diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/access-native-plan-review.json b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/access-native-plan-review.json new file mode 100644 index 00000000..4cbdba9a --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/access-native-plan-review.json @@ -0,0 +1,49 @@ +{ + "schema": "access-engine.bounded-native-plan-review.v1", + "reviewer": "access-engine-owner (agent access-engine, codex)", + "review_role": "access-engine-owner", + "work_item": "FLEX-WP-0024-T06", + "proposal_id": "FLEX24-SIGNER-ROLLOUT-20261016-R1", + "decision": "approved", + "scope": "Exact Access-owned R2/P4 workload/Helm, known writer acknowledgement, single-writer/outbox and stopped-only rollback plan, with execution-supplement.md mandatory. Owner plan review only; no live scope disposition or founder authority.", + "reviewed_at": "2026-10-16T19:09:30.558245+00:00", + "intent_basis": "Access Engine is Engine/PDP, owns decision production and its record; caller identity, protected enforcement, custody, Platform Applications and cluster storage remain independently owned.", + "frozen_input_sha256": { + "access-native-admission/rollout-r2/manifest.json": "5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59", + "platform-signer-custody/native-adapter-r2/native-packet-p4/manifest.json": "9eec861838a8e9138f2c821cff3014998fbe74bb01447642bf50d44e8b3b7cb3", + "native-preflight-r1/live-preflight.json": "7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b", + "native-preflight-r1/cluster-native-plan-review.json": "76e5e3c10cf62d93c801c08f0275f84cd523010f58a7c5db595dee2081ffa572" + }, + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "image_digest": "sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f", + "deployment_projection_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c", + "execution_supplement_sha256": "2622cf68d33f5e5f4ede68655c250f70a8132ed03cb4b7c33bdbeec86100e25d", + "verification_sha256": "05e88b9c4362a9655be7ac19533fa3079558e7d2b57c446b90729a40cc88766f", + "findings_resolved_by_supplement": [ + "Names actual Helm/source/CI and legacy alternate paths; owner/founder acknowledgement establishes bounded manual window without hypothetical-writer proof", + "Supplies exact stopped-only history rollback shape and requires no concurrent Helm recovery during in-flight atomic rollback", + "Separates independent 120-second stop/readiness gates from Helm automatic rollback duration and 600-second founder recovery decision", + "Retains native persistence negative proofs as separate admitted acceptance work, without destructive failure injection authorization" + ], + "source_change_required": false, + "actual_prechange_helm_revision": 4, + "actual_stopped_helm_revision": null, + "held_window": false, + "native_fence": false, + "execution_authorized": false, + "completed_external_scope_disposition": false, + "native_custody_trust_caller_admitted": false, + "unresolved_authority": { + "founder_entity": null, + "founder_disposition": null, + "executor": null, + "absolute_window_start": null, + "absolute_window_end": null, + "expiry": null, + "risk_loss_ceiling_eur": null, + "custody_public_trust_caller_bindings": null + }, + "other_owner_assents_authored": false, + "task_status": "progress; owner plan review complete, actual native admission/execution remains open" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/execution-supplement.md b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/execution-supplement.md new file mode 100644 index 00000000..33ffde9f --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/execution-supplement.md @@ -0,0 +1,40 @@ +# Access native execution proposal supplement + +Existing owner work: `FLEX-WP-0024-T06`. Proposal `FLEX24-SIGNER-ROLLOUT-20261016-R1`, frozen rollout R2 and Platform packet P4. This supplement completes the Access plan review; it grants no live action and changes no frozen resource, custody scope or protected effect. + +Use the exact stop/ready argv in frozen R2 `command-plan.proposed.json`, with one verified materialized source root at Access `dc042022f7c30671cf0a7605cf43ef6d96d04242` and the frozen rollout directory. Verify every archived source/value/render digest first. Image remains independently pinned to `84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0` / OCI `sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f`. No source change or new image is required by this review. + +## Actual writer paths and the maintenance acknowledgement + +Access's writer is the operator executing Helm against release `flex-auth-secrets-engine` in namespace `flex-auth`, selecting `charts/flex-auth`, `values/secrets-engine.yaml` and the exact stopped/activation overlay. Access/founder acknowledgement must name the executor, absolute start/end, no competing manual Helm/scale/rollout/apply for this release, no in-flight release operation, prior Helm revision/status, and restoration criteria. That acknowledgement establishes the bounded manual window; it does not require proving absence of hypothetical writers across the estate. + +Reviewed source has three CI workflows: `.forgejo/workflows/image.yaml` publishes immutable images using `tools/publish-runtime-images.sh`; `.forgejo/workflows/ci-smoke.yaml` probes runners; `.github/workflows/ci.yml` runs source checks. None performs a workload Helm upgrade or kubectl apply. Do not invent a CI deployment controller or disable unrelated image publication. For any additional actual deployment job identified by the executor, record its job/revision/prior state and hold it for this release during the window. + +The dated preflight has no HPA, Job, CronJob, DaemonSet or StatefulSet in `flex-auth`. The existing Deployment and its UID-owned ReplicaSets remain the known pod writers; keep Kubernetes reconciliation active to implement replicas zero. Platform independently identifies and holds the affected Argo Application sync writers, records their prior state and absence of an in-flight sync, and restores them through its own criteria. Access does not claim that owner disposition. Refresh these known paths at window entry; new actual competing state requires reconciliation before advancing. + +`deploy/README.md` emergency `kubectl apply` / `rollout undo` instructions refer to tenant/user consumers. `railiance/app.toml` generic Helm rollback, canary and previous-stable pins also cover other releases. None is the signer rollback recipe. Tenant/user/canary/readback/informed-decision workloads stay outside this change. + +## Stop, start and recovery decisions + +1. Verify the completed exact founder and owner scope, consumer fence, target identity and current nonsecret release metadata. The existing public receipt admits all seven exact resources through server dry-run, with exact source projection; it observes the old running unsigned 05a workload at Helm revision 4. It does not install the stopped candidate or reserve a window. Do not use revision 4 as the ready transition's rollback target. +2. Start the stop clock immediately before the frozen stop invocation. Use reset-values/no-hooks/wait=false, without atomic. Within 120 seconds establish the installed candidate Deployment replicas zero, observedGeneration caught up, zero desired/status replicas across its UID-owned ReplicaSets, no live or terminating owned/signer-SA/seed-mount pods and no new actual competing writer. Compare the stopped native projection with `8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c`. Record the new exact deployed stopped Helm revision and its metadata/projection. A Pending WFFC claim is allowed. If stop fails or its state is unknown, keep consumers fenced, do not invoke custody, preserve the partial outcome and reconcile observed state; never auto-start the predecessor. +3. Hold the acknowledged window and repeat the stopped fence/projection immediately before Platform's independently approved custody CAS. Custody key/trust/caller admission, founder identity/expiry and actual window remain unresolved here. Ambiguous custody outcomes preserve evidence and remain fenced; no retry/remint authorization follows. +4. Before start verify the recorded stopped revision is still the latest deployed release, exact candidate configuration matches and no intervening Helm operation exists. The ready command's `--atomic --wait --timeout 120s` may roll back only to this exact stopped revision. Keep protected consumers fenced. Start an independent readiness clock immediately before the ready invocation: Ready must be observed within 120 seconds including WFFC provisioning/startup. Helm may spend additional time performing its automatic rollback; its return is not proof that the 120-second readiness gate passed. Do not issue a competing Helm stop/rollback while that operation is in flight or assume killing the client cancels server changes. Observe and reconcile the resulting release/workload state before another mutation. +5. A stop/readiness failure or unknown outcome triggers the named abort owner/founder recovery decision within 600 seconds of the failure/deadline, or earlier if the absolute admitted window expires. This is a decision deadline, not permission to restart after expiry or an availability guarantee. The safe decision is continued consumer fence and stopped/unavailable signer; record any unresolved live pod explicitly. No deadline extends custody, trust or action authority. +6. If the ready failure's automatic rollback did not demonstrably restore the stopped state, an independently authorized recovery invocation may use the exact frozen stop command against the same candidate source/config, after the prior Helm operation is reconciled. This resets replicas zero with no waiting on an unbound claim. If an explicit Helm history rollback is chosen instead, verify its recorded target below and retain the same independent 120-second stop observation. Neither path may target revision 4/current05a by assumption. + +Explicit history rollback argument shape (not ready for execution until `STOPPED_REVISION` is observed and approved): + +```json +["helm", "rollback", "flex-auth-secrets-engine", "STOPPED_REVISION", "--namespace", "flex-auth", "--wait=false", "--timeout", "120s", "--no-hooks"] +``` + +Before this invocation compare the exact target revision to the stopped source projection, immutable image, policy/registry, signing coordinates, PVC and zero replicas using a reviewed allowlisted metadata/projection path. No raw release values, Secret objects, annotations, logs or unfiltered errors enter receipts. No force, cleanup-on-fail, uninstall, delete, cursor reset, unsigned fallback, seed restore or CAS replay. Failed or partial rollback is retained as such; no success by command return alone. + +## Persistence and acceptance + +Recreate, replicas at most one and Linux nonblocking flock provide complementary source controls. Flock is acquired before outbox recovery and held until Close/process exit; deleting `writer.lock`, recreating paths or bypassing the process would invalidate exclusion. RWO is not a process lock. Native restart, sequence/cursor/signature parity and isolated lock/capacity/unwritable/fsync negative receipts remain acceptance gates; this review does not authorize destructive failure injection against the sole production journal. Their eventual exact safe execution procedure requires separate scoped review. + +The journal ceiling is 67108864 bytes, record/atomic batch bound 2097152 bytes and cursor bound 4096 bytes. Commit failure prevents release of every effect; unconfirmed truncate/fsync recovery fences the writer. The 1Gi local-path request is not a hard quota or backup. WFFC binding must produce exact PVC UID/PV name/UID/claimRef/capacity/nodeAffinity; cluster owner separately authorizes and verifies Retain before durable acceptance. Preserve claim, PV, journal, cursor, signatures and receipts across every stop or rollback. No evidence migration to unsigned05a is approved. + +Ready and `/healthz` only prove process availability. Before protected acceptance, require independently admitted public trust/delivery/caller; native lifecycle ALLOW/DENY records and installed Secrets verification; forged/altered/unsigned/wrong-pin/expired/caller negatives; preserved restart evidence and the separately admitted negative tests. No task source is enabled, `execute-ccr` remains denied, no backend effect or audit receiver acceptance is claimed. EUR0 source review is established; actual spend/risk-loss/outage/evidence-loss authority and all five final external dispositions remain absent. diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-scanner-receipt.json b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-scanner-receipt.json new file mode 100644 index 00000000..92bef030 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-scanner-receipt.json @@ -0,0 +1,8 @@ +{ + "blocked_blob_ids": [], + "scanned_blobs": 16, + "scanner_sha256": "88f91962aa2f93ac6ab281d553b9e125f5197bbbce38f9f2437f7299c32e5509", + "scanner_version": "8.30.1", + "scope": "changed-staged-blobs", + "status": "clean" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-successor.json b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-successor.json new file mode 100644 index 00000000..11b36625 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/formatting-successor.json @@ -0,0 +1,19 @@ +{ + "schema": "access-engine.public-digest-format-successor.v1", + "reason": "Normal unchanged staged-blob scanner rejected original public source-hash map; exact hash values now carry explicit sha256 type prefixes. No detector finding content