Block a user
panxiao81
deleted branch docs/kata-inner-spire from panxiao81/homelab-infra
2026-09-18 16:18:30 +00:00
记录 Kata guest 内 SPIFFE 身份方案
部署 OpenSandbox API 与双运行时 Pool
panxiao81
pushed to feat/opensandbox-ci-runner at panxiao81/homelab-infra
2026-09-18 01:10:10 +00:00
panxiao81
created branch feat/opensandbox-ci-runner in panxiao81/homelab-infra
2026-09-18 01:10:10 +00:00
panxiao81
pushed to feat/opensandbox-runner at panxiao81/gitea-dynamic-runner
2026-09-18 01:09:39 +00:00
接入 OpenSandbox Kata Runner 控制面
panxiao81
pushed to feat/opensandbox-runner at panxiao81/gitea-dynamic-runner
2026-09-18 00:56:11 +00:00
panxiao81
created branch feat/opensandbox-runner in panxiao81/gitea-dynamic-runner
2026-09-18 00:56:11 +00:00
为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入
完成永久 sandbox-kata profile 的 CI workload 正反向端到端验收：Kata Pod 内 Agent 以 Pod UID parent 注册；动态 entry 绑定 spiffe://ddupan.top/ci/poc/task/build 与 unix:uid:2000。uid 2000 workload…
为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入
2026-09-18 已完成线上切换。PR #96 已合并，Flux GitRepository 固定到内部 fork tag spire-0.30.2-ddupan.1@c1deb08a；Helm revision 8 使用 chart [email protected].2-ddupan.1+c1deb08ad4be，Ready=True 且无…
panxiao81
deleted branch feat/spire-chart-fork from panxiao81/homelab-infra
2026-09-18 00:24:56 +00:00
切换 SPIRE 到内部 chart fork
切换 SPIRE 到内部 chart fork
panxiao81
created branch feat/spire-chart-fork in panxiao81/homelab-infra
2026-09-18 00:24:22 +00:00
为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入
已建立内部 fork：https://git.ddupan.top/panxiao81/helm-charts-hardened 。fork main 从当前部署的上游 tag spire-0.30.2（e5901d68）精确分叉，补丁提交为 c1deb08a，内部 chart tag 为 spire-0.30.2-ddupan.…
panxiao81
pushed tag spire-0.30.2-ddupan.1 to panxiao81/helm-charts-hardened
2026-09-17 19:11:18 +00:00