tegwick
47881fc1ff
Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a126e1-76f8-7643-8cf3-e93336539ade
672 lines
21 KiB
JSON
672 lines
21 KiB
JSON
{
|
|
"all_checks_pass": true,
|
|
"observed_at": "2026-10-11T10:44:51.809259+00:00",
|
|
"native_changed": false,
|
|
"protected_database_read": false,
|
|
"secret_read": false,
|
|
"deployment_generation": 25,
|
|
"ready_replicas": 1,
|
|
"sealed_live_deployment": {
|
|
"apiVersion": "apps/v1",
|
|
"kind": "Deployment",
|
|
"metadata": {
|
|
"annotations": {
|
|
"argocd.argoproj.io/tracking-id": "informed-decision:apps/Deployment:informed-decision/informed-decision",
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
|
},
|
|
"name": "informed-decision",
|
|
"namespace": "informed-decision",
|
|
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
|
},
|
|
"spec": {
|
|
"progressDeadlineSeconds": 600,
|
|
"replicas": 1,
|
|
"revisionHistoryLimit": 10,
|
|
"selector": {
|
|
"matchLabels": {
|
|
"app.kubernetes.io/name": "informed-decision"
|
|
}
|
|
},
|
|
"strategy": {
|
|
"type": "Recreate"
|
|
},
|
|
"template": {
|
|
"metadata": {
|
|
"annotations": {
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
|
},
|
|
"labels": {
|
|
"app.kubernetes.io/component": "review",
|
|
"app.kubernetes.io/name": "informed-decision"
|
|
}
|
|
},
|
|
"spec": {
|
|
"automountServiceAccountToken": false,
|
|
"containers": [
|
|
{
|
|
"env": [
|
|
{
|
|
"name": "INFD_KEYCAPE_ISSUER",
|
|
"value": "https://kc.coulomb.social"
|
|
},
|
|
{
|
|
"name": "INFD_CONTAINER_CONFIG",
|
|
"value": "/configuration/runtime.json"
|
|
}
|
|
],
|
|
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:763c36402c8be7cc4c1bd1a61623d1aff9116d52241877425b45a7018cc0883a",
|
|
"imagePullPolicy": "IfNotPresent",
|
|
"livenessProbe": {
|
|
"failureThreshold": 3,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"name": "informed-decision",
|
|
"ports": [
|
|
{
|
|
"containerPort": 8080,
|
|
"name": "http",
|
|
"protocol": "TCP"
|
|
},
|
|
{
|
|
"containerPort": 8081,
|
|
"name": "workload",
|
|
"protocol": "TCP"
|
|
}
|
|
],
|
|
"readinessProbe": {
|
|
"failureThreshold": 3,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"resources": {
|
|
"limits": {
|
|
"cpu": "500m",
|
|
"memory": "256Mi"
|
|
},
|
|
"requests": {
|
|
"cpu": "5m",
|
|
"memory": "64Mi"
|
|
}
|
|
},
|
|
"securityContext": {
|
|
"allowPrivilegeEscalation": false,
|
|
"capabilities": {
|
|
"drop": [
|
|
"ALL"
|
|
]
|
|
},
|
|
"readOnlyRootFilesystem": true
|
|
},
|
|
"startupProbe": {
|
|
"failureThreshold": 12,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"terminationMessagePath": "/dev/termination-log",
|
|
"terminationMessagePolicy": "File",
|
|
"volumeMounts": [
|
|
{
|
|
"mountPath": "/data",
|
|
"name": "data"
|
|
},
|
|
{
|
|
"mountPath": "/run/informed-decision",
|
|
"name": "runtime"
|
|
},
|
|
{
|
|
"mountPath": "/tmp",
|
|
"name": "tmp"
|
|
},
|
|
{
|
|
"mountPath": "/configuration",
|
|
"name": "configuration",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/policy",
|
|
"name": "caller",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/audit",
|
|
"name": "audit",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/kubernetes",
|
|
"name": "kubernetes-api",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/workload-registry",
|
|
"name": "workload-registry",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/requester",
|
|
"name": "sitting-requester",
|
|
"readOnly": true
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"dnsPolicy": "ClusterFirst",
