Commit Graph

Select branches

Hide Pull Requests

feat/opensandbox-ci-runner

main

poc/kind-on-kata

#1

#10

#100

#101

#102

#103

#104

#105

#106

#107

#108

#109

#110

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#15

#16

#17

#18

#19

#2

#20

#21

#22

#23

#24

#25

#26

#27

#28

#29

#3

#30

#31

#32

#33

#35

#36

#37

#38

#39

#4

#40

#41

#42

#43

#44

#48

#49

#5

#51

#52

#53

#54

#55

#57

#58

#59

#6

#60

#61

#62

#63

#64

#65

#66

#67

#68

#69

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#84

#85

#86

#87

#88

#89

#90

#91

#92

#93

#95

#96

#97

#98

#99

Mono Color

• 3dbd4c5f31 docs: 记录 Kata guest SPIFFE 身份方案 panxiao81 2026-09-17 18:47:01 +00:00
• e67bce5121 fix: 延长 sandbox Flux 根同步超时 panxiao81 2026-09-17 18:20:33 +00:00
• 8af511ecc8 Merge pull request '部署 sandbox Kata Containers' (#92) from feat/sandbox-kata into main panxiao81 2026-09-17 18:06:18 +00:00
• 94684d0722 feat: 部署 sandbox Kata Containers panxiao81 2026-09-17 18:02:46 +00:00
• 9515cde49b Merge pull request '补齐 sandbox PSAT reviewer 权限' (#90) from fix/sandbox-spire-psat-rbac into main panxiao81 2026-09-17 17:47:27 +00:00
• accf2d8210 Merge pull request '修复 SPIRE Agent 连接 Server 的端口' (#91) from fix/spire-agent-server-port into main panxiao81 2026-09-17 17:44:50 +00:00
• d1ccc99125 修复 SPIRE Agent Server 端口 panxiao81 2026-09-17 17:43:39 +00:00
• b619f6f681 fix: 补齐 sandbox PSAT reviewer 权限 panxiao81 2026-09-17 17:30:54 +00:00
• 1806c678a4 Merge pull request '部署 sandbox SPIRE Agent 与 CSI' (#89) from feat/sandbox-spire-agents into main panxiao81 2026-09-17 17:27:14 +00:00
• aeb8c49d0a feat: 部署 sandbox SPIRE Agent 与 CSI panxiao81 2026-09-17 17:23:25 +00:00
• 7b1a98280c Merge pull request '引导 sandbox SPIRE external controller' (#88) from feat/sandbox-spire-controller-bootstrap into main panxiao81 2026-09-17 17:14:50 +00:00
• ea15841d4d feat: 引导 sandbox SPIRE external controller panxiao81 2026-09-17 17:00:44 +00:00
• 4b9aa9e164 Merge pull request '引导 sandbox 跨集群 SPIRE 认证' (#87) from feat/sandbox-spire-bootstrap into main panxiao81 2026-09-17 16:55:59 +00:00
• b7b92b3465 feat: 引导 sandbox 跨集群 SPIRE 认证 panxiao81 2026-09-17 16:50:02 +00:00
• dc2b43f693 Merge pull request '接入 sandbox Kubernetes 监控' (#86) from feat/sandbox-monitoring into main panxiao81 2026-09-17 16:21:27 +00:00
• 60836c3360 feat: 接入 sandbox Kubernetes 监控 panxiao81 2026-09-17 16:02:48 +00:00
• 2030751e6a Merge pull request '声明 sandbox 双节点 K3s 集群 IaC' (#85) from feat/sandbox-cluster-iac into main panxiao81 2026-09-17 15:42:41 +00:00
• f810b1c674 docs: 明确 sandbox 监控边界 panxiao81 2026-09-17 15:11:08 +00:00
