1535 lines
51 KiB
JSON
1535 lines
51 KiB
JSON
{
|
||
"blocked_actions": [
|
||
"argocd_sync",
|
||
"kubectl_apply",
|
||
"kubectl_patch",
|
||
"kubectl_delete",
|
||
"helm_upgrade",
|
||
"secret_value_collection",
|
||
"live_cluster_write",
|
||
"manual_pod_restart",
|
||
"scale_workload",
|
||
"change_network_policy",
|
||
"change_rbac",
|
||
"restore_backup",
|
||
"open_runtime_gate"
|
||
],
|
||
"evidence_gaps": [
|
||
"owner_response",
|
||
"rendered_manifest_diff",
|
||
"argocd_health_readback",
|
||
"argocd_sync_revision",
|
||
"kubectl_dry_run_or_server_validation_plan",
|
||
"rollout_blast_radius",
|
||
"rollback_revision",
|
||
"postcheck_metrics"
|
||
],
|
||
"execution_boundaries": {
|
||
"action_buttons_allowed": false,
|
||
"argocd_api_read_authorized": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"live_cluster_read_authorized": false,
|
||
"live_cluster_read_executed": false,
|
||
"manifest_apply_authorized": false,
|
||
"manifest_apply_executed": false,
|
||
"not_authorization": true,
|
||
"production_write_authorized": false,
|
||
"runtime_execution_authorized": false,
|
||
"secret_value_collection_allowed": false
|
||
},
|
||
"gate_tag_counts": {
|
||
"apply_capable_script": 1,
|
||
"argocd_application": 1,
|
||
"availability_and_scaling": 3,
|
||
"backup_restore": 9,
|
||
"monitoring_alerting": 12,
|
||
"network_policy": 2,
|
||
"rbac": 2,
|
||
"secret_metadata": 6,
|
||
"supporting_source": 8,
|
||
"workload_or_schedule": 10
|
||
},
|
||
"generated_at": "2026-06-14T21:05:00+08:00",
|
||
"git_commit": "551d8144",
|
||
"group_summaries": [
|
||
{
|
||
"control_tier": "C0",
|
||
"file_count": 25,
|
||
"group_id": "awoooi_prod",
|
||
"label": "AWOOOI production namespace manifests",
|
||
"owner_gate_required_count": 25,
|
||
"owner_response_accepted_count": 0,
|
||
"root": "k8s/awoooi-prod",
|
||
"runtime_gate_count": 0,
|
||
"supporting_source_file_count": 1,
|
||
"yaml_manifest_file_count": 24
|
||
},
|
||
{
|
||
"control_tier": "C0",
|
||
"file_count": 4,
|
||
"group_id": "argocd",
|
||
"label": "ArgoCD application and metrics exposure",
|
||
"owner_gate_required_count": 4,
|
||
"owner_response_accepted_count": 0,
|
||
"root": "k8s/argocd",
|
||
"runtime_gate_count": 0,
|
||
"supporting_source_file_count": 1,
|
||
"yaml_manifest_file_count": 3
|
||
},
|
||
{
|
||
"control_tier": "C0",
|
||
"file_count": 7,
|
||
"group_id": "velero",
|
||
"label": "Velero backup / restore manifests",
|
||
"owner_gate_required_count": 7,
|
||
"owner_response_accepted_count": 0,
|
||
"root": "k8s/velero",
|
||
"runtime_gate_count": 0,
|
||
"supporting_source_file_count": 1,
|
||
"yaml_manifest_file_count": 6
|
||
},
|
||
{
|
||
"control_tier": "C1",
|
||
"file_count": 13,
|
||
"group_id": "monitoring",
|
||
"label": "K8s monitoring and alert source",
|
||
"owner_gate_required_count": 13,
|
||
"owner_response_accepted_count": 0,
|
||
"root": "k8s/monitoring",
|
||
"runtime_gate_count": 0,
|
||
"supporting_source_file_count": 1,
|
||
"yaml_manifest_file_count": 12
|
||
}
|
||
],
|
||
"kind_counts": {
|
||
"Application": 1,
|
||
"BackupStorageLocation": 1,
|
||
"ClusterRole": 1,
|
||
"ClusterRoleBinding": 2,
|
||
"ConfigMap": 3,
|
||
"CronJob": 5,
|
||
"Deployment": 5,
|
||
"HorizontalPodAutoscaler": 3,
|
||
"Kustomization": 1,
|
||
"LimitRange": 1,
|
||
"List": 1,
|
||
"Namespace": 2,
|
||
"NetworkPolicy": 6,
|
||
"PodDisruptionBudget": 3,
|
||
"PrometheusRule": 4,
|
||
"ResourceQuota": 1,
|
||
"Secret": 6,
|
||
"Service": 5,
|
||
"ServiceAccount": 2,
|
||
"VerticalPodAutoscaler": 3
|
||
},
|
||
"manifest_rows": [
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/01-namespace-quota.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "2470af56f88422182d6d5aa31719fd79285e9a67836df75864755f2d48189877",
|
||
"top_level_kind_count": 3,
|
||
"top_level_kinds": [
|
||
"Namespace",
|
||
"ResourceQuota",
|
||
"LimitRange"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"network_policy"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/02-network-policy.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "f5ea6a9f5fb0cc44664d97a3ed639fa4b43ffd9bcfd70a1f6b44640791b7859f",
|
||
"top_level_kind_count": 4,
|
||
"top_level_kinds": [
|
||
"NetworkPolicy",
