panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests 1 Actions Packages Projects Releases Wiki Activity

为 Backstage 镜像仓库配置 SPIFFE 发布权限 #145

Merged
panxiao81 merged 1 commits from feat/zot-backstage-access into main 2026-09-25 15:26:38 +00:00
Conversation 0 Commits 1 Files Changed 1
+18
panxiao81 commented 2026-09-25 15:24:02 +00:00
Owner
Copy Link
Copy Source

为 panxiao81/backstage 镜像仓库增加精确访问策略，允许 CI 身份 spiffe://ddupan.top/ci/panxiao81/backstage/image 和开发身份 spiffe://ddupan.top/dev/panxiao81 执行 read/create/update，默认策略为 read。

仅修改 apps/zot/values.yaml。已校验 YAML、内嵌 JSON、策略内容和 git diff --check；尚未部署或验证实际推送。

为 `panxiao81/backstage` 镜像仓库增加精确访问策略，允许 CI 身份 `spiffe://ddupan.top/ci/panxiao81/backstage/image` 和开发身份 `spiffe://ddupan.top/dev/panxiao81` 执行 `read/create/update`，默认策略为 `read`。 仅修改 `apps/zot/values.yaml`。已校验 YAML、内嵌 JSON、策略内容和 `git diff --check`；尚未部署或验证实际推送。
panxiao81 added 1 commit 2026-09-25 15:24:04 +00:00
为 Backstage 镜像仓库配置 SPIFFE 发布权限
yaml / yaml (pull_request) Successful in 30s
Details
521a49599a
panxiao81 merged commit 7a62dde601 into main 2026-09-25 15:26:38 +00:00
panxiao81 deleted branch feat/zot-backstage-access 2026-09-25 15:26:38 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#145