为 sandbox 接入 OpenBao External Secrets

2026-09-18 17:34:53 +00:00
parent 90ba945d85
commit e0e629794b
23 changed files with 306 additions and 18 deletions
@@ -17,10 +17,11 @@ data:
      server:
        replicaCount: 1
        env:
-          # 临时 bootstrap 边界：Service 仅为 ClusterIP。runner 接入时改为
-          # secretKeyRef(OPENSANDBOX_SERVER_API_KEY) 并删除本项。
-          - name: OPENSANDBOX_INSECURE_SERVER
-            value: "YES"
+          - name: OPENSANDBOX_SERVER_API_KEY
+            valueFrom:
+              secretKeyRef:
+                name: opensandbox-api-key
+                key: api-key
        resources:
          limits:
            cpu: "1"