|
||
"NetworkPolicy",
|
||
"NetworkPolicy",
|
||
"NetworkPolicy"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/03-secrets.example.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "c89d02a01e6dcc58c1e8c5540716f07e7bd0ebdcf725e7972add709444849908",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/04-configmap.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "c1bffe0abe394a1da0476f4d26ac7962e10f6e06162afa9c114af69f38651b90",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"ConfigMap"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "supporting_source",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/04-configmap.yaml.patch-consensus",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "50125869b4e808fca11d0f8a85eca59e7e9a2116184aca99f68ef3addb1bc4c4",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/04-repair-known-hosts-template.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "6814f63c5ce7234cf7ed36b7bc478665e7c2b741c60ebc30e670a73c34fea7ff",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/04-repair-ssh-key-template.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "74690ce69b6eff1412935a454b791735f470630da3325cee6673515a886e4952",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/04-ssh-mcp-secret.example.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "702edff37865728a2c7af19592ad959e8ee1122d2ccbe888da88e26d5ceb77dc",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/05-deployment-web.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "a9387a84dbaeca1527370d4c7557a5308e9d95e28c1ca006b56b7bf1034d283b",
|
||
"top_level_kind_count": 2,
|
||
"top_level_kinds": [
|
||
"Deployment",
|
||
"Service"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/06-deployment-api.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "5e4e3520203679512b38670ca99df689f94acb97e2dcccc2b849e20493d6b804",
|
||
"top_level_kind_count": 2,
|
||
"top_level_kinds": [
|
||
"Deployment",
|
||
"Service"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"rbac"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/07-rbac.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "5082f9e0f24998a9efb1927f1135769542115526847710c91a582810cd118c02",
|
||
"top_level_kind_count": 3,
|
||
"top_level_kinds": [
|
||
"ServiceAccount",
|
||
"ClusterRole",
|
||
"ClusterRoleBinding"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/08-deployment-worker.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "6d635bd0c0680b91c47c0d21ad2d55a21c4751eb8e9bb32eace523458ab555f8",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Deployment"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"availability_and_scaling"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/09-pdb.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "dfd3d5a39f393602cb349b11f21f3278a88cb2d0acdb2a4889d2ae3f2d954efc",
|
||
"top_level_kind_count": 3,
|
||
"top_level_kinds": [
|
||
"PodDisruptionBudget",
|
||
"PodDisruptionBudget",
|
||
"PodDisruptionBudget"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/10-deployment-auto-repair-canary.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "56ed112a071d72bffdde7f27cb4415c75cd765cfccbc59ba2208256a4f13e641",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Deployment"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"availability_and_scaling"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/11-vpa.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "18a977f6aef5fe220eab826b182c0cd3b069bdf6317f281c8aec4828fd93d168",
|
||
"top_level_kind_count": 3,
|
||
"top_level_kinds": [
|
||
"VerticalPodAutoscaler",
|
||
"VerticalPodAutoscaler",
|
||
"VerticalPodAutoscaler"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/12-cronjob-drift-scanner.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "c68c454c45f78cf7dab2ab16fe09ec86b5b3c7f2ae958b50b3b3c56ca4e22346",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"CronJob"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"availability_and_scaling"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/12-hpa.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "ab08e174a982fd8d1cfda919dea2f40e0545cac1f277d25a603f43547e6cf1d6",
|
||
"top_level_kind_count": 3,
|
||
