railiance-platform/argocd/platform-addons/custodian-agents/namespace.yaml at 3035f87d7fbe329012ab4e356a8a00a7ab2c2834 - coulomb/railiance-platform - Forgejo: Beyond coding. We Forge.

coulomb/railiance-platform

codex 567d2c671b RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02)

Namespace custodian-agents, ServiceAccount custodian-agent (no automount, no
token Secret), curated read-only ClusterRole custodian-supervised-observer and
its binding, per the founder decision of 2026-10-20. Offline pytest guard
asserts no forbidden resource, no write verb, no wildcard.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61

2026-10-20 13:38:05 +02:00

7 lines

183 B

YAML

Raw Blame History

 apiVersion: v1
 kind: Namespace
 metadata:
   name: custodian-agents
   labels:
     app.kubernetes.io/part-of: railiance-gitops
     railiance-platform/component: custodian-agent-identity