was exposed.", + "original_verification_sha256": "0c6ffb3a641428c311fa0cb348016ea0b63f6ea96a053aa746841ab39fa384e8", + "original_verification_git_blob": "327447b9e476ea8344cc3bad62da33736eb63c3d", + "original_local_backup": "/tmp/access-native-plan-review-verification-original-0c6ffb3a641428c3.json", + "prior_review_sha256": "a2c7a62f35a9f467012b9e646c5e5aa5a22e181c8b10a79e68c254c1a830af8a", + "prior_manifest_sha256": "2acb218f34c726e4d56ccd3515dd45fe8809ece731fe77039c6ca93fba5952c2", + "changed_maps": [ + "reviewed_source_sha256", + "image_runtime_source_sha256" + ], + "hash_values_unchanged": true, + "review_semantics_unchanged": true, + "frozen_R2_P4_unchanged": true, + "canonical_own_record_change_required": false, + "canonical_record_reason": "Existing workplan binds frozen R2/P4/source/projection, not successor verification or review-file hashes.", + "root_index_modified": false +} diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/integration-receipt.json b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/integration-receipt.json new file mode 100644 index 00000000..fc19127c --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/integration-receipt.json @@ -0,0 +1,19 @@ +{ + "owner_commit": "d328a2601095686f74376d87791bff01e2a3a2a3", + "owner_commit_paths": [ + "workplans/FLEX-WP-0024-decision-envelope-authenticity.md" + ], + "sync_return_code": 0, + "sync_stdout_sha256": "1b0b0b7b02fd25fb21ceb7c1a30c70632221db1c73183c868db765e9915dc7e8", + "sync_stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855", + "head_after_sync": "d328a2601095686f74376d87791bff01e2a3a2a3", + "upstream": "d328a2601095686f74376d87791bff01e2a3a2a3", + "brief_index_exactly_restored": true, + "brief_worktree_exactly_restored": true, + "work_records_before_sha256": "f713204e5c524f22e4a831fa480bf0e2018e206cd48f55fbf9d5472bfca104a5", + "work_records_after_sha256": "f713204e5c524f22e4a831fa480bf0e2018e206cd48f55fbf9d5472bfca104a5", + "workplan_after_sha256": "cc94a493c23c16a3baa718b75ef5d48a596c6386c11534d50fd4839a6f0448f2", + "status": "M .custodian-brief.md\n M WORK-RECORDS.md\n", + "manual_push": false, + "no_writeback_scope": "Disables C15/C23 status repairs only; brief generation/auto-commit and normal publication still run." +} diff --git a/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/verification.json b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/verification.json new file mode 100644 index 00000000..d5bc7fee --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/access-native-plan-review-next/verification.json @@ -0,0 +1,79 @@ +{ + "schema": "access-engine.native-plan-offline-verification.v1", + "frozen_input_sha256": { + "access-native-admission/rollout-r2/manifest.json": "5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59", + "platform-signer-custody/native-adapter-r2/native-packet-p4/manifest.json": "9eec861838a8e9138f2c821cff3014998fbe74bb01447642bf50d44e8b3b7cb3", + "native-preflight-r1/live-preflight.json": "7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b", + "native-preflight-r1/cluster-native-plan-review.json": "76e5e3c10cf62d93c801c08f0275f84cd523010f58a7c5db595dee2081ffa572" + }, + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "reviewed_source_sha256": { + "AGENTS.md": "sha256:18539e6301fdbe63928b6e79ba90b316337ffc47c3baa9950729309ef4356f54", + "INTENT.md": "sha256:f6c14f5f824fb86ac06368fb9c52e60d627ee42810817a45723d34a6a9a178a5", + "SCOPE.md": "sha256:dd1484a32a313135e69f16dbc833d768467491438bbb1d9127c2b098061edb60", + ".forgejo/workflows/image.yaml": "sha256:18307ce17027b263ac0703a9e82fba8d14b672ca8bc9dee4c90b3aed2decd58e", + ".forgejo/workflows/ci-smoke.yaml": "sha256:c17729b2144648fa92871e1c94bcb6bd8f64a4b533577ede9457593758e2b7ab", + ".github/workflows/ci.yml": "sha256:421bf5c0ef4706e9c04dcf14f326dff9d26870f45110058346834199ae5467a8", + "Makefile": "sha256:aa32fe04336d4613835629d969ec8c49782d61ee0e2a62f09fd67d19796f58b7", + "deploy/README.md": "sha256:11de09b5690437241f2f3ad7371deb9624e607701a22287dd1efa7d65a7ee7d5", + "railiance/app.toml": "sha256:b4674d874e5485eaff6f95f1896bf61a89f03441089dc4d824f3859660e5ed0f", + "tools/publish-runtime-images.sh": "sha256:1e95ed70e55b04943613f89e241ad4c25094a26cabefbed6c1bdedb8deedf630", + "internal/emission/outbox.go": "sha256:10b7ffa6899d2e89c4c36150f063a348eaf15cfce7a95e814af71b6ffd511ba0", + "internal/emission/lock_linux.go": "sha256:604743d6d2427ae8cc8f64cc5fae4934a4c1cf0ed24fbae171bea270ed668f6f", + "internal/emission/lock_other.go": "sha256:271a879de3d43036ce69a5db0f8c2ad401d7cce5ceab1fa721959516a1576493", + "internal/emission/delivery.go": "sha256:9bd2147108fafade36850ec2e00f0fe602471748af7d94c7b2f54e69658f95f1", + "internal/decision/engine.go": "sha256:be6ea0e81422dba6b6d2124530263bf6fd4025c8dcac9360c619adbff0ac0bbd", + "cmd/access-engine/main.go": "sha256:da6d185ac971aaa652a6b242f5c46007f8b0089e71e6d6b499bd7925b1377758", + "workplans/FLEX-WP-0024-decision-envelope-authenticity.md": "sha256:3a3fc05528eb869204811d90d12ef5a3ac3b6d537b5b7a8cccbc15b6483a002f" + }, + "image_runtime_source_sha256": { + "internal/emission/outbox.go": "sha256:10b7ffa6899d2e89c4c36150f063a348eaf15cfce7a95e814af71b6ffd511ba0", + "internal/emission/lock_linux.go": "sha256:604743d6d2427ae8cc8f64cc5fae4934a4c1cf0ed24fbae171bea270ed668f6f", + "internal/emission/lock_other.go": "sha256:271a879de3d43036ce69a5db0f8c2ad401d7cce5ceab1fa721959516a1576493", + "internal/emission/delivery.go": "sha256:9bd2147108fafade36850ec2e00f0fe602471748af7d94c7b2f54e69658f95f1", + "internal/decision/engine.go": "sha256:be6ea0e81422dba6b6d2124530263bf6fd4025c8dcac9360c619adbff0ac0bbd", + "cmd/access-engine/main.go": "sha256:da6d185ac971aaa652a6b242f5c46007f8b0089e71e6d6b499bd7925b1377758" + }, + "frozen_manifest_file_hashes_verified": true, + "chart_source_hashes_verified": true, + "actual_exact_helm_renders_equal_frozen_bytes": true, + "stopped_ready_only_replicas_differ": true, + "runtime_sources_identical_chart_and_image": true, + "reviewed_repo_ci_has_no_helm_upgrade_or_kubectl_apply": true, + "dated_namespace_competing_controller_observations": { + "hpa": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "jobs": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "cronjobs": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "daemonsets": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "statefulsets": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + } + }, + "observation_time": "2026-10-16T18:53:06.325922+00:00", + "live_execution": false, + "no_credential_or_kubeconfig_access": true +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/analyze_resources.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/analyze_resources.py new file mode 100644 index 00000000..e1b4794b --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/analyze_resources.py @@ -0,0 +1,51 @@ +"""Offline parse public resource streams; never concatenate JSON as one object.""" +import json,re +from decimal import Decimal + +def objects(value): + if value is None:return [] + if type(value) is dict:return [value] + if type(value) is not str:raise ValueError('resource stream type') + out=[];decoder=json.JSONDecoder();offset=0 + while offset1;init_count+=bool(init) + if row.get('spec.resources'):pod_level_count+=1 + restartable=bool(row.get('spec.initContainers[*].restartPolicy'));sidecars+=restartable + for resource in totals: + app=sum((quantity(x.get('requests',{}).get(resource),resource) for x in containers),Decimal(0)) + init_requests=[quantity(x.get('requests',{}).get(resource),resource) for x in init] + # Sum of app+all init is a conservative bound for restartable init. + effective=app+sum(init_requests,Decimal(0)) if restartable else max([app]+init_requests) + if row.get('spec.resources'):effective=max(effective,quantity(row['spec.resources'].get('requests',{}).get(resource),resource)) + effective+=quantity((row.get('spec.overhead') or {}).get(resource),resource) + totals[resource]+=effective + capacity={r:quantity(node['status.allocatable'][r],r) for r in totals} + return {'node':node['metadata.name'],'nonterminal_bound_pods':count,'multicontainer_pods':multi,'pods_with_init_resources':init_count,'pods_with_pod_level_resources':pod_level_count,'pods_with_restartable_init_fields':sidecars,'supplement_used':bool(supplement),'requested_cpu_m':str(totals['cpu']),'allocatable_cpu_m':str(capacity['cpu']),'unrequested_cpu_m':str(capacity['cpu']-totals['cpu']),'requested_memory_bytes':str(totals['memory']),'allocatable_memory_bytes':str(capacity['memory']),'unrequested_memory_bytes':str(capacity['memory']-totals['memory']),'assumptions':[] if supplement else ['Init restartPolicy and pod-level resources not collected; scheduler totals provisional.'],'method':'exclude terminal/unbound/other-node Pods; sum regular requests; per-resource maximum init request; overhead; conservative sum if restartable init present; max with pod-level requests'} +if __name__=='__main__': + import sys + from pathlib import Path + p=Path(sys.argv[1]);s=Path(sys.argv[2]) if len(sys.argv)>2 else None + print(json.dumps(analyze(json.loads(p.read_text()),json.loads(s.read_text()) if s else None),indent=2)) diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/cluster-native-plan-review.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/cluster-native-plan-review.json new file mode 100644 index 00000000..ae8091a1 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/cluster-native-plan-review.json @@ -0,0 +1,81 @@ +{ + "schema": "railiance-cluster.bounded-native-plan-review.v1", + "reviewer": "railiance-cluster-owner (agent railiance-cluster, codex)", + "review_role": "cluster-runtime-storage-owner", + "work_item": "RCLUSTER-WP-0017-T02", + "decision": "approved", + "scope": "Exact runtime/storage execution plan for R2/P4, contingent on mandatory observed execution gates below; this is an owner plan review, not founder approval or a completed native-admission scope disposition.", + "intent_basis": "railiance-cluster INTENT Core Principles Runtime Not Workloads, Healthy by Verification, Consistent Baseline and Managed Access.", + "reviewed_at": "2026-10-16T19:04:18.311316+00:00", + "exact_revisions": { + "rollout_r2_manifest_sha256": "5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59", + "packet_p4_manifest_sha256": "9eec861838a8e9138f2c821cff3014998fbe74bb01447642bf50d44e8b3b7cb3", + "platform_revision": "84c529f239c81e6d3ca337015700b03e3a862f53", + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "image_digest": "sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f", + "deployment_projection_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c" + }, + "evidence": { + "live_preflight_sha256": "7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b", + "observed_at": "2026-10-16T18:53:06.325922+00:00", + "completed_at": "2026-10-16T18:53:12.327339+00:00", + "all_seven_exact_resources_server_admitted": true, + "admitted_stopped_replicas": 0, + "admitted_projection_exact": true, + "actual_signer_stopped": false, + "held_fence": false, + "persistent_mutations": false + }, + "observed_runtime": { + "node_ip": "92.205.62.239", + "node_uid": "0659e49e-6539-480a-8b0f-2969dd88cb05", + "cluster_uid": "a553c742-0115-43d4-99a4-a5ca56fe0786", + "node_ready": true, + "memory_pressure": false, + "disk_pressure": false, + "pid_pressure": false, + "observed_cpu_m": 1539, + "observed_memory_mi": 8989, + "namespace_quota_count": 0, + "namespace_limitrange_count": 0, + "namespace_pvc_count": 0, + "signer_deployment_uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae", + "signer_deployment_generation": 4, + "signer_current_replicas": 1, + "helm_deployed_revision": 4 + }, + "storage_disposition": { + "claim": "flex-auth/flex-auth-secrets-engine-outbox", + "request_bytes": 1073741824, + "access_mode": "ReadWriteOnce", + "storage_class": "local-path", + "binding_mode": "WaitForFirstConsumer", + "class_reclaim_policy": "Delete", + "free_bytes_observed": 125704314880, + "free_less_request_bytes": 124630573056, + "scope": "One additional1Gi node-local request; no quota, reservation, replication or backup is established.", + "actual_pv": null, + "actual_pv_retain": false, + "native_outbox_max_bytes": 67108864, + "outbox_native_acceptance": false + }, + "mandatory_execution_gates": [ + "Founder exact scoped ADMINISTER authority, executor/abort owner, absolute window and EUR spend/risk-loss/outage/local-evidence-loss disposition; no authority comes from this review.", + "Immediately refresh same node/cluster, node Ready/no pressure, scheduling constraints, resource fit and free disk before stop/start; these are dated observations without reservation.", + "Access authenticates workload/Helm/manual/CI writers and Platform authenticates affected Application writers; freeze only reviewed writers, preserve prior state/restoration criteria; no inferred cluster ownership of controllers.", + "Before custody require actually installed stopped candidate, observedGeneration caught up, Deployment desired/status0, all UID-owned ReplicaSets desired/status0, no live/terminating UID-owned/signer-SA/seed-mount Pods, no HPA/unreviewed workload writer, and exact observed native projection equal8ce375f. Dry-run replicas0 is insufficient.", + "Stopped Helm transition uses reviewed reset-values/no-hooks/wait=false without atomic; WFFC claim may remain Pending. No automatic rollback to unsigned running predecessor. Access independently establishes exact stopped Helm revision as ready-transition rollback target.", + "Before ready, require independent custody/public trust/caller delivery approvals and protected consumers fenced. Candidate Ready within120s; failure/unknown holds stopped/failclosed and founder recovery decision within600s.", + "After controlled WFFC binding capture exact PVC UID and PV name/UID/claimRef UID/capacity/nodeAffinity; independently review and obtain exact runtime/storage authority to set/readback Retain before durable evidence acceptance. No guessed/preselected PV or Delete-policy durable acceptance.", + "Retain/PVC1Gi/RWO/Recreate/OS lock do not prove backup, node-loss recovery, filesystem hard quota or competing-process exclusion; require native restart/signature/sequence/cursor/lock/capacity/unwritable/fsync negative proofs separately.", + "Abort/rollback preserves PVC/PV/outbox/cursor/receipts; no delete/uninstall/reset/old-seed restore/CAS remint/retry. Access controls workload/Helm rollback, Platform Applications/custody, Secrets failclosed/trust, cluster runtime/storage preservation only." + ], + "not_authorized": [ + "Workload/Helm or Application mutation", + "Actual stop/create/start/PVC/PV mutation", + "Credential read, TokenRequest, custody or public trust admission", + "Completed five-role native scope disposition; founder entity/expiry/window/trust/approved CCR remain unbound" + ], + "task_status": "T02 progress: real read-only admission/runtime proof reviewed; live held-window and exact execution disposition remain open. T03 remains todo." +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/coordinator-review.