{ "blocked_actions": [ "argocd_sync", "kubectl_apply", "kubectl_patch", "kubectl_delete", "helm_upgrade", "secret_value_collection", "live_cluster_write", "manual_pod_restart", "scale_workload", "change_network_policy", "change_rbac", "restore_backup", "open_runtime_gate" ], "evidence_gaps": [ "owner_response", "rendered_manifest_diff", "argocd_health_readback", "argocd_sync_revision", "kubectl_dry_run_or_server_validation_plan", "rollout_blast_radius", "rollback_revision", "postcheck_metrics" ], "execution_boundaries": { "action_buttons_allowed": false, "argocd_api_read_authorized": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "kubectl_action_authorized": false, "kubectl_action_executed": false, "live_cluster_read_authorized": false, "live_cluster_read_executed": false, "manifest_apply_authorized": false, "manifest_apply_executed": false, "not_authorization": true, "production_write_authorized": false, "runtime_execution_authorized": false, "secret_value_collection_allowed": false }, "gate_tag_counts": { "apply_capable_script": 1, "argocd_application": 1, "availability_and_scaling": 3, "backup_restore": 9, "monitoring_alerting": 12, "network_policy": 2, "rbac": 2, "secret_metadata": 6, "supporting_source": 8, "workload_or_schedule": 10 }, "generated_at": "2026-06-14T21:05:00+08:00", "git_commit": "551d8144", "group_summaries": [ { "control_tier": "C0", "file_count": 25, "group_id": "awoooi_prod", "label": "AWOOOI production namespace manifests", "owner_gate_required_count": 25, "owner_response_accepted_count": 0, "root": "k8s/awoooi-prod", "runtime_gate_count": 0, "supporting_source_file_count": 1, "yaml_manifest_file_count": 24 }, { "control_tier": "C0", "file_count": 4, "group_id": "argocd", "label": "ArgoCD application and metrics exposure", "owner_gate_required_count": 4, "owner_response_accepted_count": 0, "root": "k8s/argocd", "runtime_gate_count": 0, "supporting_source_file_count": 1, "yaml_manifest_file_count": 3 }, { "control_tier": "C0", "file_count": 7, "group_id": "velero", "label": "Velero backup / restore manifests", "owner_gate_required_count": 7, "owner_response_accepted_count": 0, "root": "k8s/velero", "runtime_gate_count": 0, "supporting_source_file_count": 1, "yaml_manifest_file_count": 6 }, { "control_tier": "C1", "file_count": 13, "group_id": "monitoring", "label": "K8s monitoring and alert source", "owner_gate_required_count": 13, "owner_response_accepted_count": 0, "root": "k8s/monitoring", "runtime_gate_count": 0, "supporting_source_file_count": 1, "yaml_manifest_file_count": 12 } ], "kind_counts": { "Application": 1, "BackupStorageLocation": 1, "ClusterRole": 1, "ClusterRoleBinding": 2, "ConfigMap": 3, "CronJob": 5, "Deployment": 5, "HorizontalPodAutoscaler": 3, "Kustomization": 1, "LimitRange": 1, "List": 1, "Namespace": 2, "NetworkPolicy": 6, "PodDisruptionBudget": 3, "PrometheusRule": 4, "ResourceQuota": 1, "Secret": 6, "Service": 5, "ServiceAccount": 2, "VerticalPodAutoscaler": 3 }, "manifest_rows": [ { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/01-namespace-quota.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "2470af56f88422182d6d5aa31719fd79285e9a67836df75864755f2d48189877", "top_level_kind_count": 3, "top_level_kinds": [ "Namespace", "ResourceQuota", "LimitRange" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "network_policy" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/02-network-policy.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "f5ea6a9f5fb0cc44664d97a3ed639fa4b43ffd9bcfd70a1f6b44640791b7859f", "top_level_kind_count": 4, "top_level_kinds": [ "NetworkPolicy", "NetworkPolicy", "NetworkPolicy", "NetworkPolicy" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "secret_metadata" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/03-secrets.example.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "c89d02a01e6dcc58c1e8c5540716f07e7bd0ebdcf725e7972add709444849908", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/04-configmap.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "c1bffe0abe394a1da0476f4d26ac7962e10f6e06162afa9c114af69f38651b90", "top_level_kind_count": 1, "top_level_kinds": [ "ConfigMap" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "supporting_source", "gate_tags": [ "supporting_source" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/04-configmap.yaml.patch-consensus", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "50125869b4e808fca11d0f8a85eca59e7e9a2116184aca99f68ef3addb1bc4c4", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "secret_metadata" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/04-repair-known-hosts-template.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "6814f63c5ce7234cf7ed36b7bc478665e7c2b741c60ebc30e670a73c34fea7ff", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "secret_metadata" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/04-repair-ssh-key-template.