启用 OpenSandbox VM Runner canary #119

2026-09-21T06:11:00Z

panxiao81 commented

2026-09-21 06:11:00 +00:00

变更

controller 启用 scheduler,pod-worker,vm-worker
通过 ESO 挂载文件读取 OpenSandbox API key
使用内网 Lifecycle API http://10.60.0.13:8080 与 ci-vm Pool
Pod 与 VM capacity 均保持 1，并保留 scheduler single-flight
更新 controller 和 ci-vm runner 镜像 digest
更新 VM terminal metadata 自动清理 runbook

验证

OpenSandbox API：无 key 401，ESO key 200
kata-clh-runtime-rs 存在
ci-vm Pool 当前 0/0/0，零预热
OpenSandbox server 与 identity controller 均 1/1 Ready
dynamic-runner Kustomize server-side dry-run 通过
两套 Kustomize 清单渲染与 yamllint 通过
gitea-dynamic-runner PR #30 CI 全部成功

Canary

合并部署后只触发一个 [self-hosted, vm] 最小任务，验收 BatchSandbox、Kata Pod、Pod UID SPIFFE entry、runner 执行以及终态完整清理。

## 变更 - controller 启用 `scheduler,pod-worker,vm-worker` - 通过 ESO 挂载文件读取 OpenSandbox API key - 使用内网 Lifecycle API `http://10.60.0.13:8080` 与 `ci-vm` Pool - Pod 与 VM capacity 均保持 1，并保留 scheduler single-flight - 更新 controller 和 `ci-vm` runner 镜像 digest - 更新 VM terminal metadata 自动清理 runbook ## 验证 - OpenSandbox API：无 key 401，ESO key 200 - `kata-clh-runtime-rs` 存在 - `ci-vm` Pool 当前 0/0/0，零预热 - OpenSandbox server 与 identity controller 均 1/1 Ready - dynamic-runner Kustomize server-side dry-run 通过 - 两套 Kustomize 清单渲染与 yamllint 通过 - gitea-dynamic-runner PR #30 CI 全部成功 ## Canary 合并部署后只触发一个 `[self-hosted, vm]` 最小任务，验收 BatchSandbox、Kata Pod、Pod UID SPIFFE entry、runner 执行以及终态完整清理。

panxiao81 added 1 commit 2026-09-21 06:11:01 +00:00

启用 OpenSandbox VM Runner canary

yaml / yaml (pull_request) Successful in 17s

Details

762ce6458d

panxiao81 merged commit 0b236c43d9 into main

2026-09-21 06:12:36 +00:00

panxiao81 deleted branch deploy/opensandbox-vm-canary

2026-09-21 06:12:37 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#119