New platform addon custodian-allocation-review: namespace custodian-assessment, read-only ClusterRole (get/list nodes, pods, PVCs, PVs, storageclasses, metrics.k8s.io nodes/pods), retained local-path PVC (Prune=false,Delete=false), CronJob 0 8 * * 1 Europe/Berlin, Forbid, suspend: true. Code/data vendored from the-custodian, railiance-cluster and resource-control with a sha256 lock and an offline guard test. Draft Application only in drafts/; nothing is synced. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
27 lines
908 B
YAML
27 lines
908 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
# CUST-WP-0071-T05. NOT referenced by any Application yet: the draft lives in
|
|
# argocd/railiance01/drafts/custodian-allocation-review.application.yaml.
|
|
# src/ is vendored from owner repos (the-custodian, railiance-cluster,
|
|
# resource-control); vendor.lock.json pins the source commits and sha256.
|
|
# Refresh with tools/vendor_custodian_allocation_review.py, never by hand.
|
|
|
|
namespace: custodian-assessment
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
- rbac.yaml
|
|
- pvc.yaml
|
|
- cronjob.yaml
|
|
|
|
configMapGenerator:
|
|
- name: custodian-allocation-review-source
|
|
files:
|
|
- src/weekly_allocation_incluster.py
|
|
- src/weekly_allocation_report.py
|
|
- src/reconcile_railiance_allocation.py
|
|
- src/observe_cluster_resources.py
|
|
- src/weekly-allocation-queries.json
|
|
- src/namespace-ownership.json
|
|
- src/reef-railiance-k3s.json
|