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/coordinator-review.json new file mode 100644 index 00000000..d4515e78 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/coordinator-review.json @@ -0,0 +1,63 @@ +{ + "schema": "netkingdom.coordinator-public-preflight-review.v1", + "scope": "Read-only public metadata and seven server-dry-run resources; no native activation", + "files": { + "preflight.py": "sha256:1011e5872ebee718e969b7012b17c0737e10eaaed804e0c4ae254024d8ad5248", + "payload.json": "sha256:c78879355d9f451d9dbf2c36cd74e35c996cc24d1e3d79c2a9dc6238baa5dde8", + "test_preflight.py": "sha256:cdf21c8af88e0e7d22dfb717d41c59726bdab8e157dcace369f71a5af5ed810f", + "verification.json": "sha256:a7c771d4fa711c1b59d6836103d7758862a35c89f1bd2e0b668db35179f6429f", + "probe.py": "sha256:f10f5e6feb3c5fe9304af80249d8f3b61064c8da500035b215f9849ffb18dd6e", + "formatter-probe.json": "sha256:0b546b6a0c35a5ab59a66522ff108d7a3757c340794c361e7575f0a520da766d", + "run.py": "sha256:9923bc6ecdc0951d11debea727dedc9ff30b2b9abe152db9aa1020b6a6ef0114", + "live-preflight.json": "sha256:7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b" + }, + "independent_checks": { + "focused_tests_passed": 6, + "exact_frozen_resource_count": 7, + "frozen_resources_match": true, + "frozen_projection_match": true, + "pinned_platform_projection_ast_match": true, + "actual_metadata_formatter_and_target_identity_passed": true + }, + "results": { + "server_dry_run_accepted": 7, + "stopped_replicas": 0, + "admitted_projection_matches_frozen": true, + "held_fence": false, + "persistent_security_mutations": false + }, + "remaining": [ + "Native owner dispositions and founder exact authorization", + "Authenticated exclusive writer window", + "Actual stopped-state observation before custody", + "Actual PVC binding and PV retention", + "Actual public-key trust and caller delivery", + "Native signed consumer and durable outbox acceptance", + "Independent audit source/cadence admission" + ], + "limits": [ + "Client apply server-dry-run is not proof of Helm upgrade equivalence", + "Public metadata receipt is dated, not a reservation", + "Scheduling totals are a dated request allocation; actual usage, pending work and the execution-window checks remain distinct." + ], + "supplement": { + "reviewed": true, + "executed_by": "coordinator", + "files": { + "supplement.py": "sha256:6de3b981e46c3504362038236777da2d44d8126f444490093a66e5d5a4827738", + "analyze_resources.py": "sha256:a6f1b76649c494563bc1c70cd949744d706da4a2045d0d9e6ff0b621b86cb022", + "test_resources.py": "sha256:64079b8d52e9fd8e12b21614b1d9caa1f0a3d4e062c8f653f7fd5f8518ad7111", + "scheduling-supplement.json": "sha256:f4622831c5ed47cd710cde7fd34eeaef92629a2b58bc32c7808efa865e98c6ca", + "scheduling-analysis.json": "sha256:91f538031e0a3475c797e762128479d2dc36154957715f4016e67a3e15089e7a" + }, + "focused_parser_tests_passed": 5, + "scheduled_cpu_m": "3580", + "allocatable_cpu_m": "4000", + "unrequested_cpu_m": "420", + "pod_level_requests_present": false, + "restartable_init_present": false, + "taints_present": false, + "unschedulable": false, + "reservation": false + } +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/formatter-probe.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/formatter-probe.json new file mode 100644 index 00000000..92a3e054 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/formatter-probe.json @@ -0,0 +1,13 @@ +{ + "node_query_ok": true, + "cluster_query_ok": true, + "array_object_format_valid": true, + "exact_target_address": true, + "cluster_identity": true, + "stdout_sanitized": true, + "transport": { + "exit_code": 0, + "stderr_present": false + }, + "probe_sha256": "f10f5e6feb3c5fe9304af80249d8f3b61064c8da500035b215f9849ffb18dd6e" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/live-preflight.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/live-preflight.json new file mode 100644 index 00000000..cbed0545 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/live-preflight.json @@ -0,0 +1,3539 @@ +{ + "collector_sha256": "1011e5872ebee718e969b7012b17c0737e10eaaed804e0c4ae254024d8ad5248", + "completed_at": "2026-10-16T18:53:12.327339+00:00", + "dry_runs": [ + { + "admitted": true, + "exit_code": 0, + "kind": "NetworkPolicy", + "name": "flex-auth-secrets-engine", + "stderr_present": true + }, + { + "admitted": true, + "exit_code": 0, + "kind": "ServiceAccount", + "name": "flex-auth-secrets-engine", + "stderr_present": true + }, + { + "admitted": true, + "exit_code": 0, + "kind": "PersistentVolumeClaim", + "name": "flex-auth-secrets-engine-outbox", + "stderr_present": false + }, + { + "admitted": true, + "exit_code": 0, + "kind": "ClusterRole", + "name": "flex-auth-secrets-engine-tokenreviewer", + "stderr_present": true + }, + { + "admitted": true, + "exit_code": 0, + "kind": "ClusterRoleBinding", + "name": "flex-auth-secrets-engine-tokenreviewer", + "stderr_present": true + }, + { + "admitted": true, + "exit_code": 0, + "kind": "Service", + "name": "flex-auth-secrets-engine", + "stderr_present": true + }, + { + "admitted": true, + "differing_projection_fields": [], + "exit_code": 0, + "expected_projection_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c", + "kind": "Deployment", + "name": "flex-auth-secrets-engine", + "projection_matches": true, + "projection_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c", + "replicas": 0, + "stderr_present": true + } + ], + "held_fence": false, + "limitations": [ + "Dated metadata and dry-run only; no held writer fence or native owner disposition.", + "Helm values/manifests/config/env/annotations/Secrets not fetched. Live args only compared and hashed.", + "Application workload refs and current writer hints do not authenticate manual/CI writers.", + "No actual PVC binding/PV Retain, stop/create/start/custody or token request.", + "kubectl apply dry-run is admission evidence, not Helm upgrade execution equivalence." + ], + "local_completed_at": "2026-10-16T18:53:10.265868+00:00", + "observations": { + "applications": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.deletionTimestamp": null, + "metadata.generation": 8988, + "metadata.name": "activity-core", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "cd179999-852d-4d70-9017-29e867475bff", + "spec.destination": { + "namespace": "activity-core", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ConfigMap ConfigMap ConfigMap ConfigMap Service Service Deployment Deployment Deployment", + "status.resources[*].name": "actcore-external-activity-definitions actcore-ops-service-inventory actcore-report-schemas actcore-runtime-config actcore-api actcore-worker-metrics actcore-api actcore-event-router actcore-worker", + "status.resources[*].namespace": "activity-core activity-core activity-core activity-core activity-core activity-core activity-core activity-core activity-core", + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 10460, + "metadata.name": "bao-notice", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "3fc0375f-c3c6-487b-bad1-84ba2e805431", + "spec.destination": { + "namespace": "bao-notice", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ConfigMap ConfigMap ConfigMap Namespace Service Deployment Ingress Ingress NetworkPolicy NetworkPolicy Middleware", + "status.resources[*].name": "bao-notice-conf-4f5g9kc7c2 bao-notice-conf-dg4hmf2dg4 bao-notice-html-6mm6h6mgkf bao-notice bao-notice bao-notice bao-notice bao-notice-http-redirect bao-notice-acme-solver bao-notice-isolation redirect-https", + "status.resources[*].namespace": "bao-notice bao-notice bao-notice bao-notice bao-notice bao-notice bao-notice bao-notice bao-notice bao-notice", + "status.sync.status": "OutOfSync" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 10466, + "metadata.name": "eso-token-renewer", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "b10d1e31-08da-4364-b537-4e166eeeb25e", + "spec.destination": { + "namespace": "external-secrets", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ConfigMap ServiceAccount CronJob", + "status.resources[*].name": "eso-token-renewer-worker-5c86dt7fm7 eso-token-renewer eso-token-renewer", + "status.resources[*].namespace": "external-secrets external-secrets external-secrets", + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 5486, + "metadata.name": "informed-decision", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "499868f2-eabc-4df4-ae31-b89ce58d750d", + "spec.destination": { + "namespace": "informed-decision", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ConfigMap ConfigMap ConfigMap PersistentVolumeClaim Service Service ServiceAccount Deployment NetworkPolicy NetworkPolicy NetworkPolicy NetworkPolicy ClusterRole ClusterRoleBinding", + "status.resources[*].name": "informed-decision-runtime-6c221878d051 informed-decision-runtime-c81577741a09 informed-decision-workload-registry informed-decision-data informed-decision informed-decision-workload review informed-decision informed-decision-review-ingress informed-decision-lifecycle-ingress informed-decision-review-ingress informed-decision-review informed-decision-tokenreview informed-decision-tokenreview", + "status.resources[*].namespace": "informed-decision informed-decision informed-decision informed-decision informed-decision informed-decision informed-decision informed-decision approval-engine flex-auth flex-auth informed-decision", + "status.sync.status": "OutOfSync" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 5459, + "metadata.name": "informed-decision-requester", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "0c0ee821-0ba4-43f7-9b65-52ef98de1ea5", + "spec.destination": { + "namespace": "informed-decision", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ServiceAccount ClusterSecretStore ExternalSecret", + "status.resources[*].name": "informed-decision-eso openbao-informed-decision-sitting-requester informed-decision-sitting-requester", + "status.resources[*].namespace": "informed-decision informed-decision", + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 11502, + "metadata.name": "openbao-secretstore", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "f2932505-e649-4b99-b505-4789ed21301f", + "spec.destination": { + "namespace": "external-secrets", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ClusterSecretStore", + "status.resources[*].name": "openbao", + "status.resources[*].namespace": null, + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 11500, + "metadata.name": "railiance-apps-root", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "3078d1f5-07c2-44cc-bff7-c2ee2a2c9e7c", + "spec.destination": { + "namespace": "argocd", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "Application Application Application Application Application Application Application Application Application", + "status.resources[*].name": "activity-core bao-notice eso-token-renewer informed-decision informed-decision-requester openbao-secretstore secret-annotation-guard state-hub-memo-dispatch target-revenue", + "status.resources[*].namespace": "argocd argocd argocd argocd argocd argocd argocd argocd argocd", + "status.sync.status": "OutOfSync" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 8317, + "metadata.name": "secret-annotation-guard", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "666115be-f428-435b-8d5f-f0f26bfee693", + "spec.destination": { + "namespace": "default", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "ValidatingAdmissionPolicy ValidatingAdmissionPolicyBinding", + "status.resources[*].name": "reject-secret-last-applied reject-secret-last-applied", + "status.resources[*].namespace": null, + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 5454, + "metadata.name": "state-hub-memo-dispatch", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "098f4323-c4cc-4767-a78a-6073be92f5ef", + "spec.destination": { + "namespace": "state-hub", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "PersistentVolumeClaim Deployment NetworkPolicy", + "status.resources[*].name": "state-hub-memo-dispatch state-hub-memo-dispatch state-hub-memo-dispatch", + "status.resources[*].namespace": "state-hub state-hub state-hub", + "status.sync.status": "Synced" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 