启用 sandbox 静态身份登记

2026-09-18 19:06:13 +00:00
parent ad4ed1f0d6
commit 28f1de35cb
2 changed files with 12 additions and 0 deletions
@@ -66,6 +66,12 @@ spire-server:
    clusters:
      sandbox:
        kubeConfigName: sandbox-controller
+        # Dynamic OpenSandbox runner identities are exact Pod-UID-bound
+        # ClusterStaticEntries created in the sandbox cluster. The chart
+        # defaults this reconciler to false, so enable the central registration
+        # path explicitly.
+        reconcile:
+          clusterStaticEntries: true
  bundlePublisher:
    externalK8sConfigMap:
      enabled: true