railiance-platform/argocd/platform-addons/custodian-agents
codex 567d2c671b RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02)
Namespace custodian-agents, ServiceAccount custodian-agent (no automount, no
token Secret), curated read-only ClusterRole custodian-supervised-observer and
its binding, per the founder decision of 2026-10-20. Offline pytest guard
asserts no forbidden resource, no write verb, no wildcard.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 605711@bnt-lap001
Assistant-Session: 1f5e2256-181f-49ed-b7b1-a1c34bf37a61
2026-10-20 13:38:05 +02:00
..
clusterrole.yaml RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
clusterrolebinding.yaml RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
kustomization.yaml RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
namespace.yaml RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00
serviceaccount.yaml RPF-WP-0062-T01: custodian agent observer identity manifests (CUST-WP-0073-T02) 2026-10-20 13:38:05 +02:00