Xiao Pan panxiao81
  • Joined on 2026-04-20
panxiao81 pushed to main at panxiao81/postgresql-tenant-operator 2026-09-13 15:26:37 +00:00
012efc1581 Merge pull request 'Instance 阶段性基线:Ready 初版与领域设计' (#6) from feature/openbao-adapter into main
bb87316773 docs: clarify Instance identity and deletion semantics
a0afbf992c docs: define management connection refresh on Secret changes
953878ac47 docs: define Instance domain model and admin Secret boundary
59303f5276 refactor: introduce Instance connection lifecycle service
Compare 9 commits »
panxiao81 merged pull request panxiao81/postgresql-tenant-operator#6 2026-09-13 15:26:36 +00:00
Instance 阶段性基线:Ready 初版与领域设计
bb87316773 docs: clarify Instance identity and deletion semantics
a0afbf992c docs: define management connection refresh on Secret changes
panxiao81 pushed to main at panxiao81/workload-sts 2026-09-13 15:04:03 +00:00
630f631f76 Merge pull request '记录 SPIRE 替代决策并停止项目开发' (#3) from docs/superseded-by-spire into main
e9878cc04f 记录 SPIRE 替代决策并停止项目开发
Compare 2 commits »
panxiao81 merged pull request panxiao81/workload-sts#3 2026-09-13 15:04:03 +00:00
记录 SPIRE 替代决策并停止项目开发
panxiao81 created pull request panxiao81/workload-sts#3 2026-09-13 14:59:11 +00:00
记录 SPIRE 替代决策并停止项目开发
panxiao81 pushed to docs/superseded-by-spire at panxiao81/workload-sts 2026-09-13 14:58:14 +00:00
e9878cc04f 记录 SPIRE 替代决策并停止项目开发
panxiao81 created branch docs/superseded-by-spire in panxiao81/workload-sts 2026-09-13 14:58:14 +00:00
panxiao81 closed pull request panxiao81/workload-sts#2 2026-09-13 14:36:29 +00:00
增加 self-hosted Go 测试 CI
953878ac47 docs: define Instance domain model and admin Secret boundary
panxiao81 created pull request panxiao81/workload-sts#2 2026-09-11 17:00:46 +00:00
增加 self-hosted Go 测试 CI
panxiao81 pushed to ci/test at panxiao81/workload-sts 2026-09-11 16:58:55 +00:00
480cd9f00f 增加 self-hosted Go 测试 CI
panxiao81 created branch ci/test in panxiao81/workload-sts 2026-09-11 16:58:54 +00:00
panxiao81 pushed to main at panxiao81/workload-sts 2026-09-11 16:51:41 +00:00
73dcebc533 Merge pull request '实现首轮协议与 Transit 签名 PoC' (#1) from feat/initial-poc into main
6fb166768f 重构 JWT 与 Transit 签名流程
0532fc25bf 修正协议处理并解耦可选遥测
ab5dbebca7 实现首轮协议与 Transit 签名 PoC
Compare 4 commits »
panxiao81 merged pull request panxiao81/workload-sts#1 2026-09-11 16:51:40 +00:00
实现首轮协议与 Transit 签名 PoC
panxiao81 pushed to feat/initial-poc at panxiao81/workload-sts 2026-09-11 16:45:52 +00:00
6fb166768f 重构 JWT 与 Transit 签名流程
panxiao81 commented on pull request panxiao81/workload-sts#1 2026-09-11 16:45:52 +00:00
实现首轮协议与 Transit 签名 PoC

已处理:Transit metadata 改为类型化 mapstructure 解码,key metadata 读取、签名响应解析和 JWKS 转换已拆分;并通过真实 OpenBao v2.6.1 集成测试。

panxiao81 commented on pull request panxiao81/workload-sts#1 2026-09-11 16:45:52 +00:00
实现首轮协议与 Transit 签名 PoC

已处理:流程重构为本地 encode → Transit.Sign(ctx) → 本地 compact;调用方改为 IssueRequest,issuer 统一生成时效 claims,职责和控制流已拆开。

panxiao81 commented on pull request panxiao81/workload-sts#1 2026-09-11 16:45:51 +00:00
实现首轮协议与 Transit 签名 PoC

已处理:删除了为 go-jose OpaqueSigner 捕获 context 的 contextSigner。JOSE 编码是纯本地计算,context 现在只传给 Transit RPC。