11482, + "metadata.name": "target-revenue", + "metadata.namespace": "argocd", + "metadata.ownerReferences": null, + "metadata.uid": "42285c08-97c6-452f-ad8a-4f46d9691bc9", + "spec.destination": { + "namespace": "target-revenue", + "server": "https://kubernetes.default.svc" + }, + "spec.syncPolicy.automated": null, + "status.operationState.phase": "Succeeded", + "status.resources[*].kind": "Service Deployment ExternalSecret Ingress Cluster", + "status.resources[*].name": "target-revenue target-revenue target-revenue-runtime target-revenue target-revenue-pg", + "status.resources[*].namespace": "target-revenue target-revenue target-revenue target-revenue target-revenue", + "status.sync.status": "Synced" + } + ], + "stderr_present": false + }, + "client_projection_diff": { + "candidate_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c", + "differing_fields": [ + "image", + "args", + "volume_mounts", + "volumes" + ], + "field_digests": { + "args": { + "candidate": "5198a112832e2e4893b62bab22bd979075eb6041e2cf268a41b8316ab1b353e2", + "live": "a2e60aed389b4d8b8f9a49d3107e0294b4f35fde25c27c7af7da7d74d26070c7" + }, + "image": { + "candidate": "edabb0e7b82ac1eb40ee768e6fd489e617bee8963764936daf6658354c39f9f2", + "live": "63d034bb798c7d2d8d3cb65d2adc5a841f65f6ce641b6ac72d417fba0352a576" + }, + "security_context": { + "candidate": "9a67298d23686bc6bba3a9b9c718ee74e93aadefbfefc4662a78a06699199d6b", + "live": "9a67298d23686bc6bba3a9b9c718ee74e93aadefbfefc4662a78a06699199d6b" + }, + "service_account": { + "candidate": "e23edfc7e6a17c5103371b28e77a225bc9639a85bdd233a08a0137755cbaf82b", + "live": "e23edfc7e6a17c5103371b28e77a225bc9639a85bdd233a08a0137755cbaf82b" + }, + "volume_mounts": { + "candidate": "8fa38224df35be142189196388270380309a37ca7f98065fcb12f16ec66cbdb4", + "live": "f949db12546b6c4ccd385cd88d03f60821f7c11941e3f350060ab66d6f490296" + }, + "volumes": { + "candidate": "78b9f3c298d8493ed0777f09bedcc8ac1a74509708a28c6b36ec3af61b8898d9", + "live": "1cd9e096dc8e90edfa15a25d082590a8b2029dd29f2f418b5c5612e85fe06114" + } + }, + "live_sha256": "0133fb97300df7dc618b495849b6ec668d18d9b5605fdcc646ed2227ed6426d5", + "ok": true + }, + "cluster": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.name": "kube-system", + "metadata.uid": "a553c742-0115-43d4-99a4-a5ca56fe0786" + } + ], + "stderr_present": false + }, + "cronjobs": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "daemonsets": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "deployment": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.deletionTimestamp": null, + "metadata.generation": 4, + "metadata.name": "flex-auth-secrets-engine", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": null, + "metadata.uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae", + "spec.replicas": 1, + "spec.strategy": { + "rollingUpdate": { + "maxSurge": "25%", + "maxUnavailable": "25%" + }, + "type": "RollingUpdate" + }, + "spec.template.spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd", + "spec.template.spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.template.spec.serviceAccountName": "flex-auth-secrets-engine", + "status.observedGeneration": 4, + "status.readyReplicas": 1, + "status.replicas": 1 + } + ], + "stderr_present": false + }, + "helm_history": { + "exit_code": 0, + "ok": true, + "revisions": [ + { + "app_version": "0.1.0", + "chart": "flex-auth-0.2.0", + "revision": 1, + "status": "superseded", + "updated": "2026-09-06T19:40:09.536566173+02:00" + }, + { + "app_version": "0.1.0", + "chart": "flex-auth-0.2.0", + "revision": 2, + "status": "superseded", + "updated": "2026-09-06T21:28:22.953268141+02:00" + }, + { + "app_version": "0.1.0", + "chart": "flex-auth-0.2.0", + "revision": 3, + "status": "superseded", + "updated": "2026-09-06T23:23:16.220263862+02:00" + }, + { + "app_version": "0.1.0", + "chart": "flex-auth-0.2.0", + "revision": 4, + "status": "deployed", + "updated": "2026-09-14T00:46:30.759520357+02:00" + } + ], + "stderr_present": false + }, + "hpa": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "jobs": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "limits": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "node_usage": { + "exit_code": 0, + "ok": true, + "public_metrics": "239.62.205.92.host.secureserver.net 1539m 38% 8989Mi 56%", + "stderr_present": false + }, + "nodes": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.name": "239.62.205.92.host.secureserver.net", + "metadata.uid": "0659e49e-6539-480a-8b0f-2969dd88cb05", + "status.addresses": [ + { + "address": "92.205.62.239", + "type": "InternalIP" + }, + { + "address": "2a00:1169:111:6d70::", + "type": "InternalIP" + }, + { + "address": "239.62.205.92.host.secureserver.net", + "type": "Hostname" + } + ], + "status.allocatable": { + "cpu": "4", + "ephemeral-storage": "196555267123", + "hugepages-1Gi": "0", + "hugepages-2Mi": "0", + "memory": "16377032Ki", + "pods": "110" + }, + "status.conditions[*].reason": "MemberNotLearner KubeletHasSufficientMemory KubeletHasNoDiskPressure KubeletHasSufficientPID KubeletReady", + "status.conditions[*].status": "True False False False True", + "status.conditions[*].type": "EtcdIsVoter MemoryPressure DiskPressure PIDPressure Ready" + } + ], + "stderr_present": false + }, + "pods": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-application-readback-5d58d48ff7-h5mm8", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-application-readback-5d58d48ff7", + "uid": "94fe25f7-09ba-42ce-835d-c9b8b6b7c87a" + } + ], + "metadata.uid": "a58e03ff-9c39-4ce0-be58-5e6a58df22b1", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-application-readback", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-lifecycle-7cb5869d7d-f5rk9", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-informed-decision-lifecycle-7cb5869d7d", + "uid": "dcf367d2-5216-44bc-9837-8a2669ae5b63" + } + ], + "metadata.uid": "8a1cf44e-4fc5-48ac-9564-cd507fe89cd0", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-informed-decision-lifecycle", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-sitting-7b6d95b4f6-52z2j", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-informed-decision-sitting-7b6d95b4f6", + "uid": "95272d3b-ba0b-4192-bb5d-9209bdbdf4ca" + } + ], + "metadata.uid": "ba3b21f5-f15d-4e8c-910b-8ebc6ecd4ba0", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:6c6dc263f4a7f6461e109e133c004c080e8e373acfead8611856c5fb3e44168e", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-informed-decision-sitting", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-t03-869546497b-4zfzk", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-informed-decision-t03-869546497b", + "uid": "2bc5cdee-58e6-4b05-a40e-4bf7e4b87f71" + } + ], + "metadata.uid": "8986de19-4d58-45b1-807f-70003525e657", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:6600c7a62c36dfb4fbb42590722613827d07ff49875b1f0f4b5de63d8351658d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-informed-decision-t03", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-ops-warden-9bcc5b79c-wgr5p", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-ops-warden-9bcc5b79c", + "uid": "0770e7c5-a123-4370-bd55-afde59f03cbc" + } + ], + "metadata.uid": "98b8c2ed-af62-4825-9e64-bc52be5a959f", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-ops-warden", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-ops-warden-fetch-57f8fcd9dc-54cj6", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-ops-warden-fetch-57f8fcd9dc", + "uid": "ced2ddd2-5dc2-40df-8138-928c842eabcd" + } + ], + "metadata.uid": "1ec9beda-ff7c-42bb-84e0-c0eb8cde2474", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:419bc37420d0d0a5304a8587448f1fdbf87117fb041fb43081b0449b4a7bb13b", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-ops-warden-fetch", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-secrets-engine-6467b96c6f-ncl5t", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-secrets-engine-6467b96c6f", + "uid": "4728ef1c-a963-4a80-a585-4741fba45a15" + } + ], + "metadata.uid": "f9598eac-6db2-41a5-8054-fb35bb5c0861", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-secrets-engine", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-tenant-engine-bfd95cfd6-c56nd", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-tenant-engine-bfd95cfd6", + "uid": "534d506e-2db2-4d53-9bf6-bbad116923da" + } + ], + "metadata.uid": "5c6afebd-c764-4be4-81b5-dc202aab252c", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-tenant-engine", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-user-engine-b745b6b5c-zhsfv", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "ReplicaSet", + "name": "flex-auth-user-engine-b745b6b5c", + "uid": "cae7a3dd-db37-4d9d-bdab-033371cf4127" + } + ], + "metadata.uid": "e465a32b-5eb0-4a53-94e5-0453faf3b960", + "spec.containers[*].image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.serviceAccountName": "flex-auth-user-engine", + "spec.volumes[*].persistentVolumeClaim.claimName": null, + "spec.volumes[*].secret.secretName": null, + "status.phase": "Running" + } + ], + "stderr_present": false + }, + "pvc": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "quota": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "replicasets": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-application-readback-5d58d48ff7", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-application-readback", + "uid": "fceed038-4dae-4c0a-9cf3-cfa968c72c84" + } + ], + "metadata.uid": "94fe25f7-09ba-42ce-835d-c9b8b6b7c87a", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-lifecycle-64dbcc99c6", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-lifecycle", + "uid": "8f3688d9-424d-40ec-a8a1-5ded574c24d8" + } + ], + "metadata.uid": "46792dfd-c5fc-40ee-a110-1537d3c85b8f", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-lifecycle-7cb5869d7d", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-lifecycle", + "uid": "8f3688d9-424d-40ec-a8a1-5ded574c24d8" + } + ], + "metadata.uid": "dcf367d2-5216-44bc-9837-8a2669ae5b63", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-5468bb548d", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "841ab2b6-83f0-4787-a00e-d3de2fe0c09f", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-56bcbc5f8c", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "1ec3f137-b544-4764-9b7a-a50cc2a774ac", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-644c5cdd74", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "ad712b28-c1f2-4582-9933-484956bab67e", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-6745ddb4d5", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "9b053482-af45-426f-bf8e-e84f17407745", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-69dd5449df", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "867391f3-6678-4dd7-b999-d230e58f1296", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-6f54bc8bbd", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "b7cf5ad3-fb51-48ec-b8a6-abb3cdc46b52", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-7495b6c896", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "0544cb86-32f9-44d9-b275-4c396a384f33", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-77699bb558", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "c6d38660-18f2-40dc-a209-1a9badcaf5ee", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-sitting-7b6d95b4f6", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "95272d3b-ba0b-4192-bb5d-9209bdbdf4ca", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-7cbfdb8f76", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "d0b46250-e89d-415c-a27e-21f41aeac6d6", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-sitting-7d7dc77c76", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-sitting", + "uid": "41ed9b85-f254-4a82-971c-09c0388777fd" + } + ], + "metadata.uid": "a9ba8c75-d8cd-440d-9caf-975c618ec772", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-t03-56d8f6cd8b", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-t03", + "uid": "717fa3fb-16ea-446f-b1d4-db7e7c26e89c" + } + ], + "metadata.uid": "320b5700-da24-4c7f-9957-6d2039991dcb", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-t03-59cdf9fb85", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-t03", + "uid": "717fa3fb-16ea-446f-b1d4-db7e7c26e89c" + } + ], + "metadata.uid": "7e3246b6-67a7-433b-bab9-5a7362615efa", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-informed-decision-t03-7f659dcf6", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-t03", + "uid": "717fa3fb-16ea-446f-b1d4-db7e7c26e89c" + } + ], + "metadata.uid": "7853b9ec-6858-4900-98b9-0e986b6560da", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-informed-decision-t03-869546497b", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-informed-decision-t03", + "uid": "717fa3fb-16ea-446f-b1d4-db7e7c26e89c" + } + ], + "metadata.uid": "2bc5cdee-58e6-4b05-a40e-4bf7e4b87f71", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-ops-warden-9bcc5b79c", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-ops-warden", + "uid": "ca67525e-00fc-4291-9624-ad01c85f65fd" + } + ], + "metadata.uid": "0770e7c5-a123-4370-bd55-afde59f03cbc", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-ops-warden-d58dfb675", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-ops-warden", + "uid": "ca67525e-00fc-4291-9624-ad01c85f65fd" + } + ], + "metadata.uid": "63a7ffd1-9df3-48cd-8f01-d01ddbed1201", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-ops-warden-fetch-57f8fcd9dc", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-ops-warden-fetch", + "uid": "ad5c7d5d-5191-42d4-bcc4-d51e0dfea549" + } + ], + "metadata.uid": "ced2ddd2-5dc2-40df-8138-928c842eabcd", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-secrets-engine-5c569d7797", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-secrets-engine", + "uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae" + } + ], + "metadata.uid": "96d591e7-febf-4533-b285-7b71f1e70247", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-secrets-engine-6467b96c6f", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-secrets-engine", + "uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae" + } + ], + "metadata.uid": "4728ef1c-a963-4a80-a585-4741fba45a15", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-secrets-engine-65c74d4858", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-secrets-engine", + "uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae" + } + ], + "metadata.uid": "c897fd28-0ab8-45b1-9372-2f6047174d81", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-secrets-engine-67b87fb4f8", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-secrets-engine", + "uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae" + } + ], + "metadata.uid": "41946bce-0b18-4a8d-8316-3504af3e7590", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 