"top_level_kinds": [
|
||
"HorizontalPodAutoscaler",
|
||
"HorizontalPodAutoscaler",
|
||
"HorizontalPodAutoscaler"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/13-cronjob-k3s-report.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "6ddd92c5f55a1c5219a5bdf35f5f514ba9b23487b19212b2fa0d3ebd98a0a42d",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"CronJob"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/14-cronjob-weekly-report.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "59ded7259d94108a8157d3123753eb5f74a17bc95e1873b5921032cc3241bd99",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"CronJob"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/15-cronjob-km-vectorize.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "2c4029274bfea99f2fa1a8004dcead3fd648ce53afc0e43e0643d8ec251f33af",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"CronJob"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/15-service-registry-configmap.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "7b91f296d81b9114c929ccb74e008442c04f1baf47d1caa861c439a090fc4a9c",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"ConfigMap"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore",
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/16-cronjob-backup-restore-test.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "356ab2223d0fc2e1b4d7e4e1163ef23bed62e1c22588c46ffd010d090359557b",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"CronJob"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/17-configmap-backup-restore-scripts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "c3e4605372a9f5c5f94713e1f8b5d8d0dccd6886c76c43522053e1468521bc1d",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"ConfigMap"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/awoooi-migrator-secret.template.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "e88aa6d8ac3026d5802235955afa7aa6893b79b4f5fbe5fbdd37c8c1f8ec4d15",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "awoooi_prod",
|
||
"group_label": "AWOOOI production namespace manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/awoooi-prod/kustomization.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "ca71848909a88c0c2a4e4e38f5dd6225b34a800d3c59e12217bef245806ba776",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Kustomization"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "supporting_source",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "argocd",
|
||
"group_label": "ArgoCD application and metrics exposure",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/argocd/DEPLOY.md",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "56f971682d79789d63a566bd8267f84e2a9d309fabc229e11ac4d29f36a6ef7c",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"network_policy"
|
||
],
|
||
"group_id": "argocd",
|
||
"group_label": "ArgoCD application and metrics exposure",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/argocd/argocd-metrics-network-policy.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "41ccd0bb22410c48adc84eae74391106c3f28fe181786cfe4128a07f99d2942c",
|
||
"top_level_kind_count": 2,
|
||
"top_level_kinds": [
|
||
"NetworkPolicy",
|
||
"NetworkPolicy"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "argocd",
|
||
"group_label": "ArgoCD application and metrics exposure",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/argocd/argocd-metrics-nodeport.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "7f4a8f09206ce0afc185fe11d5e55265bb553b671471724cdcd83c259ec7d266",
|
||
"top_level_kind_count": 2,
|
||
"top_level_kinds": [
|
||
"Service",
|
||
"Service"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"argocd_application"
|
||
],
|
||
"group_id": "argocd",
|
||
"group_label": "ArgoCD application and metrics exposure",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/argocd/awoooi-prod-app.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "3012d79061db47c624e42ac734faf719705610b8fc6ec6e4bf4497cf85231902",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Application"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/00-namespace.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "385b2f43f03ba3b2a53b4e90b7a221af234f4bec46665c8b6086fe90a4e9b37e",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Namespace"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore",