|
|
"restartPolicy": "Always",
|
|
"schedulerName": "default-scheduler",
|
|
"securityContext": {
|
|
"fsGroup": 10001,
|
|
"fsGroupChangePolicy": "OnRootMismatch",
|
|
"runAsGroup": 10001,
|
|
"runAsNonRoot": true,
|
|
"runAsUser": 10001,
|
|
"seccompProfile": {
|
|
"type": "RuntimeDefault"
|
|
}
|
|
},
|
|
"serviceAccount": "review",
|
|
"serviceAccountName": "review",
|
|
"terminationGracePeriodSeconds": 45,
|
|
"volumes": [
|
|
{
|
|
"name": "data",
|
|
"persistentVolumeClaim": {
|
|
"claimName": "informed-decision-data"
|
|
}
|
|
},
|
|
{
|
|
"emptyDir": {
|
|
"medium": "Memory",
|
|
"sizeLimit": "16Mi"
|
|
},
|
|
"name": "runtime"
|
|
},
|
|
{
|
|
"emptyDir": {
|
|
"medium": "Memory",
|
|
"sizeLimit": "16Mi"
|
|
},
|
|
"name": "tmp"
|
|
},
|
|
{
|
|
"configMap": {
|
|
"defaultMode": 292,
|
|
"name": "informed-decision-runtime-6c221878d051"
|
|
},
|
|
"name": "configuration"
|
|
},
|
|
{
|
|
"name": "caller",
|
|
"projected": {
|
|
"defaultMode": 288,
|
|
"sources": [
|
|
{
|
|
"serviceAccountToken": {
|
|
"audience": "flex-auth",
|
|
"expirationSeconds": 3600,
|
|
"path": "token"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "audit",
|
|
"secret": {
|
|
"defaultMode": 288,
|
|
"items": [
|
|
{
|
|
"key": "token",
|
|
"path": "token"
|
|
}
|
|
],
|
|
"secretName": "informed-decision-audit"
|
|
}
|
|
},
|
|
{
|
|
"name": "kubernetes-api",
|
|
"projected": {
|
|
"defaultMode": 288,
|
|
"sources": [
|
|
{
|
|
"serviceAccountToken": {
|
|
"expirationSeconds": 600,
|
|
"path": "token"
|
|
}
|
|
},
|
|
{
|
|
"configMap": {
|
|
"items": [
|
|
{
|
|
"key": "ca.crt",
|
|
"path": "ca.crt"
|
|
}
|
|
],
|
|
"name": "kube-root-ca.crt"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"configMap": {
|
|
"defaultMode": 292,
|
|
"name": "informed-decision-workload-registry"
|
|
},
|
|
"name": "workload-registry"
|
|
},
|
|
{
|
|
"name": "sitting-requester",
|
|
"secret": {
|
|
"defaultMode": 288,
|
|
"items": [
|
|
{
|
|
"key": "client-secret",
|
|
"path": "client-secret"
|
|
}
|
|
],
|
|
"optional": false,
|
|
"secretName": "informed-decision-sitting-requester"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"candidate_deployment": {
|
|
"apiVersion": "apps/v1",
|
|
"kind": "Deployment",
|
|
"metadata": {
|
|
"annotations": {
|
|
"argocd.argoproj.io/tracking-id": "informed-decision:apps/Deployment:informed-decision/informed-decision",
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
|
},
|
|
"name": "informed-decision",
|
|
"namespace": "informed-decision",
|
|
"uid": "a588e10a-90d2-4883-975e-6dd8b8feca92"
|
|
},
|
|
"spec": {
|
|
"progressDeadlineSeconds": 600,
|
|
"replicas": 1,
|
|
"revisionHistoryLimit": 10,
|
|
"selector": {
|
|
"matchLabels": {
|
|
"app.kubernetes.io/name": "informed-decision"
|
|
}
|
|
},
|
|
"strategy": {
|
|
"type": "Recreate"
|
|
},
|
|
"template": {
|
|
"metadata": {
|
|
"annotations": {
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
|
},
|
|
"labels": {
|
|
"app.kubernetes.io/component": "review",
|
|
"app.kubernetes.io/name": "informed-decision"
|
|
}
|
|
},
|
|
"spec": {
|
|
"automountServiceAccountToken": false,
|
|
"containers": [
|
|
{
|
|
"env": [
|
|
{
|
|
"name": "INFD_KEYCAPE_ISSUER",
|
|
"value": "https://kc.coulomb.social"
|
|
},
|
|
{
|
|
"name": "INFD_CONTAINER_CONFIG",
|
|
"value": "/configuration/runtime.json"
|
|
}
|
|
],
|
|
"image": "forgejo.coulomb.social/coulomb/informed-decision@sha256:f5588f496b1f267d07cdc9f5208e6f2f241f74b739c23924b03702dec13a5c23",
|
|
"imagePullPolicy": "IfNotPresent",
|
|
"livenessProbe": {
