panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

避免动态 Runner 凭据覆盖服务账号令牌路径 #71

Merged
panxiao81 merged 1 commits from fix/dynamic-runner-secret-mount into main 2026-09-16 15:25:04 +00:00
Conversation 0 Commits 1 Files Changed 2
+5 -5
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
platform/dynamic-runner/deployment.yaml
+3 -3
View File
@@ -50,9 +50,9 @@ spec:
- name: NATS_CA_FILE
value: /run/trust/ca.pem
- name: NATS_PASSWORD_FILE
value: /run/secrets/nats-password
value: /run/dynamic-runner-secrets/nats-password
- name: WEBHOOK_SECRET_FILE
value: /run/secrets/webhook-secret
value: /run/dynamic-runner-secrets/webhook-secret
ports:
- name: http
containerPort: 8787
@@ -86,7 +86,7 @@ spec:
type: RuntimeDefault
volumeMounts:
- name: secret
mountPath: /run/secrets
mountPath: /run/dynamic-runner-secrets
readOnly: true
- name: trust
mountPath: /run/trust
platform/dynamic-runner/pod-worker-deployment.yaml
+2 -2
View File
@@ -48,7 +48,7 @@ spec:
- name: NATS_CA_FILE
value: /run/trust/ca.pem
- name: NATS_PASSWORD_FILE
value: /run/secrets/nats-worker-password
value: /run/dynamic-runner-secrets/nats-worker-password
- name: RUNNER_NAMESPACE
valueFrom:
fieldRef:
@@ -80,7 +80,7 @@ spec:
type: RuntimeDefault
volumeMounts:
- name: secret
mountPath: /run/secrets
mountPath: /run/dynamic-runner-secrets
readOnly: true
- name: trust
mountPath: /run/trust