coulomb/railiance-platform
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1000 commits 2 branches 0 tags 8.3 MiB
Commit graph

2 commits

Author SHA1 Message Date
codex
1a6d83ace9 CUST-WP-0071-T05: default-deny egress, hub delivery env, widen platform-addons project 
Founder decision 2026-10-21 (T05 follow-up): custodian-assessment gets
default-deny ingress/egress with egress only to DNS, kube-apiserver
(10.43.0.1:443, 92.205.62.239:6443), Prometheus 9090 and State Hub 8000.
The railiance-platform-addons AppProject source admits PersistentVolumeClaim
and NetworkPolicy (bootstrap is hand-applied; not applied here). CronJob gets
STATE_HUB_URL. Re-vendored the-custodian sources at 9edd315. Still suspended
and unregistered.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 8340@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
 2026-10-21 08:41:37 +02:00
codex
36050b100f CUST-WP-0071-T05: prepare weekly allocation assessment CronJob (suspended, unregistered) 
New platform addon custodian-allocation-review: namespace custodian-assessment,
read-only ClusterRole (get/list nodes, pods, PVCs, PVs, storageclasses,
metrics.k8s.io nodes/pods), retained local-path PVC (Prune=false,Delete=false),
CronJob 0 8 * * 1 Europe/Berlin, Forbid, suspend: true. Code/data vendored from
the-custodian, railiance-cluster and resource-control with a sha256 lock and
an offline guard test. Draft Application only in drafts/; nothing is synced.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 8340@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
 2026-10-21 08:15:18 +02:00