  panxiao81andClaude Opus 5.5
|
31f455d51d
|
Ayatori 容器的 SSH 改由 cloud-init 声明
ansible / collection-test (pull_request) Successful in 3m9s
terraform / validate (pull_request) Successful in 4m36s
yaml / yaml (pull_request) Successful in 5m17s
ansible / lint (pull_request) Successful in 7m20s
- cloud-init 安装 openssh-server，装包后（defer）写 sshd_config.d drop-in
关闭密码与 root 登录；不再使用 ssh_pwauth，它会在装包前写出残缺的
sshd_config，使 UsePAM yes 落不下来
- 删除 ansible/containers.yml 与 tasks/container-ssh.yml
- 两台空容器已重建，使现场与声明一致
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 17:23:09 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
9f7b1b98dd
|
Ayatori 容器镜像改为跟随 24.04 cloud 最新构建
ansible / collection-test (pull_request) Successful in 13m34s
yaml / yaml (pull_request) Successful in 14m10s
ansible / lint (pull_request) Successful in 14m24s
terraform / validate (pull_request) Successful in 15m12s
固定指纹会随上游下架而无法重建（2026-10-01 已发生），同一发行版的构建之间
只差安全更新，固定它没有收益。镜像只在创建时使用，ignore_changes 避免改写
别名时触发重建现有实例。
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 17:12:49 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
094b38b4b5
|
改由 cloud-init 声明 Ayatori 容器静态地址
terraform / validate (pull_request) Failing after 10m47s
yaml / yaml (pull_request) Failing after 10m49s
ansible / lint (pull_request) Successful in 12m6s
ansible / collection-test (pull_request) Successful in 12m35s
- Terraform 写 cloud-init.network-config，地址从 records.yml 读取，与 AD DNS 同源
- 撤销 Ansible 直接改 netplan 的做法；镜像模板只在 create/copy 渲染 seed，
故两台空容器已用 -replace 重建
- 固定指纹已从上游 images: 下架，改从 local: 缓存创建
- sshd -t 前预建 /run/sshd：新装 24.04 只有 ssh.socket 运行，目录尚不存在
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 17:11:42 +00:00 |
|
|
panxiao81andClaude Opus 5.5
|
5dcfcad098
|
为 Ayatori 容器固定静态地址并发布 AD DNS
terraform / validate (pull_request) Failing after 13m16s
yaml / yaml (pull_request) Failing after 13m18s
ansible / lint (pull_request) Failing after 13m19s
ansible / collection-test (pull_request) Successful in 14m12s
- dev 192.168.10.11、prod 192.168.10.12，位于 NEC IX DHCP 池之外
- 地址仅在 records.yml 声明一次，netplan 与 Samba DNS 同源读取
- 容器内禁用 cloud-init 网络模块，避免重启后回到 DHCP
- dns.yml 扩展到 ayatori-dev / ayatori-prod 两条 A 记录
Co-Authored-By: Claude Opus 5.5 <[email protected]>
|
2026-10-01 16:54:03 +00:00 |
|
|
panxiao81
|
d45e0b94e8
|
以 IaC 管理 Incus 接入与 Ayatori 双环境基础容器
|
2026-10-01 14:34:50 +00:00 |
|
|
panxiao81
|
78a73d80aa
|
revert: 撤回超出数据库任务范围的 Ayatori 接入文档修改
|
2026-09-27 18:02:49 +00:00 |
|
|
panxiao81
|
b6c6287ae3
|
docs: 明确数据库环境隔离交付与控制面职责边界
|
2026-09-27 17:58:27 +00:00 |
|
|
panxiao81
|
7da5bc1181
|
docs: 记录共享数据维护告警 GitOps 接管结果
|
2026-09-27 17:38:13 +00:00 |
|
|
panxiao81
|
589c34ee60
|
Merge pull request '补齐共享 etcd/PG 的备份、证书续签及 dev 健康告警' (#166) from feat/shared-pg-health into main
yaml / yaml (push) Successful in 56s
ansible / collection-test (push) Successful in 2m16s
ansible / lint (push) Successful in 2m52s
Reviewed-on: #166
|
2026-09-27 17:35:27 +00:00 |
|
|
panxiao81
|
396109d462
|
docs: 明确 exporter 升级方式与 PrometheusRule 声明
|
2026-09-27 17:29:49 +00:00 |
|
|
panxiao81
|
0d633cf0cc
|
fix: 使用 PrometheusRule 并按 exporter 版本获取官方校验和
yaml / yaml (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 2m28s
ansible / lint (pull_request) Successful in 4m5s
|
2026-09-27 17:29:40 +00:00 |
|
|
panxiao81
|
26a8ffed83
|
docs: 补充共享数据维护监控与告警排障
|
2026-09-27 17:07:34 +00:00 |
|
|
panxiao81
|
0988f5c37e
|
feat: 补齐共享数据备份、证书续签与开发实例监控
yaml / yaml (pull_request) Successful in 27s
ansible / collection-test (pull_request) Successful in 1m59s
ansible / lint (pull_request) Successful in 3m14s
|
2026-09-27 17:05:24 +00:00 |
|
|
panxiao81
|
06943d4c65
|
将 laptop ZFS ARC 预算限制为 4 GiB
