bin/pip install --no-cache-dir .

 FROM python:3.12.11-alpine3.22
-RUN addgroup -S -g 65532 runner && adduser -S -D -H -u 65532 -G runner runner
+RUN addgroup -S -g 65532 runner \
+    && adduser -S -D -H -u 65532 -G runner runner \
+    && install -d -o 65532 -g 65532 /var/run/secrets/kubernetes.io/serviceaccount
 COPY --from=build /venv /venv
 COPY --from=spire /opt/spire/bin/spire-agent /opt/spire/bin/spire-agent
 USER 65532:65532
Author	SHA1	Message	Date
panxiao81	3ec528623a	修复只读根文件系统下的服务账号令牌挂载 test / python (pull_request) Successful in 10s Details test / shell (pull_request) Successful in 21s Details	2026-09-16 15:18:21 +00:00
panxiao81	11669ea81a	Merge pull request：统一动态 Runner 命名并记录协议调度路线 test / python (push) Successful in 9s Details test / shell (push) Successful in 17s Details	2026-09-16 14:54:44 +00:00