|
|
"failureThreshold": 3,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"name": "informed-decision",
|
|
"ports": [
|
|
{
|
|
"containerPort": 8080,
|
|
"name": "http",
|
|
"protocol": "TCP"
|
|
},
|
|
{
|
|
"containerPort": 8081,
|
|
"name": "workload",
|
|
"protocol": "TCP"
|
|
}
|
|
],
|
|
"readinessProbe": {
|
|
"failureThreshold": 3,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"resources": {
|
|
"limits": {
|
|
"cpu": "500m",
|
|
"memory": "256Mi"
|
|
},
|
|
"requests": {
|
|
"cpu": "5m",
|
|
"memory": "64Mi"
|
|
}
|
|
},
|
|
"securityContext": {
|
|
"allowPrivilegeEscalation": false,
|
|
"capabilities": {
|
|
"drop": [
|
|
"ALL"
|
|
]
|
|
},
|
|
"readOnlyRootFilesystem": true
|
|
},
|
|
"startupProbe": {
|
|
"failureThreshold": 12,
|
|
"httpGet": {
|
|
"path": "/healthz",
|
|
"port": "http",
|
|
"scheme": "HTTP"
|
|
},
|
|
"periodSeconds": 10,
|
|
"successThreshold": 1,
|
|
"timeoutSeconds": 2
|
|
},
|
|
"terminationMessagePath": "/dev/termination-log",
|
|
"terminationMessagePolicy": "File",
|
|
"volumeMounts": [
|
|
{
|
|
"mountPath": "/data",
|
|
"name": "data"
|
|
},
|
|
{
|
|
"mountPath": "/run/informed-decision",
|
|
"name": "runtime"
|
|
},
|
|
{
|
|
"mountPath": "/tmp",
|
|
"name": "tmp"
|
|
},
|
|
{
|
|
"mountPath": "/configuration",
|
|
"name": "configuration",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/policy",
|
|
"name": "caller",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/audit",
|
|
"name": "audit",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/kubernetes",
|
|
"name": "kubernetes-api",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/workload-registry",
|
|
"name": "workload-registry",
|
|
"readOnly": true
|
|
},
|
|
{
|
|
"mountPath": "/var/run/secrets/informed-decision/requester",
|
|
"name": "sitting-requester",
|
|
"readOnly": true
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"dnsPolicy": "ClusterFirst",
|
|
"restartPolicy": "Always",
|
|
"schedulerName": "default-scheduler",
|
|
"securityContext": {
|
|
"fsGroup": 10001,
|
|
"fsGroupChangePolicy": "OnRootMismatch",
|
|
"runAsGroup": 10001,
|
|
"runAsNonRoot": true,
|
|
"runAsUser": 10001,
|
|
"seccompProfile": {
|
|
"type": "RuntimeDefault"
|
|
}
|
|
},
|
|
"serviceAccount": "review",
|
|
"serviceAccountName": "review",
|
|
"terminationGracePeriodSeconds": 45,
|
|
"volumes": [
|
|
{
|
|
"name": "data",
|
|
"persistentVolumeClaim": {
|
|
"claimName": "informed-decision-data"
|
|
}
|
|
},
|
|
{
|
|
"emptyDir": {
|
|
"medium": "Memory",
|
|
"sizeLimit": "16Mi"
|
|
},
|
|
"name": "runtime"
|
|
},
|
|
{
|
|
"emptyDir": {
|
|
"medium": "Memory",
|
|
"sizeLimit": "16Mi"
|
|
},
|
|
"name": "tmp"
|
|
},
|
|
{
|
|
"configMap": {
|
|
"defaultMode": 292,
|
|
"name": "informed-decision-runtime-6c221878d051"
|
|
},
|
|
"name": "configuration"
|
|
},
|
|
{
|
|
"name": "caller",
|
|
"projected": {
|
|
"defaultMode": 288,
|
|
"sources": [
|
|
{
|
|
"serviceAccountToken": {
|
|
"audience": "flex-auth",
|
|
"expirationSeconds": 3600,
|
|
"path": "token"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"name": "audit",
|
|
"secret": {
|
|
"defaultMode": 288,
|
|
"items": [
|
|
{
|
|
"key": "token",
|
|
"path": "token"
|
|
}
|
|
],
|
|
"secretName": "informed-decision-audit"
|
|
}
|
|
},
|
|
{
|
|
"name": "kubernetes-api",
|
|
"projected": {
|
|
"defaultMode": 288,
|
|
"sources": [
|
|
{
|
|
"serviceAccountToken": {
|
|
"expirationSeconds": 600,
|
|
"path": "token"
|
|
}
|
|
},
|
|
{
|
|
"configMap": {
|
|
"items": [
|
|
{
|
|
"key": "ca.crt",
|
|