yaml / yaml (push) Successful in 25s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-27 03:31:25 +00:00 |
|
|
panxiao81
|
7137426e8f
|
补齐 OpenBao 内部健康与快照新鲜度告警
yaml / yaml (push) Successful in 1m28s
ansible / collection-test (push) Successful in 2m27s
ansible / lint (push) Successful in 8m18s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-25 20:59:36 +00:00 |
|
|
panxiao81
|
834f654941
|
接入 OpenBao 受鉴权监控并修复快照续期 (#162)
yaml / yaml (push) Successful in 35s
terraform / validate (push) Successful in 1m43s
ansible / collection-test (push) Successful in 1m55s
ansible / lint (push) Successful in 2m48s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-25 20:39:31 +00:00 |
|
|
panxiao81
|
52322116f9
|
docs: 确认共享数据库监控由 Flux 接管
|
2026-09-25 19:51:35 +00:00 |
|
|
panxiao81
|
3a2fe5fa0c
|
feat: 纳管共享 etcd 与 k3s 外 PostgreSQL 高可用及备份
yaml / yaml (pull_request) Successful in 41s
ansible / collection-test (pull_request) Successful in 2m41s
terraform / validate (pull_request) Successful in 2m41s
ansible / lint (pull_request) Successful in 4m36s
|
2026-09-25 19:34:48 +00:00 |
|
|
panxiao81
|
acd4b55722
|
docs: 记录共享 etcd 与外置 PostgreSQL 部署和接入边界
|
2026-09-25 19:31:14 +00:00 |
|
|
panxiao81
|
5435d7d2d5
|
feat: 部署 Hydra 与通用 OIDC 登录适配器
ansible / lint (pull_request) Failing after 4m34s
hydra-login / verify (pull_request) Successful in 6m9s
ansible / collection-test (pull_request) Successful in 8m24s
|
2026-09-25 13:42:39 +00:00 |
|
|
panxiao81
|
83e4ac2f01
|
Merge pull request '新增 Nexus 统一制品仓库 POC' (#103) from feat/nexus-poc into main
ansible / collection-test (push) Successful in 4m14s
ansible / lint (push) Successful in 5m15s
yaml / yaml (push) Successful in 35s
terraform / validate (push) Successful in 1m8s
Reviewed-on: #103
|
2026-09-20 19:49:49 +00:00 |
|
|
panxiao81
|
110dbcc2c3
|
新增 Nexus 统一制品仓库 POC
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
terraform / validate (pull_request) Failing after 0s
|
2026-09-18 19:11:30 +00:00 |
|
|
panxiao81
|
7582990655
|
修复 OpenSandbox 冷启动超时与旧 worker 清理
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
|
2026-09-18 18:53:26 +00:00 |
|
|
panxiao81
|
6eb4875db6
|
接入 OpenSandbox 动态 Runner
ansible / collection-test (pull_request) Successful in 2m58s
ansible / lint (pull_request) Successful in 4m33s
yaml / yaml (pull_request) Successful in 29s
|
2026-09-18 18:33:00 +00:00 |
|
|
panxiao81
|
4c823f8181
|
确保 OpenSandbox values 立即生效
yaml / yaml (pull_request) Successful in 27s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m33s
|
2026-09-18 17:49:26 +00:00 |
|
|
panxiao81
|
159a75b710
|
记录 sandbox ESO 当前状态
yaml / yaml (pull_request) Successful in 16s
terraform / validate (pull_request) Successful in 39s
|
2026-09-18 17:40:24 +00:00 |
|
|
panxiao81
|
e0e629794b
|
为 sandbox 接入 OpenBao External Secrets
yaml / yaml (pull_request) Successful in 17s
terraform / validate (pull_request) Successful in 49s
|
2026-09-18 17:34:53 +00:00 |
|
|
panxiao81
|
d526fd75d3
|
部署 OpenSandbox 控制面
yaml / yaml (pull_request) Successful in 17s
|
2026-09-18 16:36:21 +00:00 |
|
|
panxiao81
|
e67bce5121
|
fix: 延长 sandbox Flux 根同步超时
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m56s
|
2026-09-17 18:20:33 +00:00 |
|
|
panxiao81
|
b619f6f681
|
fix: 补齐 sandbox PSAT reviewer 权限
yaml / yaml (pull_request) Successful in 13s
|
2026-09-17 17:30:54 +00:00 |
|
|
panxiao81
|
aeb8c49d0a
|
feat: 部署 sandbox SPIRE Agent 与 CSI
yaml / yaml (pull_request) Successful in 20s
ansible / collection-test (pull_request) Successful in 1m9s
ansible / lint (pull_request) Successful in 2m15s
|
2026-09-17 17:23:25 +00:00 |
|
|
panxiao81
|
ea15841d4d
|
feat: 引导 sandbox SPIRE external controller
