coulomb/railiance-platform
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): hold annotation enforcement until ESO metadata is explicit

Browse source 
Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a0e7fb-275d-7db0-b1df-39ed943427da
This commit is contained in:
codex 2026-09-28 15:08:00 +02:00
parent 54885ac158
commit 6016f72a8d
5 changed files with 111 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

8
argocd/platform-addons/secret-annotation-guard/binding.pending.yaml Normal file
View file

@ -0,0 +1,8 @@
# NOT included in kustomization: ESO v0.16.1 propagation must be fixed first.
apiVersion: admissionregistration.k8s.io/v1
kind: ValidatingAdmissionPolicyBinding
metadata:
name: reject-secret-last-applied
spec:
policyName: reject-secret-last-applied
validationActions: [Deny]