|
||
"secret_metadata"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/01-credentials.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "54d829a3204c2fa2d1bb3c8be1bf250914dd7a517d13900bee0fa9878760c930",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Secret"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore",
|
||
"rbac",
|
||
"workload_or_schedule"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/02-velero-install.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "60d7ea59ef8b2ad38dc8bf6bca80be35609e8d317210c44204bdd5ad9901b47a",
|
||
"top_level_kind_count": 4,
|
||
"top_level_kinds": [
|
||
"ServiceAccount",
|
||
"ClusterRoleBinding",
|
||
"BackupStorageLocation",
|
||
"Deployment"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "supporting_source",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/README.md",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "94dd54ab0587087f4eb6d95b956a8b889fc2546c43e9f01b7d48572245f522de",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/crds/velero-crds.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "d5558cd419c8d46bdc958064cb97f963d1ea793866414c025906ec15033512ed",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/velero-install-full.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "ef942a5e7a39f1becfbec3870085774f8a6bbdf225be36e7d9f4cfd8890984e1",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"List"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C0",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"backup_restore"
|
||
],
|
||
"group_id": "velero",
|
||
"group_label": "Velero backup / restore manifests",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/velero/velero-metrics-service.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "684959def32b792e2bca34b477afcdfe2b0c6dfd0cb90f4b681a514922d62b75",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"Service"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/alert-chain-monitor.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "03ad55d72425f27071ba3afa8d43959a7ee361cc8f76fcf2ca295a33297bbf54",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"PrometheusRule"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/database-alerts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "6077aa4e061c6604519eaede01144ffec46c39a6715a296a1ae54ff5484a0111",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"PrometheusRule"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "supporting_source",
|
||
"gate_tags": [
|
||
"apply_capable_script",
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/deploy-prometheus-config.sh",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "5511681efdd5563aa980396b2ebb37b7d28e43092feda48f3cba014a4b863adf",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"supporting_source"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/docker-compose-110.yml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "00126e9a5cb7a3cf2bf02cfddefea11f05849b46835a4e602eac4777fcb25281",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/flywheel-alerts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "74334919400623ff4115472e39ba30a6bbc5383bc7dfd6a3fae7bd06531e7cc6",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"PrometheusRule"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/k3s-alerts-supplemental.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "14fd4f8c7deaf22c6828ffbf66400e6d0e274f03db1999197af26311bdb6d203",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/k3s-alerts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "be1a4e796f6f6363566898ffd07ac37a938255b895cde11743fe0770d9946663",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/minio-kali-alerts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "3f3ca8c012a40f5a9983b6f587dfd60ffd0a8fb3dcea6b793cb1d5fbad0fe50b",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/nvidia-alerts.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "c43a6413269dadc8269b9724ee905650f39926249a37c7339179ec88facdf972",
|
||
"top_level_kind_count": 1,
|
||
