wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 3 Packages Projects Releases Wiki Activity

docs(security): 新增 k8s argocd owner response acceptance [skip ci]

Browse Source
This commit is contained in:
Your Name
2026-06-14 20:50:48 +08:00
parent 070e9c5638
commit 59ff69850f
13 changed files with 1509 additions and 20 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
scripts/security/high-value-config-control-coverage.py
View File

@@ -50,15 +50,17 @@ CONTROL_STATUS_BY_CATEGORY = {
"next_owner_action": "確認 SAN / 共用憑證關係、renewal owner、ACME smoke 與 rollback owner。",
},
"k8s_production_gitops": {
"coverage_status": "gate_defined_needs_runtime_evidence",
"coverage_percent": 58,
"coverage_status": "owner_response_acceptance_ledger_ready_needs_runtime_evidence",
"coverage_percent": 62,
"evidence_refs": [
"docs/security/HIGH-VALUE-CONFIG-CHANGE-GATE.md",
"docs/security/K8S-ARGOCD-OWNER-RESPONSE-ACCEPTANCE.md",
"docs/security/k8s-argocd-owner-response-acceptance.snapshot.json",
"k8s/awoooi-prod",
"k8s/argocd",
],
"current_gap": "尚未把 ArgoCD health / sync readback 與 rollback revision 收成 owner packet。",
"next_owner_action": "補 GitOps owner、rollback revision、health readback 與 post-deploy validation plan。",
"current_gap": "已固定 owner response acceptance 只讀帳本；ArgoCD health / sync readback、rollback revision、rendered manifest diff 與 post-deploy validation 仍全部為 0。",
"next_owner_action": "補 GitOps owner 回覆、rollback revision、health readback、rendered manifest diff 與 post-deploy validation plan。",
},
"secret_metadata": {
"coverage_status": "metadata_policy_ready",
@@ -307,6 +309,7 @@ def build_report(root: Path, generated_at: str | None) -> dict[str, Any]:
"repo_only_inventory_ready_needs_live_route_evidence",
"repo_only_preflight_contract_ready_needs_owner_live_diff",
"owner_response_acceptance_ledger_ready_needs_owner_live_diff",
"owner_response_acceptance_ledger_ready_needs_runtime_evidence",
"policy_ready_needs_drift_evidence",
"inventory_needed",
"repo_only_inventory_ready_needs_live_owner_evidence",