• 6585d8c46a feat: 声明 sandbox 双节点 K3s 集群 panxiao81 2026-09-17 14:46:10 +00:00
• cadfee0aea Merge pull request '整理旧工作区并恢复未纳管 IaC' (#84) from chore/recover-old-workspace into main panxiao81 2026-09-17 13:31:49 +00:00
• 412fa93018 修正网络配置 YAML 缩进 panxiao81 2026-09-17 13:29:14 +00:00
• 2e05b1a96a 声明式管理 Proxmox API 对象与 Samba DNS 上游 panxiao81 2026-09-17 13:22:50 +00:00
• 71eea7d8fc 恢复 OCI Terraform 与站点网络 IaC panxiao81 2026-09-17 13:18:00 +00:00
• a08c8a7303 统一 DN42 DNS 与宿主 Docker 地址池 panxiao81 2026-09-17 13:17:15 +00:00
• 76f94f4f31 Merge pull request '用统一 inventory 生成 DNS 后端配置' (#81) from feat/dns-config-generator into main panxiao81 2026-09-16 18:43:02 +00:00
• a2102e6708 Merge pull request '恢复本机对动态 Runner 镜像的发布权限' (#82) from fix/zot-local-publisher-exact-policy into main panxiao81 2026-09-16 18:39:51 +00:00
• bb2b5119ab 恢复本机对动态 Runner 镜像的发布权限 panxiao81 2026-09-16 18:38:30 +00:00
• 65a72ce7fa fix(ci): 为 Ansible lint 提供临时 Vault 占位文件 panxiao81 2026-09-16 18:37:59 +00:00
• 5241eceb0c feat(dns): 用模板生成各后端配置 panxiao81 2026-09-16 18:27:09 +00:00
• 5ba4411646 Merge pull request '授权动态 Runner CI 发布镜像' (#80) from feat/dynamic-runner-publisher-policy into main panxiao81 2026-09-16 18:12:01 +00:00
• 2fcb41adde 授权动态 Runner CI 发布镜像 panxiao81 2026-09-16 18:11:11 +00:00
• 42d33e31da Merge pull request 'ci: 统一使用 pod runner' (#74) from ci/self-hosted-pod into main panxiao81 2026-09-16 17:58:26 +00:00
• b617b4bc23 Merge pull request '修复无 Vault 凭据时的 Ansible lint' (#79) from fix/ansible-lint-without-vault into main panxiao81 2026-09-16 17:58:00 +00:00
• b6b4efe48f 修复无 Vault 凭据时的 Ansible lint panxiao81 2026-09-16 17:49:35 +00:00
• d6518153c8 Merge pull request '使用 Zot 中的 Ubuntu Pod Runner 镜像' (#78) from fix/pod-runner-ubuntu-image into main panxiao81 2026-09-16 17:32:44 +00:00
• e42bb12f8e ci: 完整验证固定 digest Runner panxiao81 2026-09-16 17:32:30 +00:00
• f97505df2d ci: 在固定 digest 上重试集成测试 panxiao81 2026-09-16 17:30:29 +00:00
• 8b4acc40f6 ci: 重试 Pod Runner 集成测试 panxiao81 2026-09-16 17:29:45 +00:00
• 61df128e25 ci: 重新验证 Ubuntu Pod Runner panxiao81 2026-09-16 17:26:00 +00:00
• 5b81719675 使用 Zot 中的 Ubuntu Pod Runner 镜像 panxiao81 2026-09-16 17:23:05 +00:00
• 62c0ce1fff Merge pull request '收窄本机 SPIFFE 身份的 KV 权限范围' (#77) from fix/spire-local-kv-scope into main panxiao81 2026-09-16 17:17:11 +00:00
• f3d8c38d28 收窄本机 SPIFFE 身份的 KV 权限范围 panxiao81 2026-09-16 17:15:07 +00:00
• 61f0f864aa Merge pull request '授权本机 SPIFFE 身份访问开发服务' (#76) from feat/spire-host-development into main panxiao81 2026-09-16 17:07:50 +00:00
• 64b1acd6c3 授权本机 SPIFFE 身份访问开发服务 panxiao81 2026-09-16 17:06:27 +00:00