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m5s
ansible / lint (pull_request) Successful in 4m4s
|
2026-09-17 17:00:44 +00:00 |
|
|
panxiao81
|
b7b92b3465
|
feat: 引导 sandbox 跨集群 SPIRE 认证
yaml / yaml (pull_request) Successful in 19s
ansible / lint (pull_request) Successful in 2m13s
ansible / collection-test (pull_request) Successful in 1m11s
|
2026-09-17 16:50:02 +00:00 |
|
|
panxiao81
|
60836c3360
|
feat: 接入 sandbox Kubernetes 监控
yaml / yaml (pull_request) Successful in 25s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 4m33s
|
2026-09-17 16:02:48 +00:00 |
|
|
panxiao81
|
f810b1c674
|
docs: 明确 sandbox 监控边界
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m43s
|
2026-09-17 15:11:29 +00:00 |
|
|
panxiao81
|
6585d8c46a
|
feat: 声明 sandbox 双节点 K3s 集群
yaml / yaml (pull_request) Successful in 18s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m18s
|
2026-09-17 14:57:48 +00:00 |
|
|
panxiao81
|
412fa93018
|
修正网络配置 YAML 缩进
yaml / yaml (pull_request) Successful in 28s
terraform / validate (pull_request) Successful in 55s
ansible / collection-test (pull_request) Successful in 1m21s
ansible / lint (pull_request) Successful in 4m11s
|
2026-09-17 13:29:14 +00:00 |
|
|
panxiao81
|
2e05b1a96a
|
声明式管理 Proxmox API 对象与 Samba DNS 上游
yaml / yaml (pull_request) Failing after 25s
terraform / validate (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 1m27s
ansible / lint (pull_request) Successful in 3m45s
|
2026-09-17 13:22:50 +00:00 |
|
|
panxiao81
|
71eea7d8fc
|
恢复 OCI Terraform 与站点网络 IaC
|
2026-09-17 13:22:49 +00:00 |
|
|
panxiao81
|
a08c8a7303
|
统一 DN42 DNS 与宿主 Docker 地址池
|
2026-09-17 13:22:49 +00:00 |
|
|
panxiao81
|
5241eceb0c
|
feat(dns): 用模板生成各后端配置
yaml / yaml (pull_request) Successful in 23s
terraform / validate (pull_request) Successful in 36s
ansible / collection-test (pull_request) Successful in 1m33s
ansible / lint (pull_request) Failing after 2m44s
|
2026-09-16 18:27:09 +00:00 |
|
|
panxiao81
|
f3d8c38d28
|
收窄本机 SPIFFE 身份的 KV 权限范围
terraform / validate (pull_request) Successful in 28s
|
2026-09-16 17:15:07 +00:00 |
|
|
panxiao81
|
64b1acd6c3
|
授权本机 SPIFFE 身份访问开发服务
yaml / yaml (pull_request) Successful in 12s
terraform / validate (pull_request) Successful in 32s
|
2026-09-16 17:06:27 +00:00 |
|
|
panxiao81
|
31d89817b2
|
fix(zot): 分离匿名拉取与 SPIRE 鉴权推送入口
yaml / yaml (pull_request) Successful in 22s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 17m42s
|
2026-09-16 13:06:35 +00:00 |
|
|
panxiao81
|
47042d4df4
|
完善内存监控并迁移 Grafana 内网入口
yaml / yaml (push) Successful in 20s
ansible / collection-test (push) Successful in 1m10s
ansible / lint (push) Successful in 13m9s
Co-authored-by: panxiao81 <[email protected]>
|
2026-09-16 12:47:52 +00:00 |
|
|
panxiao81
|
c11e1d5e6f
|
部署 NATS JetStream 消息基础设施
yaml / yaml (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 2m0s
ansible / lint (pull_request) Successful in 19m43s
|
2026-09-16 12:00:24 +00:00 |
|
|
panxiao81
|
5c2b575a4f
|
feat(zot): 接入 SeaweedFS 与 SPIRE 并统一 S3 凭据来源
yaml / yaml (pull_request) Successful in 20s
ansible / collection-test (pull_request) Successful in 59s
ansible / lint (pull_request) Successful in 10m32s
|
2026-09-14 13:26:54 +00:00 |
|
|
panxiao81
|
ed86738c4b
|
文档：记录 SPIRE 与 OpenBao workload identity 用法
|
2026-09-14 10:31:36 +00:00 |
|
|
panxiao81
|
c9987122e6
|
配置 SPIRE JWT-SVID 登录 OpenBao
terraform / validate (pull_request) Successful in 1m12s
|
2026-09-13 15:56:08 +00:00 |
|
|
panxiao81
|
b6ad65d768
|
暴露 SPIRE OIDC discovery endpoint
ansible / collection-test (pull_request) Successful in 2m17s
yaml / yaml (pull_request) Successful in 28s
ansible / lint (pull_request) Successful in 4m21s
|
2026-09-13 15:44:18 +00:00 |
|