69 Commits

Include renames

Author	SHA1	Message	Date
panxiao81	611a5a3d3a	修复 Pool task-executor 数据目录与 guest 身份镜像	2026-09-18 18:59:02 +00:00
panxiao81	6eb4875db6	接入 OpenSandbox 动态 Runner	2026-09-18 18:33:00 +00:00
panxiao81	4c823f8181	确保 OpenSandbox values 立即生效	2026-09-18 17:49:26 +00:00
panxiao81	159a75b710	记录 sandbox ESO 当前状态	2026-09-18 17:40:24 +00:00
panxiao81	e0e629794b	为 sandbox 接入 OpenBao External Secrets	2026-09-18 17:34:53 +00:00
panxiao81	d526fd75d3	部署 OpenSandbox 控制面	2026-09-18 16:36:21 +00:00
panxiao81	99d1ec1d6f	Merge pull request '记录 Kata guest 内 SPIFFE 身份方案' (#95) from docs/kata-inner-spire into main ... Reviewed-on: #95	2026-09-18 16:18:29 +00:00
panxiao81	3b77af8da1	feat: 切换 SPIRE 到内部 chart fork	2026-09-18 00:24:21 +00:00
panxiao81	583dab526a	docs: 明确 SPIRE chart 字段缺口	2026-09-17 18:54:00 +00:00
panxiao81	3dbd4c5f31	docs: 记录 Kata guest SPIFFE 身份方案	2026-09-17 18:47:01 +00:00
panxiao81	94684d0722	feat: 部署 sandbox Kata Containers	2026-09-17 18:02:46 +00:00
panxiao81	9515cde49b	Merge pull request '补齐 sandbox PSAT reviewer 权限' (#90) from fix/sandbox-spire-psat-rbac into main ... Reviewed-on: #90	2026-09-17 17:47:27 +00:00
panxiao81	d1ccc99125	修复 SPIRE Agent Server 端口	2026-09-17 17:43:39 +00:00
panxiao81	b619f6f681	fix: 补齐 sandbox PSAT reviewer 权限	2026-09-17 17:30:54 +00:00
panxiao81	aeb8c49d0a	feat: 部署 sandbox SPIRE Agent 与 CSI	2026-09-17 17:23:25 +00:00
panxiao81	ea15841d4d	feat: 引导 sandbox SPIRE external controller	2026-09-17 17:00:44 +00:00
panxiao81	b7b92b3465	feat: 引导 sandbox 跨集群 SPIRE 认证	2026-09-17 16:50:02 +00:00
panxiao81	60836c3360	feat: 接入 sandbox Kubernetes 监控	2026-09-17 16:02:48 +00:00
panxiao81	5241eceb0c	feat(dns): 用模板生成各后端配置	2026-09-16 18:27:09 +00:00
panxiao81	d6518153c8	Merge pull request '使用 Zot 中的 Ubuntu Pod Runner 镜像' (#78) from fix/pod-runner-ubuntu-image into main ... Reviewed-on: #78	2026-09-16 17:32:44 +00:00
panxiao81	5b81719675	使用 Zot 中的 Ubuntu Pod Runner 镜像	2026-09-16 17:23:05 +00:00
panxiao81	f3d8c38d28	收窄本机 SPIFFE 身份的 KV 权限范围	2026-09-16 17:15:07 +00:00
panxiao81	61f0f864aa	Merge pull request '授权本机 SPIFFE 身份访问开发服务' (#76) from feat/spire-host-development into main ... Reviewed-on: #76	2026-09-16 17:07:50 +00:00
panxiao81	64b1acd6c3	授权本机 SPIFFE 身份访问开发服务	2026-09-16 17:06:27 +00:00
panxiao81	bbf228de41	Merge pull request '为宿主机开发启用 SPIRE workload identity' (#75) from feat/spire-host-development into main ... Reviewed-on: #75	2026-09-16 16:59:17 +00:00
panxiao81	7703b5d21e	为宿主机开发启用 SPIRE workload identity	2026-09-16 16:57:33 +00:00
panxiao81	d9486b4c8c	清理已停用的 VictoriaMetrics Compose 配置并记录旧数据卷删除	2026-09-16 15:53:00 +00:00
panxiao81	13279256a5	避免动态 Runner 凭据覆盖服务账号令牌路径	2026-09-16 15:24:16 +00:00
panxiao81	87bb556087	固定 curl 初始化容器的数值用户	2026-09-16 15:13:09 +00:00
panxiao81	14fb5a323a	修正动态 Runner 的 Bao 凭据路径	2026-09-16 15:04:31 +00:00
panxiao81	c4f425e9ea	按执行职责拆分动态 Runner 组件	2026-09-16 14:53:30 +00:00
panxiao81	246b5023e7	部署动态 Pod Runner 控制器	2026-09-16 14:34:47 +00:00
panxiao81	94721c279b	为 Gitea runner 接入 SPIRE Workload API	2026-09-16 13:25:01 +00:00
panxiao81	6078a06b99	使用字节数配置 NATS Account 配额	2026-09-16 12:49:20 +00:00
panxiao81	47042d4df4	完善内存监控并迁移 Grafana 内网入口 ... Co-authored-by: panxiao81 <[email protected]>	2026-09-16 12:47:52 +00:00
panxiao81	3eb6f33dea	修复 NATS 容量单位语法	2026-09-16 12:40:19 +00:00
panxiao81	387953c80a	修复 NATS Account 配额格式	2026-09-16 12:33:16 +00:00
panxiao81	f36a1cbf11	修复 NATS Bao ACME 证书密钥类型	2026-09-16 12:25:28 +00:00
panxiao81	b7b7975c9f	由 monitoring 提供 Prometheus Operator CRD	2026-09-16 12:22:00 +00:00
panxiao81	9604ff1004	修复 NATS 监控 CRD 兼容性	2026-09-16 12:18:34 +00:00
panxiao81	40703782ea	修复 cert-manager Gateway API ACME solver	2026-09-16 12:16:23 +00:00
panxiao81	c11e1d5e6f	部署 NATS JetStream 消息基础设施	2026-09-16 12:00:24 +00:00
panxiao81	5c2b575a4f	feat(zot): 接入 SeaweedFS 与 SPIRE 并统一 S3 凭据来源	2026-09-14 13:26:54 +00:00
panxiao81	ed86738c4b	文档：记录 SPIRE 与 OpenBao workload identity 用法	2026-09-14 10:31:36 +00:00
panxiao81	c9987122e6	配置 SPIRE JWT-SVID 登录 OpenBao	2026-09-13 15:56:08 +00:00
panxiao81	b6ad65d768	暴露 SPIRE OIDC discovery endpoint	2026-09-13 15:44:18 +00:00
panxiao81	22192a3c68	部署 SPIRE workload identity 基础设施	2026-09-13 15:33:20 +00:00
panxiao81	d09f62c063	fix(grafana): 使用 Recreate 挂载 ZFS PVC	2026-09-10 15:55:28 +00:00
panxiao81	15444b9eb3	feat(flux): 激活剩余可观测性栈接管	2026-09-10 12:26:09 +00:00
panxiao81	92820fc631	feat(flux): 统一接管剩余可观测性栈	2026-09-10 11:53:06 +00:00