New platform addon custodian-allocation-review: namespace custodian-assessment, read-only ClusterRole (get/list nodes, pods, PVCs, PVs, storageclasses, metrics.k8s.io nodes/pods), retained local-path PVC (Prune=false,Delete=false), CronJob 0 8 * * 1 Europe/Berlin, Forbid, suspend: true. Code/data vendored from the-custodian, railiance-cluster and resource-control with a sha256 lock and an offline guard test. Draft Application only in drafts/; nothing is synced. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 8340@bnt-lap001 Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
29 lines
1.1 KiB
YAML
29 lines
1.1 KiB
YAML
# DRAFT — not synced by any root (drafts/ is never referenced). CUST-WP-0071-T05.
|
|
# Activation (founder go-ahead, after CUST-WP-0071-T04 and review): add
|
|
# PersistentVolumeClaim to the railiance-platform-addons AppProject, set
|
|
# targetRevision to the reviewed commit, move this file to ../applications/,
|
|
# run `make argocd-pin-drift`, then hand-sync the root and this Application.
|
|
# See argocd/platform-addons/custodian-allocation-review/README.md.
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Application
|
|
metadata:
|
|
name: custodian-allocation-review
|
|
namespace: argocd
|
|
labels:
|
|
app.kubernetes.io/part-of: railiance-gitops
|
|
railiance-platform/component: custodian-allocation-review
|
|
annotations:
|
|
argocd.argoproj.io/sync-wave: "10"
|
|
spec:
|
|
project: railiance-platform-addons
|
|
source:
|
|
repoURL: https://forgejo.coulomb.social/coulomb/railiance-platform.git
|
|
targetRevision: REPLACE_WITH_REVIEWED_COMMIT_SHA
|
|
path: argocd/platform-addons/custodian-allocation-review
|
|
destination:
|
|
server: https://kubernetes.default.svc
|
|
namespace: custodian-assessment
|
|
syncPolicy:
|
|
syncOptions:
|
|
- ApplyOutOfSyncOnly=true
|
|
- PruneLast=true
|