"top_level_kinds": [
|
||
"PrometheusRule"
|
||
]
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/prometheus-config-additions.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "67bd6ef7b9da39fd4decb5254dc9bea1980f54fcd162f8468ac98f49258a39b4",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/prometheus-config-phase-o.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "7bdb94a23f6f14912c89655e5313fb745a772286671647db32d7ee2f07b50d9d",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/prometheus-remote-write-signoz.yaml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "da6ae1ef0be420b07fc0f56861e548d049ec53fd0f601ee913797304315fbcc7",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
},
|
||
{
|
||
"action_buttons_allowed": false,
|
||
"argocd_health_readback_received": false,
|
||
"argocd_sync_authorized": false,
|
||
"argocd_sync_executed": false,
|
||
"control_tier": "C1",
|
||
"file_type": "yaml_manifest",
|
||
"gate_tags": [
|
||
"monitoring_alerting"
|
||
],
|
||
"group_id": "monitoring",
|
||
"group_label": "K8s monitoring and alert source",
|
||
"kubectl_action_authorized": false,
|
||
"kubectl_action_executed": false,
|
||
"owner_gate_required": true,
|
||
"owner_response_accepted": false,
|
||
"owner_response_received": false,
|
||
"path": "k8s/monitoring/prometheus.yml",
|
||
"rendered_manifest_diff_ready": false,
|
||
"runtime_gate": false,
|
||
"secret_value_collection_allowed": false,
|
||
"sha256": "5ea5ec736686dabb05bff0691dd45196eae4d2ab645c14b3f812748186ad6da9",
|
||
"top_level_kind_count": 0,
|
||
"top_level_kinds": []
|
||
}
|
||
],
|
||
"mode": "repo_only_manifest_inventory",
|
||
"next_steps": [
|
||
"將 repo-only 清冊轉成 owner request 草稿；未有 owner response 前不得 sync 或 apply。",
|
||
"未來若要讀 live ArgoCD / K8s，只能另開 readback approval，不得由本清冊推定授權。",
|
||
"任何 ArgoCD sync、kubectl action、secret rotation 或 restore 都必須另開 maintenance window、rollback revision 與 post-check gate。"
|
||
],
|
||
"required_owner_fields": [
|
||
"owner_role_or_team",
|
||
"decision",
|
||
"decision_reason",
|
||
"affected_scope",
|
||
"redacted_evidence_refs",
|
||
"argocd_health_readback_ref",
|
||
"argocd_sync_revision_ref",
|
||
"rollback_revision",
|
||
"followup_owner",
|
||
"maintenance_window",
|
||
"validation_plan"
|
||
],
|
||
"scan_groups": [
|
||
{
|
||
"control_tier": "C0",
|
||
"group_id": "awoooi_prod",
|
||
"label": "AWOOOI production namespace manifests",
|
||
"root": "k8s/awoooi-prod"
|
||
},
|
||
{
|
||
"control_tier": "C0",
|
||
"group_id": "argocd",
|
||
"label": "ArgoCD application and metrics exposure",
|
||
"root": "k8s/argocd"
|
||
},
|
||
{
|
||
"control_tier": "C0",
|
||
"group_id": "velero",
|
||
"label": "Velero backup / restore manifests",
|
||
"root": "k8s/velero"
|
||
},
|
||
{
|
||
"control_tier": "C1",
|
||
"group_id": "monitoring",
|
||
"label": "K8s monitoring and alert source",
|
||
"root": "k8s/monitoring"
|
||
}
|
||
],
|
||
"schema_version": "k8s_argocd_manifest_inventory_v1",
|
||
"status": "repo_only_inventory_ready_no_live_cluster_read",
|
||
"summary": {
|
||
"action_button_count": 0,
|
||
"argocd_application_count": 1,
|
||
"argocd_health_readback_received_count": 0,
|
||
"argocd_sync_authorized_count": 0,
|
||
"argocd_sync_executed_count": 0,
|
||
"autoscaling_object_count": 6,
|
||
"blocked_action_count": 13,
|
||
"c0_file_count": 36,
|
||
"c1_file_count": 13,
|
||
"cronjob_object_count": 5,
|
||
"deployment_object_count": 5,
|
||
"evidence_gap_count": 8,
|
||
"file_count": 49,
|
||
"kubectl_action_authorized_count": 0,
|
||
"kubectl_action_executed_count": 0,
|
||
"live_cluster_read_authorized_count": 0,
|
||
"live_cluster_read_executed_count": 0,
|
||
"network_policy_object_count": 6,
|
||
"owner_response_accepted_count": 0,
|
||
"owner_response_received_count": 0,
|
||
"prometheus_rule_count": 4,
|
||
"rbac_object_count": 5,
|
||
"rendered_manifest_diff_ready_count": 0,
|
||
"required_owner_field_count": 11,
|
||
"runtime_gate_count": 0,
|
||
"scan_group_count": 4,
|
||
"secret_object_count": 6,
|
||
"secret_value_collection_allowed_count": 0,
|
||
"supporting_source_file_count": 4,
|
||
"top_level_kind_marker_count": 56,
|
||
"unique_kind_count": 20,
|
||
"yaml_manifest_file_count": 45
|
||
}
|
||
}
|