Commit Graph
100 Commits
Author SHA1 Message Date
panxiao81 9b9f44333e Merge pull request '在 homelab 启用原生 Pod Worker' (#106) from fix/enable-native-pod-worker into main
yaml / yaml (push) Successful in 24s
2026-09-20 17:16:28 +00:00
panxiao81 8896d58b89 在 homelab 启用原生 Pod Worker
yaml / yaml (pull_request) Successful in 24s
2026-09-20 17:16:26 +00:00
panxiao81 0fd7f87d7e Merge pull request '停止 OpenSandbox 消费 Pod 任务' (#105) from fix/separate-pod-opensandbox into main
yaml / yaml (push) Failing after 0s
2026-09-20 17:13:43 +00:00
panxiao81 89bd7864e6 停止 OpenSandbox 消费 Pod 任务
yaml / yaml (pull_request) Failing after 0s
2026-09-20 17:13:21 +00:00
panxiao81 93f803a0d9 合并 Runner completed ACK 镜像修复
yaml / yaml (push) Failing after 0s
2026-09-18 19:46:33 +00:00
panxiao81 f7d9579221 部署 Runner completed ACK 修复
yaml / yaml (pull_request) Failing after 0s
2026-09-18 19:46:30 +00:00
panxiao81 9fe910a4c9 合并 OpenSandbox Runner 部署修复
ansible / lint (push) Failing after 0s
ansible / collection-test (push) Failing after 0s
yaml / yaml (push) Failing after 0s
2026-09-18 19:34:25 +00:00
panxiao81 28c20fd3e5 恢复持久事件驱动 Runner 调度
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
2026-09-18 19:27:25 +00:00
panxiao81 28f1de35cb 启用 sandbox 静态身份登记
ansible / lint (pull_request) Failing after 2s
ansible / collection-test (pull_request) Failing after 1s
yaml / yaml (pull_request) Failing after 1s
2026-09-18 19:06:13 +00:00
panxiao81 ad4ed1f0d6 重新触发 OpenSandbox 集成验证
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 2s
2026-09-18 19:02:44 +00:00
panxiao81 611a5a3d3a 修复 Pool task-executor 数据目录与 guest 身份镜像
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
2026-09-18 18:59:02 +00:00
panxiao81 7582990655 修复 OpenSandbox 冷启动超时与旧 worker 清理
ansible / lint (pull_request) Failing after 0s
ansible / collection-test (pull_request) Failing after 0s
yaml / yaml (pull_request) Failing after 0s
2026-09-18 18:53:26 +00:00
panxiao81 ec3ce94e12 Merge pull request '接入 OpenSandbox 动态 Runner' (#101) from feat/opensandbox-runner-integration into main
yaml / yaml (push) Successful in 23s
ansible / collection-test (push) Successful in 1m35s
ansible / lint (push) Successful in 2m55s
2026-09-18 18:45:24 +00:00
panxiao81 6eb4875db6 接入 OpenSandbox 动态 Runner
ansible / collection-test (pull_request) Successful in 2m58s
ansible / lint (pull_request) Successful in 4m33s
yaml / yaml (pull_request) Successful in 29s
2026-09-18 18:33:00 +00:00
panxiao81 518dba6036 Merge pull request 确保 OpenSandbox values 立即生效
yaml / yaml (push) Successful in 17s
ansible / collection-test (push) Successful in 1m15s
ansible / lint (push) Successful in 2m7s
2026-09-18 17:52:51 +00:00
panxiao81 4c823f8181 确保 OpenSandbox values 立即生效
yaml / yaml (pull_request) Successful in 27s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m33s
2026-09-18 17:49:26 +00:00
panxiao81 8290082fb4 Merge pull request 为 sandbox 接入 OpenBao External Secrets
yaml / yaml (push) Successful in 15s
terraform / validate (push) Successful in 42s
2026-09-18 17:41:51 +00:00
panxiao81 159a75b710 记录 sandbox ESO 当前状态