4, + "metadata.name": "flex-auth-tenant-engine-56d5bbd6bf", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "2e37263d-6005-4b68-a589-af977f861856", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-tenant-engine-578c6f647d", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "6cfbefc0-9403-41c4-a940-498af316bce3", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-tenant-engine-6dcd67f748", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "4905699e-98e6-4a1f-90af-996576861348", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-tenant-engine-76665ff4fc", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "becc50bb-42c0-4d98-841d-c201fc266dc5", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 4, + "metadata.name": "flex-auth-tenant-engine-76858977c5", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "277210a2-5b69-4303-8211-8e3b2d8baaeb", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-tenant-engine-7767d5bdbd", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "fb67cc7a-61d4-43e3-9c10-588a7504bdac", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-tenant-engine-bfd95cfd6", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-tenant-engine", + "uid": "99012dec-da76-4558-834a-6e2cf9d415e1" + } + ], + "metadata.uid": "534d506e-2db2-4d53-9bf6-bbad116923da", + "spec.replicas": 1, + "status.replicas": 1 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 3, + "metadata.name": "flex-auth-user-engine-5f59dfbfc5", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "ae5bc7e6-3834-41f4-9caf-4f6505e60890", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-user-engine-67fb948f95", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "c639e3e0-e956-42dc-b76c-c2a5084f9fe6", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-user-engine-75795cfc7c", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "077de103-63b0-46e9-8c74-acbb44a3673c", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-user-engine-7644f5659", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "386d9acb-00f8-4291-abd9-6ab6141d2620", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 2, + "metadata.name": "flex-auth-user-engine-7b885b865", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "603cddcf-dcd5-45e4-950a-f04678db5981", + "spec.replicas": 0, + "status.replicas": 0 + }, + { + "metadata.deletionTimestamp": null, + "metadata.generation": 1, + "metadata.name": "flex-auth-user-engine-b745b6b5c", + "metadata.namespace": "flex-auth", + "metadata.ownerReferences": [ + { + "apiVersion": "apps/v1", + "blockOwnerDeletion": true, + "controller": true, + "kind": "Deployment", + "name": "flex-auth-user-engine", + "uid": "d849b06d-0d66-4cda-b67c-72c81bcdbbcb" + } + ], + "metadata.uid": "cae7a3dd-db37-4d9d-bdab-033371cf4127", + "spec.replicas": 1, + "status.replicas": 1 + } + ], + "stderr_present": false + }, + "resource_requests": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "metadata.name": "actcore-api-558fb8f8fd-7hzks", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-app-db-0", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-event-router-65767fd69d-lj2jb", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-migrate-pnkk9", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "actcore-migrate-wp0039-wq4nw", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "actcore-nats-0", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-statehub-edge-relay-64cfbdb5b5-57kbt", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-sync-h84kx", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "actcore-temporal-698469f9f-hg8dr", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-temporal-db-0", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-temporal-ui-b4595ffd-fwz76", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "actcore-worker-6c9984ddd7-t8msn", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "cm-acme-http-solver-k78bh", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "llm-connect-b85df9f9b-6qd87", + "metadata.namespace": "activity-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "approval-engine-0", + "metadata.namespace": "approval-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "argocd-application-controller-0", + "metadata.namespace": "argocd", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "argocd-applicationset-controller-74cbf4cbbd-zz5l5", + "metadata.namespace": "argocd", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "argocd-redis-648dcb555f-sjj25", + "metadata.namespace": "argocd", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "argocd-repo-server-fd49b89f4-skmvr", + "metadata.namespace": "argocd", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "25m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "audit-core-578f7bd766-t4b9f", + "metadata.namespace": "audit-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "audit-core-attest-chain-29867237-mmd77", + "metadata.namespace": "audit-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "audit-core-attest-chain-29868677-rg2bh", + "metadata.namespace": "audit-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "audit-core-migrate-nk-wp-0035-r2-f226c", + "metadata.namespace": "audit-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "audit-core-migrate-nk-wp-0035-r3-w66rk", + "metadata.namespace": "audit-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "bao-notice-7b989bb7cc-q4xj4", + "metadata.namespace": "bao-notice", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "5m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "canned-prompts-59d849f5bf-khnmc", + "metadata.namespace": "canned-prompts", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "384Mi" + }, + "requests": { + "cpu": "25m", + "memory": "96Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "cert-manager-5575948db9-xq2sx", + "metadata.namespace": "cert-manager", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "cert-manager-cainjector-6c584ddc4d-5lzd6", + "metadata.namespace": "cert-manager", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "cert-manager-webhook-7bb7648887-tbdg6", + "metadata.namespace": "cert-manager", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "cnpg-controller-manager-595cf4bd8b-ndnqg", + "metadata.namespace": "cnpg-system", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "200Mi" + }, + "requests": { + "cpu": "100m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "core-hub-api-candidate-6cc549f8f-nv8j9", + "metadata.namespace": "core-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "core-hub-api-ccdd85c9c-7h74m", + "metadata.namespace": "core-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "core-hub-api-repository-publisher-74bd669d9f-7gpqv", + "metadata.namespace": "core-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "core-hub-prod-migrate-lmbv9", + "metadata.namespace": "core-hub", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "hub-core-candidate-migrate-cbcfh", + "metadata.namespace": "core-hub", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "coulomb-social-69b6cf7b69-44q8w", + "metadata.namespace": "coulomb-social", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-jwhnb", + "metadata.namespace": "coulomb", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-l9f2z", + "metadata.namespace": "coulomb", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-nmtlq", + "metadata.namespace": "coulomb", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Pending" + }, + { + "metadata.name": "apps-pg-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "forgejo-db-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "200m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "200m", + "memory": "512Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "net-kingdom-pg-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "platform-pg-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "platform-pg-2-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "state-hub-db-1", + "metadata.namespace": "databases", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "nk-wp-0035-hourly-observation-h6nh6", + "metadata.namespace": "default", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "32Mi" + }, + "requests": { + "cpu": "5m", + "memory": "8Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "email-connect-7789f47cbb-k4tdw", + "metadata.namespace": "email-connect", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "eso-token-renewer-29865760-zxpbw", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "eso-token-renewer-29867200-nmc7m", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "eso-token-renewer-29868640-tllf7", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "external-secrets-65b567d7c7-wx5sn", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "external-secrets-cert-controller-7bccdcf5b-nhvtf", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "external-secrets-webhook-686bdb4764-9nnsk", + "metadata.namespace": "external-secrets", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-application-readback-5d58d48ff7-h5mm8", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-informed-decision-lifecycle-7cb5869d7d-f5rk9", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-informed-decision-sitting-7b6d95b4f6-52z2j", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-informed-decision-t03-869546497b-4zfzk", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-ops-warden-9bcc5b79c-wgr5p", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-ops-warden-fetch-57f8fcd9dc-54cj6", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-secrets-engine-6467b96c6f-ncl5t", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-tenant-engine-bfd95cfd6-c56nd", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "flex-auth-user-engine-b745b6b5c-zhsfv", + "metadata.namespace": "flex-auth", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "forgejo-gitea-7474684b6-lnr9w", + "metadata.namespace": "forgejo", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": "{\"limits\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}}", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "forgejo-gitea-7d94988c79-krqdr", + "metadata.namespace": "forgejo", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": "{\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}}", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "forgejo-runner-6fcb669668-7g8m7", + "metadata.namespace": "forgejo", + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "forgejo-runner-8bf88cd84-g4n65", + "metadata.namespace": "forgejo", + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "informed-decision-68d5f488d8-c576r", + "metadata.namespace": "informed-decision", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "5m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "issue-core-77c86b879b-rlr8b", + "metadata.namespace": "issue-core", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "activator-6b4748664b-kpc4n", + "metadata.namespace": "knative-serving", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "600Mi" + }, + "requests": { + "cpu": "50m", + "memory": "60Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "autoscaler-764bdc4bc8-gl6x2", + "metadata.namespace": "knative-serving", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1000Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "controller-547767bf48-5nmcf", + "metadata.namespace": "knative-serving", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1000Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "net-kourier-controller-5bc4c79595-q5xqw", + "metadata.namespace": "knative-serving", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "500Mi" + }, + "requests": { + "cpu": "30m", + "memory": "200Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "webhook-8566f4d4bb-rrrkg", + "metadata.namespace": "knative-serving", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "500Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "3scale-kourier-gateway-5cf57fc9fd-fplqc", + "metadata.namespace": "kourier-system", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "800Mi" + }, + "requests": { + "cpu": "50m", + "memory": "200Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "coredns-7bdb54f89-xjwxc", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": { + "limits": { + "memory": "170Mi" + }, + "requests": { + "cpu": "100m", + "memory": "70Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "helm-install-traefik-899cq", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "helm-install-traefik-crd-nwg2m", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "local-path-provisioner-6bc6568469-5c72m", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "metrics-server-786d997795-87mjp", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": { + "requests": { + "cpu": "100m", + "memory": "70Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "svclb-traefik-0c8aecaf-wrjtx", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "traefik-6df99cd5b9-vl84h", + "metadata.namespace": "kube-system", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "privacyidea-86b695c88c-9kh7g", + "metadata.namespace": "mfa", + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}} {\"limits\":{\"cpu\":\"500m\",\"memory\":\"384Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"128Mi\"}}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "privacyidea-backup-29865810-wgt6j", + "metadata.namespace": "mfa", + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "privacyidea-backup-29867250-n8hcj", + "metadata.namespace": "mfa", + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "privacyidea-backup-29868690-w5lhc", + "metadata.namespace": "mfa", + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "openbao-0", + "metadata.namespace": "openbao", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "openbao-server-test", + "metadata.namespace": "openbao", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "openbao-ui-gateway-dff968786-nb9xx", + "metadata.namespace": "openbao", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "playwright-c5b9c8bd7-fbfqv", + "metadata.namespace": "playwright", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "ephemeral-storage": "1Gi", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "ephemeral-storage": "256Mi", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "policy-nexus-74f4b8776f-f8qrt", + "metadata.namespace": "policy-nexus", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "qonto-egress-proxy-57c6478477-ngb5r", + "metadata.namespace": "rapp-qonto-egress", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "20m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "rapp-qonto-audit-collector-f94bc5f46-whc2n", + "metadata.namespace": "rapp-qonto", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "20m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "rein-aharness-54b4c74b8-hk2lw", + "metadata.namespace": "rein-aharness", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "reuse-surface-77c8c476f4-qs8mf", + "metadata.namespace": "reuse", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "reuse-surface-landing-77c77ddf4c-7n7ns", + "metadata.namespace": "reuse", + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "sbom-nexus-579f7b6b7-cbnhd", + "metadata.namespace": "sbom-nexus", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "authelia-7f57c4c4fc-mk5hb", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "authelia-backup-29865795-f4wpl", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "authelia-backup-29867235-fjn5h", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "authelia-backup-29868675-6dg8p", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "identity-provisioner-76465449d5-nd5q9", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "keycape-5fc5dd9b7f-zv5xm", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "keycape-factor-renewer-29869600-fblxb", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "keycape-factor-renewer-29869610-6r98l", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "lldap-backup-29865780-vzlzf", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "lldap-backup-29867220-z9rxb", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "lldap-backup-29868660-fl86v", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "lldap-f6df76764-jjp97", + "metadata.namespace": "sso", + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "nk-wp21-auth-test", + "metadata.namespace": "sso", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "state-hub-5d977977f9-bd2bs", + "metadata.namespace": "state-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "2Gi" + }, + "requests": { + "cpu": "250m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "state-hub-mcp-6c4757bb75-jx7f9", + "metadata.namespace": "state-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "10m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "state-hub-memo-dispatch-5758dd4c-pk87d", + "metadata.namespace": "state-hub", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "96Mi" + }, + "requests": { + "cpu": "5m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "96Mi" + }, + "requests": { + "cpu": "5m", + "memory": "24Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "target-revenue-7c9c854fb7-bkzr2", + "metadata.namespace": "target-revenue", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "target-revenue-pg-1", + "metadata.namespace": "target-revenue", + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "alertmanager-telemetry-alertmanager-0", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"250m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"}} {}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "prometheus-telemetry-prometheus-0", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"1\",\"memory\":\"1536Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}} {}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "telemetry-grafana-6f769b96d7-5tksr", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"limits\":{\"cpu\":\"500m\",\"memory\":\"384Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}}", + "spec.initContainers[*].resources": {}, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "telemetry-kube-state-metrics-58f6f4c74-plmtg", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "telemetry-operator-74754bcf9c-rzk2r", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "telemetry-smtp-proof-20260928-egress-bwv9n", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "telemetry-smtp-proof-20260928-ltd7q", + "metadata.namespace": "telemetry", + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Failed" + }, + { + "metadata.name": "tenant-engine-d75584d94-9mhhx", + "metadata.namespace": "tenant-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "48Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "user-engine-6c894f6b76-bcvpf", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "user-engine-backup-29865840-kffh5", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "user-engine-backup-29867280-pk8pc", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "user-engine-backup-29868720-6r95r", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "user-engine-pg-1", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + }, + { + "metadata.name": "user-engine-restore-drill-q5s5v", + "metadata.namespace": "user-engine", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Succeeded" + }, + { + "metadata.name": "vergabe-teilnahme-5c98dfcbd6-7w9vn", + "metadata.namespace": "vergabe-demo-company", + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "60m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "60m", + "memory": "256Mi" + } + }, + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "spec.overhead": null, + "status.phase": "Running" + } + ], + "stderr_present": false + }, + "statefulsets": { + "exit_code": 0, + "ok": true, + "rows": [], + "stderr_present": false + }, + "storage_free": { + "exit_code": 0, + "ok": true, + "public_filesystem_metrics": "1B-blocks Used Avail Use% Mounted on\n206900281344 81179189248 125704314880 40% /", + "stderr_present": false + }, + "storageclass": { + "exit_code": 0, + "ok": true, + "rows": [ + { + "allowVolumeExpansion": null, + "metadata.name": "local-path", + "metadata.uid": "db77292f-e67a-4032-95b4-a88d3321185b", + "provisioner": "rancher.io/local-path", + "reclaimPolicy": "Delete", + "volumeBindingMode": "WaitForFirstConsumer" + } + ], + "stderr_present": false + } + }, + "observed_at": "2026-10-16T18:53:06.325922+00:00", + "payload_sha256": "c78879355d9f451d9dbf2c36cd74e35c996cc24d1e3d79c2a9dc6238baa5dde8", + "persistent_mutations": false, + "schema": "netkingdom.native-public-preflight.v1", + "source_pins": { + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "platform_revision": "84c529f239c81e6d3ca337015700b03e3a862f53", + "stopped_render_sha256": "03b631f0fe17c63494c14619199f69f2a2a9ab245d00f1ec441248868b24c071" + }, + "transport": { + "exit_code": 0, + "stderr_present": false + } +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/payload.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/payload.json new file mode 100644 index 00000000..e5514347 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/payload.json @@ -0,0 +1,465 @@ +{ + "source_pins": { + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "platform_revision": "84c529f239c81e6d3ca337015700b03e3a862f53", + "stopped_render_sha256": "03b631f0fe17c63494c14619199f69f2a2a9ab245d00f1ec441248868b24c071" + }, + "resources": [ + { + "apiVersion": "networking.k8s.io/v1", + "kind": "NetworkPolicy", + "metadata": { + "name": "flex-auth-secrets-engine", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "spec": { + "podSelector": { + "matchLabels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine" + } + }, + "policyTypes": [ + "Ingress", + "Egress" + ], + "egress": [ + { + "ports": [ + { + "port": 443, + "protocol": "TCP" + }, + { + "port": 6443, + "protocol": "TCP" + } + ] + } + ], + "ingress": [ + { + "from": [ + { + "namespaceSelector": { + "matchLabels": { + "kubernetes.io/metadata.name": "secrets-engine" + } + }, + "podSelector": { + "matchLabels": { + "app.kubernetes.io/name": "secrets-engine" + } + } + } + ], + "ports": [ + { + "port": 8080, + "protocol": "TCP" + } + ] + } + ] + } + }, + { + "apiVersion": "v1", + "kind": "ServiceAccount", + "metadata": { + "name": "flex-auth-secrets-engine", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "automountServiceAccountToken": false + }, + { + "apiVersion": "v1", + "kind": "PersistentVolumeClaim", + "metadata": { + "name": "flex-auth-secrets-engine-outbox", + "annotations": { + "helm.sh/resource-policy": "keep" + }, + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "spec": { + "accessModes": [ + "ReadWriteOnce" + ], + "storageClassName": "local-path", + "resources": { + "requests": { + "storage": "1Gi" + } + } + } + }, + { + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRole", + "metadata": { + "name": "flex-auth-secrets-engine-tokenreviewer", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "rules": [ + { + "apiGroups": [ + "authentication.k8s.io" + ], + "resources": [ + "tokenreviews" + ], + "verbs": [ + "create" + ] + } + ] + }, + { + "apiVersion": "rbac.authorization.k8s.io/v1", + "kind": "ClusterRoleBinding", + "metadata": { + "name": "flex-auth-secrets-engine-tokenreviewer", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "roleRef": { + "apiGroup": "rbac.authorization.k8s.io", + "kind": "ClusterRole", + "name": "flex-auth-secrets-engine-tokenreviewer" + }, + "subjects": [ + { + "kind": "ServiceAccount", + "name": "flex-auth-secrets-engine", + "namespace": "flex-auth" + } + ] + }, + { + "apiVersion": "v1", + "kind": "Service", + "metadata": { + "name": "flex-auth-secrets-engine", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "spec": { + "selector": { + "app.kubernetes.io/name": "flex-auth-secrets-engine" + }, + "ports": [ + { + "name": "http", + "port": 8080, + "targetPort": "http" + } + ] + } + }, + { + "apiVersion": "apps/v1", + "kind": "Deployment", + "metadata": { + "name": "flex-auth-secrets-engine", + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "spec": { + "strategy": { + "type": "Recreate" + }, + "replicas": 0, + "selector": { + "matchLabels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine" + } + }, + "template": { + "metadata": { + "labels": { + "app.kubernetes.io/name": "flex-auth-secrets-engine", + "app.kubernetes.io/instance": "flex-auth-secrets-engine", + "app.kubernetes.io/part-of": "flex-auth" + } + }, + "spec": { + "automountServiceAccountToken": false, + "serviceAccountName": "flex-auth-secrets-engine", + "securityContext": { + "runAsNonRoot": true, + "runAsUser": 65532, + "runAsGroup": 65532, + "fsGroup": 65532, + "seccompProfile": { + "type": "RuntimeDefault" + } + }, + "containers": [ + { + "name": "flex-auth", + "image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f", + "imagePullPolicy": "IfNotPresent", + "args": [ + "serve", + "--addr", + "0.0.0.0:8080", + "--registry", + "/opt/flex-auth/examples/secrets-engine/registry_snapshot.json", + "--policy", + "/opt/flex-auth/examples/secrets-engine/policy_package.md", + "--envelope-signing-key-file", + "/var/run/secrets/decision-envelope-signing/seed", + "--envelope-signing-kid", + "flex-auth-lifecycle-20261016-r1", + "--outbox-max-bytes", + "67108864", + "--outbox-dir", + "/var/lib/flex-auth/outbox", + "--emission-source", + "flex-auth.secrets-engine", + "--caller-audience", + "flex-auth", + "--caller-auth-mode", + "enforce", + "--caller-kubernetes-url", + "https://10.43.0.1", + "--caller-binding", + "secrets-engine=system:serviceaccount:secrets-engine:secrets-engine" + ], + "ports": [ + { + "name": "http", + "containerPort": 8080 + } + ], + "livenessProbe": { + "httpGet": { + "path": "/healthz", + "port": "http" + }, + "periodSeconds": 20 + }, + "readinessProbe": { + "httpGet": { + "path": "/healthz", + "port": "http" + }, + "periodSeconds": 5 + }, + "resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "securityContext": { + "allowPrivilegeEscalation": false, + "capabilities": { + "drop": [ + "ALL" + ] + }, + "readOnlyRootFilesystem": true + }, + "volumeMounts": [ + { + "mountPath": "/var/run/secrets/decision-envelope-signing", + "name": "flex-auth-envelope-signing", + "readOnly": true + }, + { + "mountPath": "/var/lib/flex-auth/outbox", + "name": "flex-auth-outbox" + }, + { + "mountPath": "/var/run/secrets/flex-auth-reviewer", + "name": "flex-auth-reviewer", + "readOnly": true + } + ] + } + ], + "volumes": [ + { + "name": "flex-auth-envelope-signing", + "secret": { + "secretName": "flex-auth-secrets-engine-envelope-signing", + "defaultMode": 288, + "items": [ + { + "key": "seed", + "path": "seed" + } + ] + } + }, + { + "name": "flex-auth-outbox", + "persistentVolumeClaim": { + "claimName": "flex-auth-secrets-engine-outbox" + } + }, + { + "name": "flex-auth-reviewer", + "projected": { + "defaultMode": 288, + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3600, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + } + ] + } + } + ] + } + } + } + } + ], + "expected_projection": { + "service_account": "flex-auth-secrets-engine", + "image": "forgejo.coulomb.social/coulomb/flex-auth@sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f", + "args": [ + "serve", + "--addr", + "0.0.0.0:8080", + "--registry", + "/opt/flex-auth/examples/secrets-engine/registry_snapshot.json", + "--policy", + "/opt/flex-auth/examples/secrets-engine/policy_package.md", + "--envelope-signing-key-file", + "/var/run/secrets/decision-envelope-signing/seed", + "--envelope-signing-kid", + "flex-auth-lifecycle-20261016-r1", + "--outbox-max-bytes", + "67108864", + "--outbox-dir", + "/var/lib/flex-auth/outbox", + "--emission-source", + "flex-auth.secrets-engine", + "--caller-audience", + "flex-auth", + "--caller-auth-mode", + "enforce", + "--caller-kubernetes-url", + "https://10.43.0.1", + "--caller-binding", + "secrets-engine=system:serviceaccount:secrets-engine:secrets-engine" + ], + "volume_mounts": [ + { + "mountPath": "/var/run/secrets/decision-envelope-signing", + "name": "flex-auth-envelope-signing", + "readOnly": true + }, + { + "mountPath": "/var/lib/flex-auth/outbox", + "name": "flex-auth-outbox" + }, + { + "mountPath": "/var/run/secrets/flex-auth-reviewer", + "name": "flex-auth-reviewer", + "readOnly": true + } + ], + "volumes": [ + { + "name": "flex-auth-envelope-signing", + "secret": { + "secretName": "flex-auth-secrets-engine-envelope-signing", + "defaultMode": 288, + "items": [ + { + "key": "seed", + "path": "seed" + } + ] + } + }, + { + "name": "flex-auth-outbox", + "persistentVolumeClaim": { + "claimName": "flex-auth-secrets-engine-outbox" + } + }, + { + "name": "flex-auth-reviewer", + "projected": { + "defaultMode": 288, + "sources": [ + { + "serviceAccountToken": { + "expirationSeconds": 3600, + "path": "token" + } + }, + { + "configMap": { + "name": "kube-root-ca.crt", + "items": [ + { + "key": "ca.crt", + "path": "ca.crt" + } + ] + } + } + ] + } + } + ], + "security_context": { + "runAsNonRoot": true, + "runAsUser": 65532, + "runAsGroup": 65532, + "fsGroup": 65532, + "seccompProfile": { + "type": "RuntimeDefault" + } + } + } +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/preflight.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/preflight.py new file mode 100644 index 00000000..4fed28f9 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/preflight.py @@ -0,0 +1,121 @@ +"""Stdin-only public metadata and exact server-dry-run; never persist raw output. +Local coordinator supplies frozen JSON manifests. No SSH credential inspection. +""" +import datetime, hashlib, json, os, subprocess + +def digest(x): + return hashlib.sha256(json.dumps(x,sort_keys=True,separators=(',',':')).encode()).hexdigest() + +def invoke(argv, stdin=None): + try: + r=subprocess.run(argv,input=stdin,capture_output=True,text=True,timeout=35,env={**os.environ,'KUBECONFIG':'/etc/rancher/k3s/k3s.yaml'}) + return r.returncode,r.stdout,bool(r.stderr) + except (OSError,subprocess.TimeoutExpired): + return -1,'',True + +def query(resource, fields, namespace=None, name=None, allns=False): + argv=['kubectl','get',resource] + if namespace: argv+=['-n',namespace] + if name: argv+=[name] + if allns: argv+=['-A'] + template=('{range .items[*]}' if not name else '')+'{"\\u001e"}'.join('{.'+f+'}' for f in fields)+'{"\\n"}'+('{end}' if not name else '') + rc,out,err=invoke(argv+['-o','jsonpath='+template]) + rows=[] + if rc==0: + for line in out.split('\n'): + if not line: continue + parts=line.split('\x1e') + if len(parts)!=len(fields):return {'ok':False,'failure':'metadata-shape','stderr_present':err} + row={} + for key,value in zip(fields,parts): + try: row[key]=json.loads(value) if value else None + except ValueError: row[key]=value + rows.append(row) + return {'ok':rc==0,'exit_code':rc,'stderr_present':err,'rows':rows} + +def require(condition,message): + if not condition:raise ValueError(message) + +# Exact AST source extracted from pinned Platform module SHA256 +# 4fb9ce6608ad04c4f5dc98a95796dc88a08a2453dc15c0d40c5c688fc02f573f +def deployment_projection(deployment): + spec=deployment['spec']['template']['spec'];containers=spec.get('containers',[]) + require(type(containers) is list and len(containers)==1 and not spec.get('initContainers'),'single fixed signer container required') + item=containers[0] + # Never hash arbitrary env values or an entire Secret/spec response. + return {'service_account':spec.get('serviceAccountName'),'image':item.get('image'), + 'args':item.get('args'),'volume_mounts':item.get('volumeMounts',[]), + 'volumes':spec.get('volumes',[]),'security_context':spec.get('securityContext')} + + +def run(payload): + receipt={'schema':'netkingdom.native-public-preflight.v1','observed_at':datetime.datetime.now(datetime.timezone.utc).isoformat(),'source_pins':payload['source_pins'],'persistent_mutations':False,'held_fence':False,'observations':{}} + obs=receipt['observations'] + obs['nodes']=query('nodes',['metadata.name','metadata.uid','status.addresses','status.allocatable','status.conditions[*].type','status.conditions[*].status','status.conditions[*].reason']) + obs['cluster']=query('namespace',['metadata.name','metadata.uid'],name='kube-system') + nodes=obs['nodes'].get('rows',[]);cluster=obs['cluster'].get('rows',[]) + valid_node=any(type(row.get('status.addresses')) is list and any(type(address) is dict and address.get('address')=='92.205.62.239' and address.get('type') in {'InternalIP','ExternalIP'} for address in row['status.addresses']) for row in nodes if type(row) is dict) + if not obs['nodes'].get('ok') or not obs['cluster'].get('ok') or not valid_node or len(cluster)!=1 or type(cluster[0]) is not dict or cluster[0].get('metadata.uid')!='a553c742-0115-43d4-99a4-a5ca56fe0786': + receipt['refused']='target-identity';return receipt + # conditions contain only public node health, no annotations/secret/env/config. + common=['metadata.name','metadata.namespace','metadata.uid','metadata.generation','metadata.ownerReferences','metadata.deletionTimestamp'] + obs['deployment']=query('deployment',common+['spec.replicas','spec.strategy','status.observedGeneration','status.replicas','status.readyReplicas','spec.template.spec.serviceAccountName','spec.template.spec.containers[*].image','spec.template.spec.containers[*].resources'],namespace='flex-auth',name='flex-auth-secrets-engine') + obs['replicasets']=query('replicasets',common+['spec.replicas','status.replicas'],namespace='flex-auth') + obs['pods']=query('pods',common+['status.phase','spec.nodeName','spec.serviceAccountName','spec.volumes[*].secret.secretName','spec.volumes[*].persistentVolumeClaim.claimName','spec.containers[*].image'],namespace='flex-auth') + obs['hpa']=query('hpa',common+['spec.scaleTargetRef','spec.minReplicas','spec.maxReplicas'],namespace='flex-auth') + # Only identity/owner/SA/volume references from potential workload writers. + for resource in ['jobs','cronjobs','statefulsets','daemonsets']: + obs[resource]=query(resource,common,namespace='flex-auth') + obs['quota']=query('resourcequota',['metadata.name','spec.hard','status.hard','status.used'],namespace='flex-auth') + obs['limits']=query('limitrange',['metadata.name','spec.limits'],namespace='flex-auth') + obs['pvc']=query('pvc',common+['spec.storageClassName','spec.accessModes','spec.resources.requests.storage','spec.volumeName','status.phase','status.capacity'],namespace='flex-auth') + obs['storageclass']=query('storageclass',['metadata.name','metadata.uid','provisioner','reclaimPolicy','volumeBindingMode','allowVolumeExpansion'],name='local-path') + obs['applications']=query('applications.argoproj.io',common+['spec.destination','spec.syncPolicy.automated','status.operationState.phase','status.sync.status','status.resources[*].kind','status.resources[*].namespace','status.resources[*].name'],namespace='argocd') + # Metrics and allocation JSONPath select only resource fields of all pods. + obs['resource_requests']=query('pods',['metadata.namespace','metadata.name','spec.nodeName','status.phase','spec.containers[*].resources','spec.initContainers[*].resources','spec.overhead'],allns=True) + rc,out,err=invoke(['kubectl','top','nodes','--no-headers']);obs['node_usage']={'ok':rc==0,'exit_code':rc,'stderr_present':err,'public_metrics':out.strip() if rc==0 else None} + rc,out,err=invoke(['df','-B1','--output=size,used,avail,pcent,target','/var/lib/rancher/k3s/storage']);obs['storage_free']={'ok':rc==0,'exit_code':rc,'stderr_present':err,'public_filesystem_metrics':out.strip() if rc==0 else None} + # helm history returns release metadata, no values/manifests/Secret reads by wrapper. + rc,out,err=invoke(['helm','history','flex-auth-secrets-engine','-n','flex-auth','--output','json','--max','10']) + history={'ok':rc==0,'exit_code':rc,'stderr_present':err} + try: history['revisions']=[{k:x.get(k) for k in ('revision','updated','status','chart','app_version')} for x in json.loads(out)] if rc==0 else [] + except (ValueError,TypeError):history={'ok':False,'failure':'history-shape'} + obs['helm_history']=history + # Sanitized client comparison: no arbitrary live args or projection fields emitted. + mapping={'service_account':'spec.template.spec.serviceAccountName','image':'spec.template.spec.containers[0].image','args':'spec.template.spec.containers[0].args','volume_mounts':'spec.template.spec.containers[0].volumeMounts','volumes':'spec.template.spec.volumes','security_context':'spec.template.spec.securityContext'} + live=query('deployment',list(mapping.values()),namespace='flex-auth',name='flex-auth-secrets-engine') + if live['ok'] and len(live['rows'])==1: + current={k:live['rows'][0][path] for k,path in mapping.items()} + for key in ['volume_mounts','volumes']:current[key]=current[key] or [] + obs['client_projection_diff']={'ok':True,'live_sha256':digest(current),'candidate_sha256':digest(payload['expected_projection']),'differing_fields':[k for k in current if current[k]!=payload['expected_projection'][k]],'field_digests':{k:{'live':digest(current[k]),'candidate':digest(payload['expected_projection'][k])} for k in current}} + else:obs['client_projection_diff']={'ok':False} + receipt['dry_runs']=[] + for obj in payload['resources']: + kind=obj['kind'];name=obj['metadata']['name'] + if kind not in {'ServiceAccount','Role','RoleBinding','ClusterRole','ClusterRoleBinding','Service','Deployment','NetworkPolicy','PersistentVolumeClaim'} or obj['metadata'].get('namespace','flex-auth')!='flex-auth': + receipt['refused']='resource-allowlist';return receipt + fields=list(mapping.values())+['spec.replicas'] + selected='jsonpath='+('{"\\u001e"}'.join('{.'+f+'}' for f in fields)) if kind=='Deployment' else 'name' + rc,out,err=invoke(['kubectl','apply','--dry-run=server','--validate=strict','-n','flex-auth','-f','-','-o',selected],json.dumps(obj)) + row={'kind':kind,'name':name,'exit_code':rc,'stderr_present':err,'admitted':rc==0} + if rc==0: + try: + if kind=='Deployment': + raw=out.strip().split('\x1e') + if len(raw)!=len(fields):raise ValueError('projection-shape') + values=[] + for value in raw: + try:values.append(json.loads(value) if value else None) + except ValueError:values.append(value) + p=dict(zip(mapping,values[:-1])) + row.update(replicas=values[-1],projection_sha256=digest(p),expected_projection_sha256=digest(payload['expected_projection']),projection_matches=p==payload['expected_projection'],differing_projection_fields=[k for k in p if p[k]!=payload['expected_projection'].get(k)]) + except (ValueError,TypeError,KeyError):row.update(admitted=False,failure='admission-shape') + receipt['dry_runs'].append(row) + receipt['completed_at']=datetime.datetime.now(datetime.timezone.utc).isoformat() + receipt['limitations']=['Dated metadata and dry-run only; no held writer fence or native owner disposition.','Helm values/manifests/config/env/annotations/Secrets not fetched. Live args only compared and hashed.','Application workload refs and current writer hints do not authenticate manual/CI writers.','No actual PVC binding/PV Retain, stop/create/start/custody or token request.','kubectl apply dry-run is admission evidence, not Helm upgrade execution equivalence.'] + return receipt + +if __name__=='__main__': + try: result=run(PAYLOAD) + except Exception: result={'schema':'netkingdom.native-public-preflight.v1','refused':'sanitized-wrapper-failure','persistent_mutations':False,'held_fence':False} + print(json.dumps(result,sort_keys=True)) diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/probe.