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "74690ce69b6eff1412935a454b791735f470630da3325cee6673515a886e4952", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "secret_metadata" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/04-ssh-mcp-secret.example.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "702edff37865728a2c7af19592ad959e8ee1122d2ccbe888da88e26d5ceb77dc", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/05-deployment-web.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "a9387a84dbaeca1527370d4c7557a5308e9d95e28c1ca006b56b7bf1034d283b", "top_level_kind_count": 2, "top_level_kinds": [ "Deployment", "Service" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/06-deployment-api.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "5e4e3520203679512b38670ca99df689f94acb97e2dcccc2b849e20493d6b804", "top_level_kind_count": 2, "top_level_kinds": [ "Deployment", "Service" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "rbac" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/07-rbac.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "5082f9e0f24998a9efb1927f1135769542115526847710c91a582810cd118c02", "top_level_kind_count": 3, "top_level_kinds": [ "ServiceAccount", "ClusterRole", "ClusterRoleBinding" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/08-deployment-worker.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "6d635bd0c0680b91c47c0d21ad2d55a21c4751eb8e9bb32eace523458ab555f8", "top_level_kind_count": 1, "top_level_kinds": [ "Deployment" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "availability_and_scaling" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/09-pdb.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "dfd3d5a39f393602cb349b11f21f3278a88cb2d0acdb2a4889d2ae3f2d954efc", "top_level_kind_count": 3, "top_level_kinds": [ "PodDisruptionBudget", "PodDisruptionBudget", "PodDisruptionBudget" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/10-deployment-auto-repair-canary.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "56ed112a071d72bffdde7f27cb4415c75cd765cfccbc59ba2208256a4f13e641", "top_level_kind_count": 1, "top_level_kinds": [ "Deployment" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "availability_and_scaling" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/11-vpa.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "18a977f6aef5fe220eab826b182c0cd3b069bdf6317f281c8aec4828fd93d168", "top_level_kind_count": 3, "top_level_kinds": [ "VerticalPodAutoscaler", "VerticalPodAutoscaler", "VerticalPodAutoscaler" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/12-cronjob-drift-scanner.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "c68c454c45f78cf7dab2ab16fe09ec86b5b3c7f2ae958b50b3b3c56ca4e22346", "top_level_kind_count": 1, "top_level_kinds": [ "CronJob" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "availability_and_scaling" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/12-hpa.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "ab08e174a982fd8d1cfda919dea2f40e0545cac1f277d25a603f43547e6cf1d6", "top_level_kind_count": 3, "top_level_kinds": [ "HorizontalPodAutoscaler", "HorizontalPodAutoscaler", "HorizontalPodAutoscaler" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/13-cronjob-k3s-report.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "6ddd92c5f55a1c5219a5bdf35f5f514ba9b23487b19212b2fa0d3ebd98a0a42d", "top_level_kind_count": 1, "top_level_kinds": [ "CronJob" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/14-cronjob-weekly-report.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "59ded7259d94108a8157d3123753eb5f74a17bc95e1873b5921032cc3241bd99", "top_level_kind_count": 1, "top_level_kinds": [ "CronJob" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/15-cronjob-km-vectorize.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "2c4029274bfea99f2fa1a8004dcead3fd648ce53afc0e43e0643d8ec251f33af", "top_level_kind_count": 1, "top_level_kinds": [ "CronJob" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/15-service-registry-configmap.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "7b91f296d81b9114c929ccb74e008442c04f1baf47d1caa861c439a090fc4a9c", "top_level_kind_count": 1, "top_level_kinds": [ "ConfigMap" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore", "workload_or_schedule" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/16-cronjob-backup-restore-test.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "356ab2223d0fc2e1b4d7e4e1163ef23bed62e1c22588c46ffd010d090359557b", "top_level_kind_count": 1, "top_level_kinds": [ "CronJob" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/17-configmap-backup-restore-scripts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "c3e4605372a9f5c5f94713e1f8b5d8d0dccd6886c76c43522053e1468521bc1d", "top_level_kind_count": 1, "top_level_kinds": [ "ConfigMap" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "secret_metadata" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/awoooi-migrator-secret.template.