yaml / yaml (pull_request) Successful in 16s
terraform / validate (pull_request) Successful in 39s
2026-09-18 17:40:24 +00:00
panxiao81 e0e629794b 为 sandbox 接入 OpenBao External Secrets
yaml / yaml (pull_request) Successful in 17s
terraform / validate (pull_request) Successful in 49s
2026-09-18 17:34:53 +00:00
panxiao81 90ba945d85 Merge pull request 部署 OpenSandbox 控制面
yaml / yaml (push) Successful in 18s
2026-09-18 16:38:13 +00:00
panxiao81 d526fd75d3 部署 OpenSandbox 控制面
yaml / yaml (pull_request) Successful in 17s
2026-09-18 16:36:21 +00:00
panxiao81 18cb2858b9 Merge pull request '延长 sandbox Flux 根同步超时' (#93) from fix/sandbox-flux-root-timeout into main
ansible / collection-test (push) Successful in 1m13s
ansible / lint (push) Successful in 2m23s
Reviewed-on: #93
2026-09-18 16:18:46 +00:00
panxiao81 99d1ec1d6f Merge pull request '记录 Kata guest 内 SPIFFE 身份方案' (#95) from docs/kata-inner-spire into main
Reviewed-on: #95
2026-09-18 16:18:29 +00:00
panxiao81 c6ec310b0b Merge pull request 切换 SPIRE 到内部 chart fork
yaml / yaml (push) Successful in 19s
合并内部 chart fork 与 sandbox-kata Pod UID PSAT profile。
2026-09-18 00:24:54 +00:00
panxiao81 3b77af8da1 feat: 切换 SPIRE 到内部 chart fork
yaml / yaml (pull_request) Successful in 14s
2026-09-18 00:24:21 +00:00
panxiao81 583dab526a docs: 明确 SPIRE chart 字段缺口 2026-09-17 18:54:00 +00:00
panxiao81 3dbd4c5f31 docs: 记录 Kata guest SPIFFE 身份方案 2026-09-17 18:47:01 +00:00
panxiao81 e67bce5121 fix: 延长 sandbox Flux 根同步超时
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m56s
2026-09-17 18:20:33 +00:00
panxiao81 8af511ecc8 Merge pull request '部署 sandbox Kata Containers' (#92) from feat/sandbox-kata into main
yaml / yaml (push) Successful in 22s
Reviewed-on: #92
2026-09-17 18:06:18 +00:00
panxiao81 94684d0722 feat: 部署 sandbox Kata Containers
yaml / yaml (pull_request) Successful in 17s
2026-09-17 18:02:46 +00:00
panxiao81 9515cde49b Merge pull request '补齐 sandbox PSAT reviewer 权限' (#90) from fix/sandbox-spire-psat-rbac into main
yaml / yaml (push) Successful in 16s
Reviewed-on: #90
2026-09-17 17:47:27 +00:00
panxiao81 accf2d8210 Merge pull request '修复 SPIRE Agent 连接 Server 的端口' (#91) from fix/spire-agent-server-port into main
yaml / yaml (push) Successful in 49s
Reviewed-on: #91
2026-09-17 17:44:50 +00:00
panxiao81 d1ccc99125 修复 SPIRE Agent Server 端口
yaml / yaml (pull_request) Failing after 1m1s
2026-09-17 17:43:39 +00:00
panxiao81 b619f6f681 fix: 补齐 sandbox PSAT reviewer 权限
yaml / yaml (pull_request) Successful in 13s
2026-09-17 17:30:54 +00:00
panxiao81 1806c678a4 Merge pull request '部署 sandbox SPIRE Agent 与 CSI' (#89) from feat/sandbox-spire-agents into main
yaml / yaml (push) Successful in 21s
ansible / collection-test (push) Successful in 1m16s
ansible / lint (push) Successful in 2m17s
Reviewed-on: #89
2026-09-17 17:27:14 +00:00
panxiao81 aeb8c49d0a feat: 部署 sandbox SPIRE Agent 与 CSI
yaml / yaml (pull_request) Successful in 20s
ansible / collection-test (pull_request) Successful in 1m9s
ansible / lint (pull_request) Successful in 2m15s
2026-09-17 17:23:25 +00:00
