panxiao81/homelab-infra
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases Wiki Activity

授权动态 Runner CI 发布镜像 #80

Merged
panxiao81 merged 1 commits from feat/dynamic-runner-publisher-policy into main 2026-09-16 18:12:01 +00:00
Conversation 0 Commits 1 Files Changed 1
+34
panxiao81 commented 2026-09-16 18:11:27 +00:00
Owner
Copy Link
Copy Source

变更

允许以下 workload identity 发布动态 Runner 镜像：

spiffe://ddupan.top/ci/panxiao81/gitea-dynamic-runner/publish-images

授权范围严格限定为：

  • panxiao81/gitea-dynamic-runner-controller
  • panxiao81/gitea-dynamic-runner-runner

允许操作为 read/create/update，不授予 delete，也不扩大其他 repository 的写权限。

依赖

应先合并并等待 Zot rollout，再合并 panxiao81/gitea-dynamic-runner#14，使首次 main push 发布具备权限。

验证

  • values.yaml 内嵌 Zot JSON 可由 jq 正常解析
  • git diff --check 通过
## 变更 允许以下 workload identity 发布动态 Runner 镜像： `spiffe://ddupan.top/ci/panxiao81/gitea-dynamic-runner/publish-images` 授权范围严格限定为： - `panxiao81/gitea-dynamic-runner-controller` - `panxiao81/gitea-dynamic-runner-runner` 允许操作为 `read/create/update`，不授予 delete，也不扩大其他 repository 的写权限。 ## 依赖 应先合并并等待 Zot rollout，再合并 `panxiao81/gitea-dynamic-runner#14`，使首次 main push 发布具备权限。 ## 验证 - values.yaml 内嵌 Zot JSON 可由 jq 正常解析 - `git diff --check` 通过
panxiao81 added 1 commit 2026-09-16 18:11:27 +00:00
授权动态 Runner CI 发布镜像
yaml / yaml (pull_request) Successful in 10s
Details
2fcb41adde
panxiao81 merged commit 5ba4411646 into main 2026-09-16 18:12:01 +00:00
panxiao81 deleted branch feat/dynamic-runner-publisher-policy 2026-09-16 18:12:01 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
panxiao81 (Xiao Pan)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: panxiao81/homelab-infra#80