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "e88aa6d8ac3026d5802235955afa7aa6893b79b4f5fbe5fbdd37c8c1f8ec4d15", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "awoooi_prod", "group_label": "AWOOOI production namespace manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/awoooi-prod/kustomization.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "ca71848909a88c0c2a4e4e38f5dd6225b34a800d3c59e12217bef245806ba776", "top_level_kind_count": 1, "top_level_kinds": [ "Kustomization" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "supporting_source", "gate_tags": [ "supporting_source" ], "group_id": "argocd", "group_label": "ArgoCD application and metrics exposure", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/argocd/DEPLOY.md", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "56f971682d79789d63a566bd8267f84e2a9d309fabc229e11ac4d29f36a6ef7c", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "network_policy" ], "group_id": "argocd", "group_label": "ArgoCD application and metrics exposure", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/argocd/argocd-metrics-network-policy.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "41ccd0bb22410c48adc84eae74391106c3f28fe181786cfe4128a07f99d2942c", "top_level_kind_count": 2, "top_level_kinds": [ "NetworkPolicy", "NetworkPolicy" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "argocd", "group_label": "ArgoCD application and metrics exposure", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/argocd/argocd-metrics-nodeport.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "7f4a8f09206ce0afc185fe11d5e55265bb553b671471724cdcd83c259ec7d266", "top_level_kind_count": 2, "top_level_kinds": [ "Service", "Service" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "argocd_application" ], "group_id": "argocd", "group_label": "ArgoCD application and metrics exposure", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/argocd/awoooi-prod-app.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "3012d79061db47c624e42ac734faf719705610b8fc6ec6e4bf4497cf85231902", "top_level_kind_count": 1, "top_level_kinds": [ "Application" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/00-namespace.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "385b2f43f03ba3b2a53b4e90b7a221af234f4bec46665c8b6086fe90a4e9b37e", "top_level_kind_count": 1, "top_level_kinds": [ "Namespace" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore", "secret_metadata" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/01-credentials.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "54d829a3204c2fa2d1bb3c8be1bf250914dd7a517d13900bee0fa9878760c930", "top_level_kind_count": 1, "top_level_kinds": [ "Secret" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore", "rbac", "workload_or_schedule" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/02-velero-install.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "60d7ea59ef8b2ad38dc8bf6bca80be35609e8d317210c44204bdd5ad9901b47a", "top_level_kind_count": 4, "top_level_kinds": [ "ServiceAccount", "ClusterRoleBinding", "BackupStorageLocation", "Deployment" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "supporting_source", "gate_tags": [ "backup_restore" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/README.md", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "94dd54ab0587087f4eb6d95b956a8b889fc2546c43e9f01b7d48572245f522de", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/crds/velero-crds.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/velero-install-full.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "ef942a5e7a39f1becfbec3870085774f8a6bbdf225be36e7d9f4cfd8890984e1", "top_level_kind_count": 1, "top_level_kinds": [ "List" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C0", "file_type": "yaml_manifest", "gate_tags": [ "backup_restore" ], "group_id": "velero", "group_label": "Velero backup / restore manifests", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/velero/velero-metrics-service.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "684959def32b792e2bca34b477afcdfe2b0c6dfd0cb90f4b681a514922d62b75", "top_level_kind_count": 1, "top_level_kinds": [ "Service" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/alert-chain-monitor.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "03ad55d72425f27071ba3afa8d43959a7ee361cc8f76fcf2ca295a33297bbf54", "top_level_kind_count": 1, "top_level_kinds": [ "PrometheusRule" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/database-alerts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "6077aa4e061c6604519eaede01144ffec46c39a6715a296a1ae54ff5484a0111", "top_level_kind_count": 1, "top_level_kinds": [ "PrometheusRule" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "supporting_source", "gate_tags": [ "apply_capable_script", "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/deploy-prometheus-config.sh", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "5511681efdd5563aa980396b2ebb37b7d28e43092feda48f3cba014a4b863adf", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "supporting_source" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/docker-compose-110.yml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "00126e9a5cb7a3cf2bf02cfddefea11f05849b46835a4e602eac4777fcb25281", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/flywheel-alerts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "74334919400623ff4115472e39ba30a6bbc5383bc7dfd6a3fae7bd06531e7cc6", "top_level_kind_count": 1, "top_level_kinds": [ "PrometheusRule" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/k3s-alerts-supplemental.