panxiao81 7b1a98280c Merge pull request '引导 sandbox SPIRE external controller' (#88) from feat/sandbox-spire-controller-bootstrap into main
yaml / yaml (push) Successful in 17s
ansible / collection-test (push) Successful in 1m12s
ansible / lint (push) Successful in 3m3s
Reviewed-on: #88
2026-09-17 17:14:50 +00:00
panxiao81 ea15841d4d feat: 引导 sandbox SPIRE external controller
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m5s
ansible / lint (pull_request) Successful in 4m4s
2026-09-17 17:00:44 +00:00
panxiao81 4b9aa9e164 Merge pull request '引导 sandbox 跨集群 SPIRE 认证' (#87) from feat/sandbox-spire-bootstrap into main
yaml / yaml (push) Successful in 20s
ansible / collection-test (push) Successful in 1m15s
ansible / lint (push) Successful in 2m12s
Reviewed-on: #87
2026-09-17 16:55:59 +00:00
panxiao81 b7b92b3465 feat: 引导 sandbox 跨集群 SPIRE 认证
yaml / yaml (pull_request) Successful in 19s
ansible / lint (pull_request) Successful in 2m13s
ansible / collection-test (pull_request) Successful in 1m11s
2026-09-17 16:50:02 +00:00
panxiao81 dc2b43f693 Merge pull request '接入 sandbox Kubernetes 监控' (#86) from feat/sandbox-monitoring into main
yaml / yaml (push) Successful in 17s
ansible / collection-test (push) Successful in 1m12s
ansible / lint (push) Successful in 2m11s
Reviewed-on: #86
2026-09-17 16:21:27 +00:00
panxiao81 60836c3360 feat: 接入 sandbox Kubernetes 监控
yaml / yaml (pull_request) Successful in 25s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 4m33s
2026-09-17 16:02:48 +00:00
panxiao81 2030751e6a Merge pull request '声明 sandbox 双节点 K3s 集群 IaC' (#85) from feat/sandbox-cluster-iac into main
yaml / yaml (push) Successful in 12s
ansible / collection-test (push) Successful in 1m6s
ansible / lint (push) Successful in 2m44s
Reviewed-on: #85
2026-09-17 15:42:41 +00:00
panxiao81 f810b1c674 docs: 明确 sandbox 监控边界
yaml / yaml (pull_request) Successful in 17s
ansible / collection-test (pull_request) Successful in 1m8s
ansible / lint (pull_request) Successful in 2m43s
2026-09-17 15:11:29 +00:00
panxiao81 6585d8c46a feat: 声明 sandbox 双节点 K3s 集群
yaml / yaml (pull_request) Successful in 18s
ansible / collection-test (pull_request) Successful in 1m16s
ansible / lint (pull_request) Successful in 2m18s
2026-09-17 14:57:48 +00:00
panxiao81 cadfee0aea Merge pull request '整理旧工作区并恢复未纳管 IaC' (#84) from chore/recover-old-workspace into main
yaml / yaml (push) Successful in 15s
terraform / validate (push) Successful in 45s
ansible / collection-test (push) Successful in 1m27s
ansible / lint (push) Successful in 2m31s
Reviewed-on: #84
2026-09-17 13:31:49 +00:00
panxiao81 412fa93018 修正网络配置 YAML 缩进
yaml / yaml (pull_request) Successful in 28s
terraform / validate (pull_request) Successful in 55s
ansible / collection-test (pull_request) Successful in 1m21s
ansible / lint (pull_request) Successful in 4m11s
2026-09-17 13:29:14 +00:00
panxiao81 2e05b1a96a 声明式管理 Proxmox API 对象与 Samba DNS 上游
yaml / yaml (pull_request) Failing after 25s
terraform / validate (pull_request) Successful in 51s
ansible / collection-test (pull_request) Successful in 1m27s
ansible / lint (pull_request) Successful in 3m45s