• bbf228de41 Merge pull request '为宿主机开发启用 SPIRE workload identity' (#75) from feat/spire-host-development into main panxiao81 2026-09-16 16:59:17 +00:00
• 7703b5d21e 为宿主机开发启用 SPIRE workload identity panxiao81 2026-09-16 16:56:52 +00:00
• 3871d34232 ci: 统一使用 pod runner panxiao81 2026-09-16 16:33:16 +00:00
• 9c64d31d3d Merge pull request '清理已退役的 VictoriaMetrics Compose 配置' (#73) from chore/remove-legacy-monitoring into main panxiao81 2026-09-16 16:05:32 +00:00
• d9486b4c8c 清理已停用的 VictoriaMetrics Compose 配置并记录旧数据卷删除 panxiao81 2026-09-16 15:49:55 +00:00
• f36e8a1733 Merge pull request '允许 Gitea 投递动态 Runner 集群内 webhook' (#72) from fix/gitea-webhook-allowlist into main panxiao81 2026-09-16 15:37:35 +00:00
• 926a90508a 允许 Gitea 投递动态 Runner 集群内 webhook panxiao81 2026-09-16 15:35:38 +00:00
• cb2a66ded5 合并 PR #70：更新 zot 运行状态与 GitOps 接管文档 panxiao81 2026-09-16 15:25:45 +00:00
• f767cd9a5e Merge pull request：隔离动态 Runner 凭据挂载路径 panxiao81 2026-09-16 15:25:03 +00:00
• 13279256a5 避免动态 Runner 凭据覆盖服务账号令牌路径 panxiao81 2026-09-16 15:24:16 +00:00
• dc325f3a45 Merge pull request：固定 dynamic runner 初始化容器的数值用户 panxiao81 2026-09-16 15:14:08 +00:00
• 87bb556087 固定 curl 初始化容器的数值用户 panxiao81 2026-09-16 15:13:09 +00:00
• 11f038794f docs(zot): 更新双入口运行状态与 GitOps 接管结果 panxiao81 2026-09-16 15:08:28 +00:00
• 654087ef46 Merge pull request：修正动态 Runner 的 Bao 凭据路径 panxiao81 2026-09-16 15:05:34 +00:00
• 14fb5a323a 修正动态 Runner 的 Bao 凭据路径 panxiao81 2026-09-16 15:04:31 +00:00
• eb68e9f0c5 Merge pull request '部署 Pod/VM 动态 Runner 控制器' (#67) from feat/dynamic-runner-controller into main panxiao81 2026-09-16 15:00:03 +00:00
• c4f425e9ea 按执行职责拆分动态 Runner 组件 panxiao81 2026-09-16 14:53:30 +00:00
• d15733caac Merge pull request '修复 zot：同时提供匿名拉取与 SPIRE 鉴权推送' (#65) from fix/zot-anonymous-pull into main panxiao81 2026-09-16 14:50:13 +00:00
• 246b5023e7 部署动态 Pod Runner 控制器 panxiao81 2026-09-16 14:34:47 +00:00
• 21b7b48cdf Merge pull request：为 Gitea runner 接入 SPIRE Workload API panxiao81 2026-09-16 13:26:02 +00:00
• 94721c279b 为 Gitea runner 接入 SPIRE Workload API panxiao81 2026-09-16 13:25:01 +00:00
• 31d89817b2 fix(zot): 分离匿名拉取与 SPIRE 鉴权推送入口 panxiao81 2026-09-16 13:06:35 +00:00
• 22bffe068c Merge pull request：使用字节数配置 NATS Account 配额 panxiao81 2026-09-16 12:49:59 +00:00
• 6078a06b99 使用字节数配置 NATS Account 配额 panxiao81 2026-09-16 12:49:20 +00:00
• 47042d4df4 完善内存监控并迁移 Grafana 内网入口 panxiao81 2026-09-16 12:47:52 +00:00
• fd6bd62a4f Merge pull request：修复 NATS 容量单位语法 panxiao81 2026-09-16 12:41:08 +00:00
• 3eb6f33dea 修复 NATS 容量单位语法 panxiao81 2026-09-16 12:40:19 +00:00