"path": "ca.crt"
|
|
}
|
|
],
|
|
"name": "kube-root-ca.crt"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
},
|
|
{
|
|
"configMap": {
|
|
"defaultMode": 292,
|
|
"name": "informed-decision-workload-registry"
|
|
},
|
|
"name": "workload-registry"
|
|
},
|
|
{
|
|
"name": "sitting-requester",
|
|
"secret": {
|
|
"defaultMode": 288,
|
|
"items": [
|
|
{
|
|
"key": "client-secret",
|
|
"path": "client-secret"
|
|
}
|
|
],
|
|
"optional": false,
|
|
"secretName": "informed-decision-sitting-requester"
|
|
}
|
|
}
|
|
]
|
|
}
|
|
}
|
|
}
|
|
},
|
|
"sealed_dependencies": {
|
|
"configmap": {
|
|
"apiVersion": "v1",
|
|
"immutable": true,
|
|
"kind": "ConfigMap",
|
|
"metadata": {
|
|
"annotations": {
|
|
"argocd.argoproj.io/tracking-id": "informed-decision:/ConfigMap:informed-decision/informed-decision-runtime-6c221878d051",
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover"
|
|
},
|
|
"name": "informed-decision-runtime-6c221878d051",
|
|
"namespace": "informed-decision",
|
|
"uid": "90113d2d-54d9-4e82-b1d3-90b49ebed2b5"
|
|
},
|
|
"canonical_data_sha256": "8ec462d12347548f506eeebf1e3c7cc47648019c8a783804d09bcc79b0f22af6"
|
|
},
|
|
"pvc": {
|
|
"apiVersion": "v1",
|
|
"kind": "PersistentVolumeClaim",
|
|
"metadata": {
|
|
"annotations": {
|
|
"argocd.argoproj.io/tracking-id": "informed-decision:/PersistentVolumeClaim:informed-decision/informed-decision-data",
|
|
"informed-decision.coulomb.social/admission": "approved; INFD-WP-0007 cutover",
|
|
"pv.kubernetes.io/bind-completed": "yes",
|
|
"pv.kubernetes.io/bound-by-controller": "yes",
|
|
"volume.beta.kubernetes.io/storage-provisioner": "rancher.io/local-path",
|
|
"volume.kubernetes.io/selected-node": "239.62.205.92.host.secureserver.net",
|
|
"volume.kubernetes.io/storage-provisioner": "rancher.io/local-path"
|
|
},
|
|
"finalizers": [
|
|
"kubernetes.io/pvc-protection"
|
|
],
|
|
"name": "informed-decision-data",
|
|
"namespace": "informed-decision",
|
|
"uid": "d80b25b1-141a-441b-b205-98fa2fd98b7c"
|
|
},
|
|
"spec": {
|
|
"accessModes": [
|
|
"ReadWriteOnce"
|
|
],
|
|
"resources": {
|
|
"requests": {
|
|
"storage": "1Gi"
|
|
}
|
|
},
|
|
"storageClassName": "local-path",
|
|
"volumeMode": "Filesystem",
|
|
"volumeName": "pvc-d80b25b1-141a-441b-b205-98fa2fd98b7c"
|
|
}
|
|
},
|
|
"pvc_phase": "Bound"
|
|
},
|
|
"argo": {
|
|
"uid": "499868f2-eabc-4df4-ae31-b89ce58d750d",
|
|
"source": {
|
|
"path": "deploy/lifecycle",
|
|
"repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git",
|
|
"targetRevision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
|
},
|
|
"destination": {
|
|
"namespace": "informed-decision",
|
|
"server": "https://kubernetes.default.svc"
|
|
},
|
|
"automated": false,
|
|
"health": {
|
|
"lastTransitionTime": "2026-10-11T07:00:42Z",
|
|
"status": "Healthy"
|
|
},
|
|
"sync": {
|
|
"comparedTo": {
|
|
"destination": {
|
|
"namespace": "informed-decision",
|
|
"server": "https://kubernetes.default.svc"
|
|
},
|
|
"source": {
|
|
"path": "deploy/lifecycle",
|
|
"repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git",
|
|
"targetRevision": "c96b0c6d881e855d1d158003c6de90ef390262e2"
|
|
}
|
|
},
|
|
"revision": "c96b0c6d881e855d1d158003c6de90ef390262e2",
|
|
"status": "OutOfSync"
|
|
}
|
|
},
|
|
"server_dry_run_passed": true,
|
|
"admission_only_image_delta": true,
|
|
"client_diff_exit": 1,
|
|
"client_diff_sha256": "ee53537b71df69ea1ce4a67498a47524d1aef87aa5ad1e9499c3f699f142762e",
|
|
"allocatable_cpu_m": 4000,
|
|
"requested_cpu_m": 3460,
|
|
"strategy": "Recreate"
|
|
}
|