panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

为 sandbox executor 暴露内网 Runner facade #127

Merged
panxiao81 merged 1 commits from fix/expose-runner-facade-internal into main 2026-09-21 09:18:16 +00:00
Conversation 0 Commits 1 Files Changed 3
+6 -5
panxiao81 commented 2026-09-21 09:11:54 +00:00
Owner
Copy Link
Copy Source

问题

Kata guest 已取得任务 SVID，但无法解析 homelab ClusterIP DNS，executor 等待 facade 两分钟后退出。

修复

  • facade Service 改为固定 NodePort 30443
  • sandbox 使用 https://192.168.10.127:30443
  • 仍使用 SPIFFE mTLS 和 facade SPIFFE ID 校验，不依赖 IP 证书
  • 不经过公网或 Cloudflare Tunnel

验证

  • yamllint
  • Kustomize render
  • Kubernetes server-side dry-run
## 问题 Kata guest 已取得任务 SVID，但无法解析 homelab ClusterIP DNS，executor 等待 facade 两分钟后退出。 ## 修复 - facade Service 改为固定 NodePort 30443 - sandbox 使用 `https://192.168.10.127:30443` - 仍使用 SPIFFE mTLS 和 facade SPIFFE ID 校验，不依赖 IP 证书 - 不经过公网或 Cloudflare Tunnel ## 验证 - yamllint - Kustomize render - Kubernetes server-side dry-run
panxiao81 added 1 commit 2026-09-21 09:11:55 +00:00
fix: 为 sandbox 暴露 Runner facade
yaml / yaml (pull_request) Successful in 16s
Details
8244cdad79
panxiao81 merged commit c2314256cc into main 2026-09-21 09:18:16 +00:00
panxiao81 deleted branch fix/expose-runner-facade-internal 2026-09-21 09:18:16 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#127