tegwick
c26a6e59de
Assistant: codex Assistant-Model: gpt-5.6-sol Assistant-Session: 01a02878-7c21-7692-bcd6-ce2838c4b448
137 lines
4.4 KiB
JSON
137 lines
4.4 KiB
JSON
{
|
|
"apply": {
|
|
"field_manager": "ops-mason",
|
|
"persisted_manifests": [
|
|
"manifests/whitehat-plane/namespace.yaml",
|
|
"manifests/whitehat-plane/network-policy.yaml",
|
|
"manifests/whitehat-plane/service-account.yaml"
|
|
],
|
|
"server_validated_manifests": [
|
|
"manifests/whitehat-plane/namespace.yaml",
|
|
"manifests/whitehat-plane/network-policy.yaml",
|
|
"manifests/whitehat-plane/service-account.yaml"
|
|
]
|
|
},
|
|
"plan": {
|
|
"approved_at": "2026-08-22",
|
|
"approved_by": "Bernd Worsch",
|
|
"id": "whitehat-foundational-plane"
|
|
},
|
|
"preflight": {
|
|
"bundle_digest": "9636f48f0b994118ff60a8c014e0099486945d66a2b3d3582dc57a09862b2035",
|
|
"bundle_id": "whitehat-foundational-plane",
|
|
"client_validated_manifests": [
|
|
"manifests/whitehat-plane/namespace.yaml",
|
|
"manifests/whitehat-plane/network-policy.yaml",
|
|
"manifests/whitehat-plane/service-account.yaml"
|
|
],
|
|
"context": "default",
|
|
"deferred_server_validation": [
|
|
"manifests/whitehat-plane/network-policy.yaml",
|
|
"manifests/whitehat-plane/service-account.yaml"
|
|
],
|
|
"dependencies": [
|
|
{
|
|
"assertions": {
|
|
"/spec/ports/0/port": 8080
|
|
},
|
|
"name": "audit-core",
|
|
"namespace": "audit-core",
|
|
"resource": "services"
|
|
},
|
|
{
|
|
"assertions": {
|
|
"/spec/ingress/0/from/0/namespaceSelector/matchLabels/kubernetes.io~1metadata.name": "whitehat",
|
|
"/spec/ingress/0/from/0/podSelector/matchLabels/whitehat.security~1plane": "true",
|
|
"/spec/ingress/0/from/0/podSelector/matchLabels/whitehat.security~1target": "audit-core",
|
|
"/spec/ingress/0/ports/0/port": 8080
|
|
},
|
|
"name": "audit-core-whitehat-ingress",
|
|
"namespace": "audit-core",
|
|
"resource": "networkpolicies.networking.k8s.io"
|
|
}
|
|
],
|
|
"objects": [
|
|
{
|
|
"object": "Namespace/whitehat",
|
|
"state": "absent"
|
|
},
|
|
{
|
|
"object": "NetworkPolicy/whitehat/default-deny",
|
|
"state": "absent"
|
|
},
|
|
{
|
|
"object": "NetworkPolicy/whitehat/allow-audit-core-e2",
|
|
"state": "absent"
|
|
},
|
|
{
|
|
"object": "ServiceAccount/whitehat/whitehat-runner",
|
|
"state": "absent"
|
|
}
|
|
],
|
|
"ok": true,
|
|
"plan_approved": true,
|
|
"plan_id": "whitehat-foundational-plane",
|
|
"server_validated_manifests": [
|
|
"manifests/whitehat-plane/namespace.yaml"
|
|
]
|
|
},
|
|
"recorded_at": "2026-08-22T09:24:44.407612+00:00",
|
|
"rollback": {
|
|
"bundle_id": "whitehat-foundational-plane",
|
|
"conditional_namespace_commands": [
|
|
"kubectl delete namespaces whitehat"
|
|
],
|
|
"inventory_before_namespace_delete": [
|
|
"kubectl -n whitehat get all,configmaps,secrets,serviceaccounts,networkpolicies"
|
|
],
|
|
"object_scoped_commands": [
|
|
"kubectl -n whitehat delete networkpolicies.networking.k8s.io default-deny",
|
|
"kubectl -n whitehat delete networkpolicies.networking.k8s.io allow-audit-core-e2",
|
|
"kubectl -n whitehat delete serviceaccounts whitehat-runner"
|
|
],
|
|
"warning": "Delete the namespace only after proving it contains no later or unrelated objects."
|
|
},
|
|
"schema_version": "ops-mason.kubernetes-plane-evidence/v1",
|
|
"source": {
|
|
"implementation_revision": "95129d7a35c8999be359b163b554853c9c6afa3a",
|
|
"repo": "whitehat-security",
|
|
"revision": "4882c2d47a826a305d5c4e05aa7fcc1252c3887e"
|
|
},
|
|
"verification": {
|
|
"bundle_digest": "9636f48f0b994118ff60a8c014e0099486945d66a2b3d3582dc57a09862b2035",
|
|
"bundle_id": "whitehat-foundational-plane",
|
|
"context": "default",
|
|
"negative_scope": {
|
|
"pods": 0,
|
|
"secrets": 0
|
|
},
|
|
"objects": [
|
|
{
|
|
"generation": null,
|
|
"object": "Namespace/whitehat",
|
|
"resource_version": "50841574",
|
|
"uid": "b0f97761-28a2-4b50-b4cb-890995fc0993"
|
|
},
|
|
{
|
|
"generation": 1,
|
|
"object": "NetworkPolicy/whitehat/default-deny",
|
|
"resource_version": "50841577",
|
|
"uid": "f4143fc9-4e42-454e-867b-c3fe5a050945"
|
|
},
|
|
{
|
|
"generation": 1,
|
|
"object": "NetworkPolicy/whitehat/allow-audit-core-e2",
|
|
"resource_version": "50841578",
|
|
"uid": "84ba88a8-74df-448d-b9ba-066083c49b0f"
|
|
},
|
|
{
|
|
"generation": null,
|
|
"object": "ServiceAccount/whitehat/whitehat-runner",
|
|
"resource_version": "50841583",
|
|
"uid": "6229deb0-82b8-4ca7-aee5-e00b4eff81a9"
|
|
}
|
|
],
|
|
"ok": true
|
|
}
|
|
}
|