升级动态 Runner 到 3.5.0 #10

Merged
panxiao81 merged 1 commits from fix/prebind-pod-identity into main 2026-09-16 15:58:19 +00:00
Owner

Runner 2.3.0 不支持 runner.hooks.job_started,会静默忽略配置,导致 workflow 第一步早于 in_progress identity binding,SPIRE 返回 no identity issued。

升级到官方最新稳定版 Runner 3.5.0,并固定镜像 digest。3.5.0 原生支持同步 job hooks,可以在实际任务被领取后、任意 workflow step 执行前等待对应 SVID,同时避免依据 queued webhook 提前授权。

验证:

  • 14 项单元测试通过
  • runner 镜像构建成功
  • 镜像内版本为 v3.5.0
  • config get runner.hooks.job_started 正确返回等待脚本路径
Runner 2.3.0 不支持 `runner.hooks.job_started`,会静默忽略配置,导致 workflow 第一步早于 `in_progress` identity binding,SPIRE 返回 `no identity issued`。 升级到官方最新稳定版 Runner 3.5.0,并固定镜像 digest。3.5.0 原生支持同步 job hooks,可以在实际任务被领取后、任意 workflow step 执行前等待对应 SVID,同时避免依据 queued webhook 提前授权。 验证: - 14 项单元测试通过 - runner 镜像构建成功 - 镜像内版本为 v3.5.0 - `config get runner.hooks.job_started` 正确返回等待脚本路径
panxiao81 added 1 commit 2026-09-16 15:57:36 +00:00
升级动态 Runner 到 3.5.0
test / python (pull_request) Successful in 9s
test / shell (pull_request) Successful in 15s
0dfdbd46c8
panxiao81 merged commit 33cbd23861 into main 2026-09-16 15:58:19 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/gitea-dynamic-runner#10