panxiao81/gitea-dynamic-runner
1
0
Fork 0
Code Issues 5 Pull Requests Actions Packages Projects Releases Wiki Activity

按 guest Agent 格式恢复 SPIRE 父身份 #26

Merged
panxiao81 merged 1 commits from fix/opensandbox-guest-parent into main 2026-09-18 18:56:51 +00:00
Conversation 0 Commits 1 Files Changed 3
+3 -3
panxiao81 commented 2026-09-18 18:55:51 +00:00
Owner
Copy Link
Copy Source

修复

真实 OpenSandbox Pod 的 guest SPIRE Agent 日志确认其 ID 为 spiffe://ddupan.top/spire/agent/k8s_psat/sandbox-kata/pod/<pod-uid>。homelab 常驻 agent 的无 /pod/ 格式不能用于 guest。

  • identity controller 恢复 /pod/<uid> parentID
  • 同步单元测试和 runbook

验证

  • pytest：20 passed
  • compileall、bash -n、git diff --check：passed
  • 线上证据：guest Agent attestation 日志包含 sandbox-kata/pod/<实际 Pod UID>

关联 homelab-infra #94、#102。

## 修复 真实 OpenSandbox Pod 的 guest SPIRE Agent 日志确认其 ID 为 `spiffe://ddupan.top/spire/agent/k8s_psat/sandbox-kata/pod/<pod-uid>`。homelab 常驻 agent 的无 `/pod/` 格式不能用于 guest。 - identity controller 恢复 `/pod/<uid>` parentID - 同步单元测试和 runbook ## 验证 - pytest：20 passed - compileall、bash -n、git diff --check：passed - 线上证据：guest Agent attestation 日志包含 `sandbox-kata/pod/<实际 Pod UID>` 关联 homelab-infra #94、#102。
panxiao81 added 1 commit 2026-09-18 18:55:52 +00:00
按 guest Agent 格式恢复 SPIRE 父身份
test / python (pull_request) Successful in 27s
Details
test / shell (pull_request) Successful in 29s
Details
fe0703fe5c
panxiao81 merged commit 0890bc76d9 into main 2026-09-18 18:56:51 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/gitea-dynamic-runner#26