2026-09-17 13:22:50 +00:00
panxiao81 71eea7d8fc 恢复 OCI Terraform 与站点网络 IaC 2026-09-17 13:22:49 +00:00
panxiao81 a08c8a7303 统一 DN42 DNS 与宿主 Docker 地址池 2026-09-17 13:22:49 +00:00
panxiao81 76f94f4f31 Merge pull request '用统一 inventory 生成 DNS 后端配置' (#81) from feat/dns-config-generator into main
yaml / yaml (push) Successful in 26s
terraform / validate (push) Successful in 36s
ansible / collection-test (push) Successful in 1m35s
ansible / lint (push) Successful in 2m47s
Reviewed-on: #81
2026-09-16 18:43:02 +00:00
panxiao81 a2102e6708 Merge pull request '恢复本机对动态 Runner 镜像的发布权限' (#82) from fix/zot-local-publisher-exact-policy into main
yaml / yaml (push) Successful in 13s
Reviewed-on: #82
2026-09-16 18:39:51 +00:00
panxiao81 bb2b5119ab 恢复本机对动态 Runner 镜像的发布权限
yaml / yaml (pull_request) Successful in 19s
2026-09-16 18:38:30 +00:00
panxiao81 65a72ce7fa fix(ci): 为 Ansible lint 提供临时 Vault 占位文件
yaml / yaml (pull_request) Successful in 28s
terraform / validate (pull_request) Successful in 36s
ansible / collection-test (pull_request) Successful in 1m24s
ansible / lint (pull_request) Successful in 3m11s
2026-09-16 18:37:59 +00:00
panxiao81 5241eceb0c feat(dns): 用模板生成各后端配置
yaml / yaml (pull_request) Successful in 23s
terraform / validate (pull_request) Successful in 36s
ansible / collection-test (pull_request) Successful in 1m33s
ansible / lint (pull_request) Failing after 2m44s
2026-09-16 18:27:09 +00:00
panxiao81 5ba4411646 Merge pull request '授权动态 Runner CI 发布镜像' (#80) from feat/dynamic-runner-publisher-policy into main
yaml / yaml (push) Successful in 13s
Reviewed-on: #80
2026-09-16 18:12:01 +00:00
panxiao81 2fcb41adde 授权动态 Runner CI 发布镜像
yaml / yaml (pull_request) Successful in 10s
2026-09-16 18:11:11 +00:00
panxiao81 42d33e31da Merge pull request 'ci: 统一使用 pod runner' (#74) from ci/self-hosted-pod into main
yaml / yaml (push) Successful in 20s
terraform / validate (push) Successful in 27s
ansible / collection-test (push) Successful in 1m24s
ansible / lint (push) Failing after 2m1s
Reviewed-on: #74
2026-09-16 17:58:26 +00:00
panxiao81 b617b4bc23 Merge pull request '修复无 Vault 凭据时的 Ansible lint' (#79) from fix/ansible-lint-without-vault into main
ansible / collection-test (push) Failing after 1s
yaml / yaml (push) Successful in 10s
ansible / lint (push) Failing after 1m1s
Reviewed-on: #79
2026-09-16 17:58:00 +00:00
panxiao81 b6b4efe48f 修复无 Vault 凭据时的 Ansible lint
yaml / yaml (pull_request) Successful in 22s
ansible / collection-test (pull_request) Successful in 1m12s
ansible / lint (pull_request) Successful in 2m17s
2026-09-16 17:49:35 +00:00
panxiao81 d6518153c8 Merge pull request '使用 Zot 中的 Ubuntu Pod Runner 镜像' (#78) from fix/pod-runner-ubuntu-image into main
yaml / yaml (push) Successful in 13s
Reviewed-on: #78
2026-09-16 17:32:44 +00:00
panxiao81 e42bb12f8e ci: 完整验证固定 digest Runner
ansible / collection-test (pull_request) Successful in 1m8s
yaml / yaml (pull_request) Successful in 13s
terraform / validate (pull_request) Successful in 28s
ansible / lint (pull_request) Failing after 4m55s
2026-09-16 17:32:30 +00:00
