coulomb/rail-kubernetes
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Enforce private-by-default rail exposure

Browse source 
Assistant: codex
Assistant-Model: gpt-5.6-sol
Assistant-Session: 01a02669-87ee-7a31-b111-edc95a16e0fa
This commit is contained in:
codex 2026-08-22 12:34:25 +02:00
parent c6b045051f
commit 004f1c4dc1
7 changed files with 368 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/create-overlay-command.md
View file

@ -24,6 +24,11 @@ bin/railiance create-overlay \
--init-git
```
The generated Service is explicitly `ClusterIP`, a default-deny ingress
NetworkPolicy is included, and Stage 2 does not emit an Ingress. Enabling an
Ingress later requires matching rapp and reef declaration files at the
Stage 2 deploy gate; an Ingress object is not itself an ADR-0008 grant.
Required arguments:
- `--app-id`