Xiao Pan panxiao81
  • Joined on 2026-04-20
panxiao81 pushed to feat/job-api-scaffold at panxiao81/ayatori 2026-09-17 19:06:42 +00:00
5bd0455940 test: satisfy Go 1.27 modernization lint
panxiao81 pushed tag spire-0.30.2 to panxiao81/helm-charts-hardened 2026-09-17 19:06:30 +00:00
panxiao81 pushed to main at panxiao81/helm-charts-hardened 2026-09-17 19:06:29 +00:00
e5901d68d0 Merge branch 'main' into release
dc689035c7 Bump spire-lib and dependent Helm Chart versions (patch)
90e3518dca Update spire-ha-agent (#936)
2a8c1b63c4 Bottom turtle ha registry tests (#929)
bb4c73febf Revert "Bump helm/kind-action from 1.14.0 to 1.15.0" (#944)
Compare 10 commits »
panxiao81 created branch main in panxiao81/helm-charts-hardened 2026-09-17 19:06:29 +00:00
panxiao81 created repository panxiao81/helm-charts-hardened 2026-09-17 19:05:36 +00:00
panxiao81 created pull request panxiao81/ayatori#1 2026-09-17 18:58:58 +00:00
feat: scaffold job execution API
panxiao81 created branch feat/job-api-scaffold in panxiao81/ayatori 2026-09-17 18:58:33 +00:00
panxiao81 pushed to feat/job-api-scaffold at panxiao81/ayatori 2026-09-17 18:58:33 +00:00
4846ff2aba feat: scaffold job execution API
7a47221280 docs: design job execution APIs
f559ffebf9 docs: define ephemeral job retention
fd643da0ca docs: define modular controller boundaries
Compare 4 commits »
panxiao81 pushed to docs/kata-inner-spire at panxiao81/homelab-infra 2026-09-17 18:54:02 +00:00
583dab526a docs: 明确 SPIRE chart 字段缺口
panxiao81 created pull request panxiao81/homelab-infra#95 2026-09-17 18:47:45 +00:00
记录 Kata guest 内 SPIFFE 身份方案
panxiao81 pushed to docs/kata-inner-spire at panxiao81/homelab-infra 2026-09-17 18:47:03 +00:00
3dbd4c5f31 docs: 记录 Kata guest SPIFFE 身份方案
panxiao81 created branch docs/kata-inner-spire in panxiao81/homelab-infra 2026-09-17 18:47:03 +00:00
panxiao81 commented on issue panxiao81/homelab-infra#94 2026-09-17 18:45:19 +00:00
为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入

2026-09-17 已完成 live PoC,结论:方案可行。Kata Pod 内以 native sidecar 启动 SPIRE Agent,使用 audience=spire-server 的 Pod-bound PSAT 向中央 Server 注册;Server 开启 use_pod_uid_for_agent_id…

panxiao81 commented on issue panxiao81/homelab-infra#83 2026-09-17 18:23:11 +00:00
建设由 Ansible 与 Flux 管理的正式 OpenSandbox 集群

2026-09-17 正式 Kata 阶段验收结果:

  • Flux/HelmRelease 已部署 Kata Containers 4.1.0,OCI artifact 固定为 sha256:33f102f6db70083de4fc8238af4439c4245a601bcb6a72e49bc80529098aefc0。
  • job 模式按…
panxiao81 opened issue panxiao81/homelab-infra#94 2026-09-17 18:21:42 +00:00
为 Kata guest 设计可证明 workload 身份的 SPIFFE 接入
panxiao81 created pull request panxiao81/homelab-infra#93 2026-09-17 18:21:11 +00:00
延长 sandbox Flux 根同步超时
panxiao81 pushed to fix/sandbox-flux-root-timeout at panxiao81/homelab-infra 2026-09-17 18:20:35 +00:00
e67bce5121 fix: 延长 sandbox Flux 根同步超时
panxiao81 created branch fix/sandbox-flux-root-timeout in panxiao81/homelab-infra 2026-09-17 18:20:35 +00:00
panxiao81 deleted branch feat/sandbox-kata from panxiao81/homelab-infra 2026-09-17 18:06:20 +00:00
panxiao81 pushed to main at panxiao81/homelab-infra 2026-09-17 18:06:20 +00:00
8af511ecc8 Merge pull request '部署 sandbox Kata Containers' (#92) from feat/sandbox-kata into main
94684d0722 feat: 部署 sandbox Kata Containers
Compare 2 commits »