panxiao81 f97505df2d ci: 在固定 digest 上重试集成测试
ansible / lint (pull_request) Failing after 6s
ansible / collection-test (pull_request) Failing after 10s
yaml / yaml (pull_request) Successful in 18s
terraform / validate (pull_request) Successful in 51s
2026-09-16 17:30:29 +00:00
panxiao81 8b4acc40f6 ci: 重试 Pod Runner 集成测试
yaml / yaml (pull_request) Failing after 9s
ansible / collection-test (pull_request) Failing after 9s
ansible / lint (pull_request) Failing after 9s
terraform / validate (pull_request) Failing after 11s
2026-09-16 17:29:45 +00:00
panxiao81 61df128e25 ci: 重新验证 Ubuntu Pod Runner
yaml / yaml (pull_request) Successful in 18s
terraform / validate (pull_request) Successful in 29s
ansible / collection-test (pull_request) Successful in 1m14s
ansible / lint (pull_request) Failing after 1m58s
2026-09-16 17:26:00 +00:00
panxiao81 5b81719675 使用 Zot 中的 Ubuntu Pod Runner 镜像
yaml / yaml (pull_request) Successful in 10s
2026-09-16 17:23:05 +00:00
panxiao81 62c0ce1fff Merge pull request '收窄本机 SPIFFE 身份的 KV 权限范围' (#77) from fix/spire-local-kv-scope into main
terraform / validate (push) Successful in 23s
Reviewed-on: #77
2026-09-16 17:17:11 +00:00
panxiao81 f3d8c38d28 收窄本机 SPIFFE 身份的 KV 权限范围
terraform / validate (pull_request) Successful in 28s
2026-09-16 17:15:07 +00:00
panxiao81 61f0f864aa Merge pull request '授权本机 SPIFFE 身份访问开发服务' (#76) from feat/spire-host-development into main
yaml / yaml (push) Successful in 13s
terraform / validate (push) Successful in 23s
Reviewed-on: #76
2026-09-16 17:07:50 +00:00
panxiao81 64b1acd6c3 授权本机 SPIFFE 身份访问开发服务
yaml / yaml (pull_request) Successful in 12s
terraform / validate (pull_request) Successful in 32s
2026-09-16 17:06:27 +00:00
panxiao81 bbf228de41 Merge pull request '为宿主机开发启用 SPIRE workload identity' (#75) from feat/spire-host-development into main
yaml / yaml (push) Successful in 9s
Reviewed-on: #75
2026-09-16 16:59:17 +00:00
panxiao81 7703b5d21e 为宿主机开发启用 SPIRE workload identity
yaml / yaml (pull_request) Failing after 2s
2026-09-16 16:57:33 +00:00
panxiao81 3871d34232 ci: 统一使用 pod runner
ansible / lint (pull_request) Failing after 4s
ansible / collection-test (pull_request) Failing after 4s
terraform / validate (pull_request) Failing after 4s
yaml / yaml (pull_request) Failing after 3s
2026-09-16 16:33:16 +00:00
panxiao81 9c64d31d3d Merge pull request '清理已退役的 VictoriaMetrics Compose 配置' (#73) from chore/remove-legacy-monitoring into main
yaml / yaml (push) Successful in 11s
Reviewed-on: #73
2026-09-16 16:05:32 +00:00
panxiao81 d9486b4c8c 清理已停用的 VictoriaMetrics Compose 配置并记录旧数据卷删除
yaml / yaml (pull_request) Successful in 15s
2026-09-16 15:53:00 +00:00
panxiao81 f36e8a1733 Merge pull request '允许 Gitea 投递动态 Runner 集群内 webhook' (#72) from fix/gitea-webhook-allowlist into main
yaml / yaml (push) Successful in 10s
Reviewed-on: #72
2026-09-16 15:37:35 +00:00
panxiao81 926a90508a 允许 Gitea 投递动态 Runner 集群内 webhook
yaml / yaml (pull_request) Successful in 11s
2026-09-16 15:35:38 +00:00
panxiao81 cb2a66ded5 合并 PR #70:更新 zot 运行状态与 GitOps 接管文档 2026-09-16 15:25:45 +00:00
panxiao81 f767cd9a5e Merge pull request:隔离动态 Runner 凭据挂载路径
