panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

暴露 SPIRE OIDC discovery endpoint #52

Merged
panxiao81 merged 1 commits from feat/spire-oidc-poc into main 2026-09-13 15:50:22 +00:00
Conversation 0 Commits 1 Files Changed 4
+26 -3
panxiao81 commented 2026-09-13 15:44:38 +00:00
Owner
Copy Link
Copy Source

内容

  • 为 spire-oidc.ad.ddupan.top 增加 Envoy Gateway HTTPRoute
  • 复用现有 *.ad.ddupan.top wildcard certificate，在 Gateway 终止 TLS
  • 将对应 A 记录加入统一 DNS 清单，目标为 192.168.10.127
  • 记录 endpoint 的公开边界，明确不得增加 Authelia forward-auth

验证

  • HTTPRoute 通过 Kubernetes API server-side dry-run
  • YAML lint 通过
  • 后端 Service 与端口已根据线上对象确认

关联 #34。

## 内容 - 为 `spire-oidc.ad.ddupan.top` 增加 Envoy Gateway HTTPRoute - 复用现有 `*.ad.ddupan.top` wildcard certificate，在 Gateway 终止 TLS - 将对应 A 记录加入统一 DNS 清单，目标为 `192.168.10.127` - 记录 endpoint 的公开边界，明确不得增加 Authelia forward-auth ## 验证 - HTTPRoute 通过 Kubernetes API server-side dry-run - YAML lint 通过 - 后端 Service 与端口已根据线上对象确认 关联 #34。
panxiao81 self-assigned this 2026-09-13 15:44:38 +00:00
panxiao81 added 1 commit 2026-09-13 15:44:38 +00:00
暴露 SPIRE OIDC discovery endpoint
ansible / collection-test (pull_request) Successful in 2m17s
Details
yaml / yaml (pull_request) Successful in 28s
Details
ansible / lint (pull_request) Successful in 4m21s
Details
b6ad65d768
panxiao81 merged commit 9139f6f1f1 into main 2026-09-13 15:50:22 +00:00
panxiao81 deleted branch feat/spire-oidc-poc 2026-09-13 15:50:22 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees panxiao81
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#52