• 818192f453 Merge pull request：修复 NATS Account 配额格式 panxiao81 2026-09-16 12:34:12 +00:00
• 387953c80a 修复 NATS Account 配额格式 panxiao81 2026-09-16 12:33:16 +00:00
• 298db6a745 Merge pull request：修复 NATS Bao ACME 证书密钥类型 panxiao81 2026-09-16 12:26:19 +00:00
• f36a1cbf11 修复 NATS Bao ACME 证书密钥类型 panxiao81 2026-09-16 12:25:28 +00:00
• b953db199e Merge pull request：由 monitoring 提供 Prometheus Operator CRD panxiao81 2026-09-16 12:23:40 +00:00
• b7b7975c9f 由 monitoring 提供 Prometheus Operator CRD panxiao81 2026-09-16 12:22:00 +00:00
• 9604ff1004 修复 NATS 监控 CRD 兼容性 panxiao81 2026-09-16 12:18:34 +00:00
• 819b521039 Merge pull request：修复 cert-manager Gateway API ACME solver panxiao81 2026-09-16 12:17:07 +00:00
• 40703782ea 修复 cert-manager Gateway API ACME solver panxiao81 2026-09-16 12:16:23 +00:00
• aae19850cf Merge pull request：部署 NATS JetStream 消息基础设施 panxiao81 2026-09-16 12:13:06 +00:00
• c11e1d5e6f 部署 NATS JetStream 消息基础设施 panxiao81 2026-09-16 12:00:24 +00:00
• 57b13387cb ci: 输出 kind 节点准备调试日志 poc/kind-on-kata panxiao81 2026-09-14 16:16:36 +00:00
• 1deb024621 ci: 移除错误的容器内磁盘检查 panxiao81 2026-09-14 16:02:13 +00:00
• 311a506982 ci: 记录 kind guest 临时盘容量 panxiao81 2026-09-14 16:00:51 +00:00
• a0d38fc9ab ci: 验证 kind 使用 guest-local overlay2 panxiao81 2026-09-14 15:54:28 +00:00
• fa293ffc80 ci: 重试 kind 工具下载 panxiao81 2026-09-14 14:53:46 +00:00
• 77df686981 ci: 向 kind node 提供 guest kmsg panxiao81 2026-09-14 14:51:37 +00:00
• 9e6515406f ci: 将 guest Docker 暴露给 kind job panxiao81 2026-09-14 14:42:10 +00:00
• f6c216ce93 ci: 验证 Kata 内运行 kind 集群 panxiao81 2026-09-14 14:38:14 +00:00
• e0e8213b8f Merge pull request '部署 zot：接入 SeaweedFS、SPIRE 并统一 S3 凭据来源' (#55) from feat/zot-spire-s3 into main panxiao81 2026-09-14 13:38:17 +00:00
• 5c2b575a4f feat(zot): 接入 SeaweedFS 与 SPIRE 并统一 S3 凭据来源 panxiao81 2026-09-14 13:26:54 +00:00
• 67dfe1ddcb Merge pull request 54: 记录 SPIRE 与 OpenBao workload identity 用法 panxiao81 2026-09-14 10:33:14 +00:00
• ed86738c4b 文档：记录 SPIRE 与 OpenBao workload identity 用法 panxiao81 2026-09-14 10:31:36 +00:00
• 8c27a7286b Merge pull request 53: 配置 SPIRE JWT-SVID 登录 OpenBao panxiao81 2026-09-13 16:01:52 +00:00
• c9987122e6 配置 SPIRE JWT-SVID 登录 OpenBao panxiao81 2026-09-13 15:56:08 +00:00
• 9139f6f1f1 Merge pull request 52: 暴露 SPIRE OIDC discovery endpoint panxiao81 2026-09-13 15:50:21 +00:00
• b6ad65d768 暴露 SPIRE OIDC discovery endpoint panxiao81 2026-09-13 15:44:18 +00:00
• d256682d11 Merge pull request 49: 建立 DNS source of truth panxiao81 2026-09-13 15:42:12 +00:00
• bdacc03e74 Merge pull request 51: 部署 SPIRE workload identity 基础设施 panxiao81 2026-09-13 15:35:53 +00:00