panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

为 Gitea runner 接入 SPIRE Workload API #66

Merged
panxiao81 merged 1 commits from feat/gitea-runner-spire into main 2026-09-16 13:26:02 +00:00
Conversation 0 Commits 1 Files Changed 5
+64
panxiao81 commented 2026-09-16 13:25:02 +00:00
Owner
Copy Link
Copy Source

为现有 self-hosted runner 配置专用 ServiceAccount 和精确 ClusterSPIFFEID，将 CSI socket 同时只读挂载到 runner 与 DinD，并仅允许 job 显式 bind mount 该固定路径。为后续使用短期 JWT-SVID 推送 zot 做身份基础；本 PR 尚不授予任何仓库写权限。

为现有 self-hosted runner 配置专用 ServiceAccount 和精确 ClusterSPIFFEID，将 CSI socket 同时只读挂载到 runner 与 DinD，并仅允许 job 显式 bind mount 该固定路径。为后续使用短期 JWT-SVID 推送 zot 做身份基础；本 PR 尚不授予任何仓库写权限。
panxiao81 added 1 commit 2026-09-16 13:25:03 +00:00
为 Gitea runner 接入 SPIRE Workload API
yaml / yaml (pull_request) Successful in 12s
Details
94721c279b
panxiao81 merged commit 21b7b48cdf into main 2026-09-16 13:26:02 +00:00
panxiao81 deleted branch feat/gitea-runner-spire 2026-09-16 13:26:02 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#66