2026-08-24 - 2026-09-24
Overview
129 Pull requests merged by 1 user
Merged
#141 部署内置 SPIRE CLI 的 runner 镜像
Merged
#140 部署 runner 工作目录修复镜像
Merged
#139 为 OpenSandbox runner 挂载独立工作目录
Merged
#138 滚动部署最终 Docker runner 镜像
Merged
#137 部署自动提供 Docker 的 runner 镜像
Merged
#136 feat: 启用生产 VM runner 标签
Merged
#135 为 Kata kind executor 配置最低资源
Merged
#134 统一 Pod 与 VM executor 运行模型
Merged
#133 修复 Kata DinD 的 nested containerd 存储阻塞
Merged
#132 为 Kata kind 任务配置明确资源
Merged
#131 修复 Kata VM 内 DinD 的 cgroup v2 nesting
Merged
#130 彻底删除旧静态 Gitea Runner
Merged
#129 退役旧静态 Gitea Runner(第一阶段)
Merged
#128 部署 Runner 结构化生命周期日志
Merged
#127 为 sandbox executor 暴露内网 Runner facade
Merged
#126 隔离 VM 集成测试入口
Merged
#125 部署 OpenSandbox Runner workload 标记修复
Merged
#124 部署 OpenSandbox metadata 编码修复
Merged
#123 部署 Runner 后端独立容量池
Merged
#122 恢复 Pod Runner 四并发
Merged
#121 启用 Runner 无中断滚动更新
Merged
#120 更新 Runner claim 恢复镜像
Merged
#119 启用 OpenSandbox VM Runner canary
Merged
#118 更新 Runner Gitea 反代 Host 修复镜像
Merged
#117 更新 Runner 自动清理与 checkout 修复镜像
Merged
#116 记录 CI 身份 Action 使用入口
Merged
#115 更新 Runner facade 就绪等待镜像
Merged
#114 修正动态 Runner 的 SPIRE agent 绑定
Merged
#113 更新动态 Runner SPIFFE socket 修复镜像
Merged
#112 使用无重叠滚动策略部署 scheduler
Merged
#111 清理 Recreate 策略遗留字段
Merged
#110 部署 Go 动态 Runner Pod canary
Merged
#109 纳管并验收 Nexus OCI 仓库
Merged
#108 完成 Nexus Ansible 与 Go 缓存验收
Merged
#103 新增 Nexus 统一制品仓库 POC
Merged
#107 限制 OpenSandbox 仅调度 VM
Merged
#106 在 homelab 启用原生 Pod Worker
Merged
#105 停止 OpenSandbox 消费 Pod 任务
Merged
#104 部署 Runner completed ACK 修复
Merged
#102 修复 OpenSandbox 冷启动超时与旧 worker 清理
Merged
#101 接入 OpenSandbox 动态 Runner
Merged
#100 确保 OpenSandbox values 立即生效
Merged
#99 为 sandbox 接入 OpenBao External Secrets
Merged
#98 部署 OpenSandbox 控制面
Merged
#93 延长 sandbox Flux 根同步超时
Merged
#95 记录 Kata guest 内 SPIFFE 身份方案
Merged
#96 切换 SPIRE 到内部 chart fork
Merged
#92 部署 sandbox Kata Containers
Merged
#90 补齐 sandbox PSAT reviewer 权限
Merged
#91 修复 SPIRE Agent 连接 Server 的端口
Merged
#89 部署 sandbox SPIRE Agent 与 CSI
Merged
#88 引导 sandbox SPIRE external controller
Merged
#87 引导 sandbox 跨集群 SPIRE 认证
Merged
#86 接入 sandbox Kubernetes 监控
Merged
#85 声明 sandbox 双节点 K3s 集群 IaC
Merged
#84 整理旧工作区并恢复未纳管 IaC
Merged
#81 用统一 inventory 生成 DNS 后端配置
Merged
#82 恢复本机对动态 Runner 镜像的发布权限
Merged
#80 授权动态 Runner CI 发布镜像
Merged
#74 ci: 统一使用 pod runner
Merged
#79 修复无 Vault 凭据时的 Ansible lint
Merged
#78 使用 Zot 中的 Ubuntu Pod Runner 镜像
Merged
#77 收窄本机 SPIFFE 身份的 KV 权限范围
Merged
#76 授权本机 SPIFFE 身份访问开发服务
Merged
#75 为宿主机开发启用 SPIRE workload identity
Merged
#73 清理已退役的 VictoriaMetrics Compose 配置
Merged
#72 允许 Gitea 投递动态 Runner 集群内 webhook
Merged
#70 更新 zot 运行状态与 GitOps 接管文档
Merged
#71 避免动态 Runner 凭据覆盖服务账号令牌路径
Merged
#69 固定 dynamic runner 初始化容器的数值用户
Merged
#68 修正动态 Runner 的 Bao 凭据路径
Merged
#67 部署 Pod/VM 动态 Runner 控制器
Merged
#65 修复 zot:同时提供匿名拉取与 SPIRE 鉴权推送
Merged
#66 为 Gitea runner 接入 SPIRE Workload API
Merged