yaml / yaml (push) Successful in 11s
2026-09-16 15:25:03 +00:00
panxiao81 13279256a5 避免动态 Runner 凭据覆盖服务账号令牌路径
yaml / yaml (pull_request) Successful in 11s
2026-09-16 15:24:16 +00:00
panxiao81 dc325f3a45 Merge pull request:固定 dynamic runner 初始化容器的数值用户
yaml / yaml (push) Successful in 10s
2026-09-16 15:14:08 +00:00
panxiao81 87bb556087 固定 curl 初始化容器的数值用户
yaml / yaml (pull_request) Successful in 11s
2026-09-16 15:13:09 +00:00
panxiao81 11f038794f docs(zot): 更新双入口运行状态与 GitOps 接管结果 2026-09-16 15:08:28 +00:00
panxiao81 654087ef46 Merge pull request:修正动态 Runner 的 Bao 凭据路径
yaml / yaml (push) Successful in 12s
2026-09-16 15:05:34 +00:00
panxiao81 14fb5a323a 修正动态 Runner 的 Bao 凭据路径
yaml / yaml (pull_request) Successful in 12s
2026-09-16 15:04:31 +00:00
panxiao81 eb68e9f0c5 Merge pull request '部署 Pod/VM 动态 Runner 控制器' (#67) from feat/dynamic-runner-controller into main
yaml / yaml (push) Successful in 11s
Reviewed-on: #67
2026-09-16 15:00:03 +00:00
panxiao81 c4f425e9ea 按执行职责拆分动态 Runner 组件
yaml / yaml (pull_request) Successful in 10s
2026-09-16 14:53:30 +00:00
panxiao81 d15733caac Merge pull request '修复 zot:同时提供匿名拉取与 SPIRE 鉴权推送' (#65) from fix/zot-anonymous-pull into main
ansible / collection-test (push) Successful in 1m9s
yaml / yaml (push) Successful in 14s
ansible / lint (push) Successful in 15m46s
Reviewed-on: #65
2026-09-16 14:50:13 +00:00
panxiao81 246b5023e7 部署动态 Pod Runner 控制器
yaml / yaml (pull_request) Successful in 12s
2026-09-16 14:34:47 +00:00
panxiao81 21b7b48cdf Merge pull request:为 Gitea runner 接入 SPIRE Workload API
yaml / yaml (push) Successful in 11s
2026-09-16 13:26:02 +00:00
panxiao81 94721c279b 为 Gitea runner 接入 SPIRE Workload API
yaml / yaml (pull_request) Successful in 12s
2026-09-16 13:25:01 +00:00
panxiao81 31d89817b2 fix(zot): 分离匿名拉取与 SPIRE 鉴权推送入口
yaml / yaml (pull_request) Successful in 22s
ansible / collection-test (pull_request) Successful in 1m10s
ansible / lint (pull_request) Successful in 17m42s
2026-09-16 13:06:35 +00:00
panxiao81 22bffe068c Merge pull request:使用字节数配置 NATS Account 配额
yaml / yaml (push) Successful in 10s
2026-09-16 12:49:59 +00:00
panxiao81 6078a06b99 使用字节数配置 NATS Account 配额
yaml / yaml (pull_request) Successful in 11s
2026-09-16 12:49:20 +00:00
panxiao81 47042d4df4 完善内存监控并迁移 Grafana 内网入口
yaml / yaml (push) Successful in 20s
ansible / collection-test (push) Successful in 1m10s
ansible / lint (push) Successful in 13m9s
Co-authored-by: panxiao81 <[email protected]>
2026-09-16 12:47:52 +00:00
panxiao81 fd6bd62a4f Merge pull request:修复 NATS 容量单位语法
yaml / yaml (push) Successful in 14s
2026-09-16 12:41:08 +00:00
panxiao81 3eb6f33dea 修复 NATS 容量单位语法
yaml / yaml (pull_request) Successful in 10s
2026-09-16 12:40:19 +00:00
panxiao81 818192f453 Merge pull request:修复 NATS Account 配额格式
yaml / yaml (push) Successful in 11s
2026-09-16 12:34:12 +00:00
panxiao81 387953c80a 修复 NATS Account 配额格式
yaml / yaml (pull_request) Successful in 10s
2026-09-16 12:33:16 +00:00
panxiao81 298db6a745 Merge pull request:修复 NATS Bao ACME 证书密钥类型
yaml / yaml (push) Successful in 10s
2026-09-16 12:26:19 +00:00