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "14fd4f8c7deaf22c6828ffbf66400e6d0e274f03db1999197af26311bdb6d203", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/k3s-alerts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "be1a4e796f6f6363566898ffd07ac37a938255b895cde11743fe0770d9946663", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/minio-kali-alerts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "3f3ca8c012a40f5a9983b6f587dfd60ffd0a8fb3dcea6b793cb1d5fbad0fe50b", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/nvidia-alerts.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "c43a6413269dadc8269b9724ee905650f39926249a37c7339179ec88facdf972", "top_level_kind_count": 1, "top_level_kinds": [ "PrometheusRule" ] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/prometheus-config-additions.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "67bd6ef7b9da39fd4decb5254dc9bea1980f54fcd162f8468ac98f49258a39b4", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/prometheus-config-phase-o.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "7bdb94a23f6f14912c89655e5313fb745a772286671647db32d7ee2f07b50d9d", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/prometheus-remote-write-signoz.yaml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "da6ae1ef0be420b07fc0f56861e548d049ec53fd0f601ee913797304315fbcc7", "top_level_kind_count": 0, "top_level_kinds": [] }, { "action_buttons_allowed": false, "argocd_health_readback_received": false, "argocd_sync_authorized": false, "argocd_sync_executed": false, "control_tier": "C1", "file_type": "yaml_manifest", "gate_tags": [ "monitoring_alerting" ], "group_id": "monitoring", "group_label": "K8s monitoring and alert source", "kubectl_action_authorized": false, "kubectl_action_executed": false, "owner_gate_required": true, "owner_response_accepted": false, "owner_response_received": false, "path": "k8s/monitoring/prometheus.yml", "rendered_manifest_diff_ready": false, "runtime_gate": false, "secret_value_collection_allowed": false, "sha256": "5ea5ec736686dabb05bff0691dd45196eae4d2ab645c14b3f812748186ad6da9", "top_level_kind_count": 0, "top_level_kinds": [] } ], "mode": "repo_only_manifest_inventory", "next_steps": [ "將 repo-only 清冊轉成 owner request 草稿;未有 owner response 前不得 sync 或 apply。", "未來若要讀 live ArgoCD / K8s,只能另開 readback approval,不得由本清冊推定授權。", "任何 ArgoCD sync、kubectl action、secret rotation 或 restore 都必須另開 maintenance window、rollback revision 與 post-check gate。" ], "required_owner_fields": [ "owner_role_or_team", "decision", "decision_reason", "affected_scope", "redacted_evidence_refs", "argocd_health_readback_ref", "argocd_sync_revision_ref", "rollback_revision", "followup_owner", "maintenance_window", "validation_plan" ], "scan_groups": [ { "control_tier": "C0", "group_id": "awoooi_prod", "label": "AWOOOI production namespace manifests", "root": "k8s/awoooi-prod" }, { "control_tier": "C0", "group_id": "argocd", "label": "ArgoCD application and metrics exposure", "root": "k8s/argocd" }, { "control_tier": "C0", "group_id": "velero", "label": "Velero backup / restore manifests", "root": "k8s/velero" }, { "control_tier": "C1", "group_id": "monitoring", "label": "K8s monitoring and alert source", "root": "k8s/monitoring" } ], "schema_version": "k8s_argocd_manifest_inventory_v1", "status": "repo_only_inventory_ready_no_live_cluster_read", "summary": { "action_button_count": 0, "argocd_application_count": 1, "argocd_health_readback_received_count": 0, "argocd_sync_authorized_count": 0, "argocd_sync_executed_count": 0, "autoscaling_object_count": 6, "blocked_action_count": 13, "c0_file_count": 36, "c1_file_count": 13, "cronjob_object_count": 5, "deployment_object_count": 5, "evidence_gap_count": 8, "file_count": 49, "kubectl_action_authorized_count": 0, "kubectl_action_executed_count": 0, "live_cluster_read_authorized_count": 0, "live_cluster_read_executed_count": 0, "network_policy_object_count": 6, "owner_response_accepted_count": 0, "owner_response_received_count": 0, "prometheus_rule_count": 4, "rbac_object_count": 5, "rendered_manifest_diff_ready_count": 0, "required_owner_field_count": 11, "runtime_gate_count": 0, "scan_group_count": 4, "secret_object_count": 6, "secret_value_collection_allowed_count": 0, "supporting_source_file_count": 4, "top_level_kind_marker_count": 56, "unique_kind_count": 20, "yaml_manifest_file_count": 45 } }