#64 使用字节数配置 NATS Account 配额
Merged
#63 完善内存监控并迁移 Grafana 内网入口
Merged
#62 修复 NATS 容量单位语法
Merged
#61 修复 NATS Account 配额格式
Merged
#60 修复 NATS Bao ACME 证书密钥类型
Merged
#59 由 monitoring 提供 Prometheus Operator CRD
Merged
#58 修复 cert-manager Gateway API ACME solver
Merged
#57 部署 NATS JetStream 消息基础设施
Merged
#55 部署 zot:接入 SeaweedFS、SPIRE 并统一 S3 凭据来源
Merged
#54 文档:记录 SPIRE 与 OpenBao workload identity 用法
Merged
#53 配置 SPIRE JWT-SVID 登录 OpenBao
Merged
#52 暴露 SPIRE OIDC discovery endpoint
Merged
#49 建立统一 DNS 清单并接管 Samba 静态记录
Merged
#51 部署 SPIRE workload identity 基础设施
Merged
#48 修复 Grafana 在 ZFS RWO PVC 上的升级卡死
Merged
#44 激活剩余可观测性栈 Flux 接管
Merged
#43 统一接管剩余可观测性栈
Merged
#42 激活 VictoriaMetrics Operator Flux 接管
Merged
#41 分阶段接管 VictoriaMetrics Operator
Merged
#40 激活 OpenEBS Flux HelmRelease 接管
Merged
#39 分阶段接管 OpenEBS Helm release
Merged
#38 激活 Envoy Gateway Flux HelmRelease 接管
Merged
#37 分阶段接管 Envoy Gateway Helm release
Merged
#36 激活 cert-manager Flux HelmRelease 接管
Merged
#35 分阶段接管 cert-manager Helm release
Merged
#33 激活 Flux 对 External Secrets 的接管
Merged
#32 分阶段接管 External Secrets Helm release
Merged
#31 按路径拆分静态 CI 并消除重复运行
Merged
#30 修复 Actions user-defined network 的 MTU
Merged
#28 记录 Gitea 后续精简升级策略
Merged
#29 修复 Gitea runner 访问 GitHub 超时
Merged
#27 激活 Gitea 1.27.3 升级
Merged
#26 准备 Gitea 1.27.3 suspended 升级
Merged
#25 激活 Gitea 1.26.4 升级
Merged
#24 准备 Gitea 1.26.4 suspended 升级
Merged
#23 启用 Flux 对 Gitea Helm release 的接管
Merged
#22 分阶段接管 Gitea Helm release
Merged
#21 启用 Flux 对 Gitea Actions Helm release 的接管
Merged
#20 分阶段接管 Gitea Actions Helm release
Merged
#19 更新 GitOps 完成状态与下一 Helm 迁移
Merged
#18 最终验证 Flux canary 自动 prune
Merged
#17 在 prune 开启后重新纳管测试对象
Merged
#16 验证 Flux canary 受控删除
Merged
#15 添加 Flux prune 测试对象
Merged
#14 添加 Flux http-echo canary
Merged
#13 记录 Flux 上线与 Contour 退役完成
Merged
#12 引入 Flux 2.9.5 并彻底退役 Contour
Merged
#10 文档:默认使用中文协作
Merged
#8 docs: record live CI bootstrap
Merged
#6 fix(ci): share Ansible Galaxy collections
Merged
#5 fix(ci): install uv from official PyPI
Merged
#4 fix(ci): bootstrap lint toolchain
Merged
#3 fix(ci): use compatible DinD runner
Merged
#2 fix(identity): declare Gitea admin group
Merged
#1 Add Gitea Actions runner bootstrap
1 Issue closed from 1 user
Closed
#45 设计统一 IAM、workload identity 与类 STS 凭据交换层
11 Issues created by 1 user
Opened
#7 ci: reduce Ansible lint cold-start time
Opened
#9 blocked(oci): recover Terraform root from home workstation
Opened
#11 备份:修复 OpenBao Raft snapshot 与机器身份
Opened
#34 设计并验证基于 SPIFFE/SPIRE 的统一 Workload Identity
Opened
#45 设计统一 IAM、workload identity 与类 STS 凭据交换层
Opened
#46 设计以 Proxmox VE 为 backend 的北向 VM 生命周期 API
Opened
#47 评估 CI 与 AI Agent 的 microVM 及隔离运行时 backend
Opened
#50 评估 laptop TPM 作为 SPIRE 宿主机硬件身份与启动信任根
Opened
#56 NATS:使用 SPIRE Auth Callout 替换静态 CI 凭据
Opened
#83 建设由 Ansible 与 Flux 管理的正式 OpenSandbox 集群
Opened
#94 为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入