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/probe.py new file mode 100644 index 00000000..01fe429a --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/probe.py @@ -0,0 +1,22 @@ +"""Identity-only actual kubectl JSONPath parser proof, for coordinator execution.""" +import hashlib,json,subprocess +from pathlib import Path +P=Path(__file__).parent +source=(P/'preflight.py').read_text().split("if __name__=='__main__':")[0] +source+=''' +try: + nodes=query('nodes',['metadata.name','status.addresses','status.conditions[*].type','status.conditions[*].status','status.conditions[*].reason']) + cluster=query('namespace',['metadata.name','metadata.uid'],name='kube-system') + rows=nodes.get('rows',[]);clusters=cluster.get('rows',[]) + result={'node_query_ok':nodes.get('ok'),'cluster_query_ok':cluster.get('ok'),'array_object_format_valid':bool(rows) and all(type(x.get('status.addresses')) is list for x in rows),'exact_target_address':any(a.get('address')=='92.205.62.239' and a.get('type') in {'InternalIP','ExternalIP'} for row in rows for a in (row.get('status.addresses') if type(row.get('status.addresses')) is list else []) if type(a) is dict),'cluster_identity':len(clusters)==1 and clusters[0].get('metadata.uid')=='a553c742-0115-43d4-99a4-a5ca56fe0786','stdout_sanitized':True} +except Exception:result={'refused':'sanitized-formatter-probe-failure'} +print(json.dumps(result)) +''' +try: + r=subprocess.run(['ssh','-o','BatchMode=yes','-o','ConnectTimeout=12','railiance01','python3','-'],input=source,capture_output=True,text=True,timeout=100) + try:result=json.loads(r.stdout) if r.returncode==0 else {'refused':'sanitized-ssh-failure'} + except ValueError:result={'refused':'sanitized-output-shape'} + result['transport']={'exit_code':r.returncode,'stderr_present':bool(r.stderr)} +except (OSError,subprocess.TimeoutExpired):result={'refused':'sanitized-probe-unconfirmed'} +result['probe_sha256']=hashlib.sha256(Path(__file__).read_bytes()).hexdigest() +(P/'formatter-probe.json').write_text(json.dumps(result,indent=2)+'\n');print(json.dumps(result)) diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/run.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/run.py new file mode 100644 index 00000000..f530b22e --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/run.py @@ -0,0 +1,17 @@ +"""Coordinator invokes after wrapper review. No remote file, shell interpolation or credential reads.""" +import datetime,hashlib,json,subprocess +from pathlib import Path +P=Path(__file__).parent +source=(P/'preflight.py').read_text();payload=(P/'payload.json').read_text() +program='PAYLOAD='+repr(json.loads(payload))+'\n'+source +try: + r=subprocess.run(['ssh','-o','BatchMode=yes','-o','ConnectTimeout=12','railiance01','python3','-'],input=program,capture_output=True,text=True,timeout=480) + try:result=json.loads(r.stdout) if r.returncode==0 else {'refused':'sanitized-ssh-failure'} + except ValueError:result={'refused':'sanitized-remote-output-shape'} + result['transport']={'exit_code':r.returncode,'stderr_present':bool(r.stderr)} +except (OSError,subprocess.TimeoutExpired):result={'refused':'sanitized-transport-unconfirmed'} +result['collector_sha256']=hashlib.sha256(source.encode()).hexdigest() +result['payload_sha256']=hashlib.sha256(payload.encode()).hexdigest() +result['local_completed_at']=datetime.datetime.now(datetime.timezone.utc).isoformat() +(P/'live-preflight.json').write_text(json.dumps(result,indent=2,sort_keys=True)+'\n') +print(json.dumps({'receipt':str(P/'live-preflight.json'),'refused':result.get('refused'),'dry_runs':result.get('dry_runs',[]),'held_fence':result.get('held_fence',False)})) diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-analysis.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-analysis.json new file mode 100644 index 00000000..ef28e9d5 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-analysis.json @@ -0,0 +1,17 @@ +{ + "node": "239.62.205.92.host.secureserver.net", + "nonterminal_bound_pods": 91, + "multicontainer_pods": 6, + "pods_with_init_resources": 19, + "pods_with_pod_level_resources": 0, + "pods_with_restartable_init_fields": 0, + "supplement_used": true, + "requested_cpu_m": "3580.000", + "allocatable_cpu_m": "4000", + "unrequested_cpu_m": "420.000", + "requested_memory_bytes": "10234101760", + "allocatable_memory_bytes": "16770080768", + "unrequested_memory_bytes": "6535979008", + "assumptions": [], + "method": "exclude terminal/unbound/other-node Pods; sum regular requests; per-resource maximum init request; overhead; conservative sum if restartable init present; max with pod-level requests" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-supplement.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-supplement.json new file mode 100644 index 00000000..9c6d9504 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/scheduling-supplement.json @@ -0,0 +1,2536 @@ +{ + "observed_at": "2026-10-16T19:07:09.348717+00:00", + "nodes": { + "ok": true, + "exit_code": 0, + "stderr_present": false, + "rows": [ + { + "metadata.name": "239.62.205.92.host.secureserver.net", + "metadata.uid": "0659e49e-6539-480a-8b0f-2969dd88cb05", + "status.addresses": [ + { + "address": "92.205.62.239", + "type": "InternalIP" + }, + { + "address": "2a00:1169:111:6d70::", + "type": "InternalIP" + }, + { + "address": "239.62.205.92.host.secureserver.net", + "type": "Hostname" + } + ], + "spec.unschedulable": null, + "spec.taints": null, + "status.allocatable": { + "cpu": "4", + "ephemeral-storage": "196555267123", + "hugepages-1Gi": "0", + "hugepages-2Mi": "0", + "memory": "16377032Ki", + "pods": "110" + }, + "status.nodeInfo.kubeletVersion": "v1.35.1+k3s1" + } + ] + }, + "cluster": { + "ok": true, + "exit_code": 0, + "stderr_present": false, + "rows": [ + { + "metadata.name": "kube-system", + "metadata.uid": "a553c742-0115-43d4-99a4-a5ca56fe0786" + } + ] + }, + "held_fence": false, + "persistent_mutations": false, + "pods": { + "ok": true, + "exit_code": 0, + "stderr_present": false, + "rows": [ + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-api-558fb8f8fd-7hzks", + "metadata.uid": "e84e1b9c-115a-4264-ac21-2c3b210e643a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-app-db-0", + "metadata.uid": "ed46915a-9c0f-47d0-bdfb-d1ed4eb215cc", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-event-router-65767fd69d-lj2jb", + "metadata.uid": "04f1bd58-bee7-4ab4-8417-0c0616b6f1bb", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-migrate-pnkk9", + "metadata.uid": "9befb444-43b5-470e-b755-eaa19af0deca", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-migrate-wp0039-wq4nw", + "metadata.uid": "bcd19b28-2257-4d18-84e6-fdb6f5ce474c", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-nats-0", + "metadata.uid": "5e8eb71d-fffa-4a45-b837-e923823056ba", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-statehub-edge-relay-64cfbdb5b5-57kbt", + "metadata.uid": "4bbf2e44-d1c7-4788-886b-5e983607748a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-sync-h84kx", + "metadata.uid": "21ea8d6f-10da-4fdb-8094-e8606eefbf8d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-temporal-698469f9f-hg8dr", + "metadata.uid": "f8742dcf-d205-412b-9e1d-3bc0320cc443", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-temporal-db-0", + "metadata.uid": "7b355dfc-0851-4cc6-8031-f2dcd4154edc", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-temporal-ui-b4595ffd-fwz76", + "metadata.uid": "331dcaee-3f3d-4c76-ab62-5eb5c0a42016", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "actcore-worker-6c9984ddd7-t8msn", + "metadata.uid": "8549a50c-c5c3-4c9a-b30b-d9c1573ec545", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "cm-acme-http-solver-k78bh", + "metadata.uid": "3365ee55-a5d2-478e-84f7-5194775b3ae1", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "activity-core", + "metadata.name": "llm-connect-b85df9f9b-6qd87", + "metadata.uid": "cc0b3a37-be42-46e4-8f3d-e214b420bd50", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "approval-engine", + "metadata.name": "approval-engine-0", + "metadata.uid": "0aff01bc-8719-4229-8f2f-c26781d2e033", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "argocd", + "metadata.name": "argocd-application-controller-0", + "metadata.uid": "acc11272-84b1-429b-be69-e036e3e8392d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "argocd", + "metadata.name": "argocd-applicationset-controller-74cbf4cbbd-zz5l5", + "metadata.uid": "7709f0c4-35a7-4f61-8b7f-32642b35f766", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "argocd", + "metadata.name": "argocd-redis-648dcb555f-sjj25", + "metadata.uid": "427c78f1-799e-45c7-88a9-3325c41088eb", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "argocd", + "metadata.name": "argocd-repo-server-fd49b89f4-skmvr", + "metadata.uid": "0c8b33bf-5a29-4381-80e9-31a23332cab3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "25m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "audit-core", + "metadata.name": "audit-core-578f7bd766-t4b9f", + "metadata.uid": "8333754a-eca0-4dd0-9230-72e41bb1e632", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "audit-core", + "metadata.name": "audit-core-attest-chain-29867237-mmd77", + "metadata.uid": "d395966d-6e70-4493-a779-3f03ce7919c6", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "audit-core", + "metadata.name": "audit-core-attest-chain-29868677-rg2bh", + "metadata.uid": "7a1b9c08-b819-4ab7-9811-c9ceaa624c66", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "10m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "audit-core", + "metadata.name": "audit-core-migrate-nk-wp-0035-r2-f226c", + "metadata.uid": "9261107b-e9ac-463c-a881-372593691474", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "audit-core", + "metadata.name": "audit-core-migrate-nk-wp-0035-r3-w66rk", + "metadata.uid": "08761006-5fdc-47e1-b08b-f07cbb357e3c", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "bao-notice", + "metadata.name": "bao-notice-7b989bb7cc-q4xj4", + "metadata.uid": "2291f36b-39a2-436a-bed5-2bd3c94bd479", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "5m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "canned-prompts", + "metadata.name": "canned-prompts-59d849f5bf-khnmc", + "metadata.uid": "5304b52c-e29a-40d2-9b9f-4341126a1022", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "384Mi" + }, + "requests": { + "cpu": "25m", + "memory": "96Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "cert-manager", + "metadata.name": "cert-manager-5575948db9-xq2sx", + "metadata.uid": "04ccb23d-a43f-46ef-9167-23de07fdb608", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "cert-manager", + "metadata.name": "cert-manager-cainjector-6c584ddc4d-5lzd6", + "metadata.uid": "598feeb5-d4cb-4f90-a53e-7fffaacdc7cf", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "cert-manager", + "metadata.name": "cert-manager-webhook-7bb7648887-tbdg6", + "metadata.uid": "a66498c1-5885-48c9-b1b9-7fa8503e2651", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "cnpg-system", + "metadata.name": "cnpg-controller-manager-595cf4bd8b-ndnqg", + "metadata.uid": "f595f1b7-2298-4b42-aa5b-ad80b709cfee", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "200Mi" + }, + "requests": { + "cpu": "100m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "core-hub", + "metadata.name": "core-hub-api-candidate-6cc549f8f-nv8j9", + "metadata.uid": "14b36b62-9f9b-4165-9b0c-4d85767c4350", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "core-hub", + "metadata.name": "core-hub-api-ccdd85c9c-7h74m", + "metadata.uid": "24573028-810a-4928-bd9f-7c758891f70c", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "core-hub", + "metadata.name": "core-hub-api-repository-publisher-74bd669d9f-7gpqv", + "metadata.uid": "3e7f57b0-e65c-4938-85af-ab603a6f1313", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "core-hub", + "metadata.name": "core-hub-prod-migrate-lmbv9", + "metadata.uid": "55ae7e9a-8527-48ed-b07f-0b5a86f1f327", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "core-hub", + "metadata.name": "hub-core-candidate-migrate-cbcfh", + "metadata.uid": "6b009605-9b9e-4b3d-a736-9939ae77de59", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "coulomb-social", + "metadata.name": "coulomb-social-69b6cf7b69-44q8w", + "metadata.uid": "aa707221-3680-41aa-8e71-cc6c7d757187", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "coulomb", + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-jwhnb", + "metadata.uid": "96513a12-baeb-4273-809d-3673b4e2ebf2", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "coulomb", + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-l9f2z", + "metadata.uid": "bf001b89-8dca-4649-aab2-960865a87583", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "coulomb", + "metadata.name": "ihp-railiance-probe-7c99c6fcc4-nmtlq", + "metadata.uid": "8f338047-dc4b-42db-a6f9-de1532a71cdc", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Pending", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "apps-pg-1", + "metadata.uid": "c86ec15f-7f0f-49cb-b8f6-64b0f40f33b3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "forgejo-db-1", + "metadata.uid": "29022104-8bf6-49b0-a15f-2966259552b9", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "200m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "200m", + "memory": "512Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "net-kingdom-pg-1", + "metadata.uid": "0404c66b-338b-4446-a767-622d248ab0d3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "platform-pg-1", + "metadata.uid": "2b9ffe2a-048b-4f2f-974e-105ca22c2d13", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "platform-pg-2-1", + "metadata.uid": "1ea39cc6-6771-4467-91e0-38cc025baf8e", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "databases", + "metadata.name": "state-hub-db-1", + "metadata.uid": "5c1410ae-49e0-45d9-a953-954991eecd91", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "default", + "metadata.name": "nk-wp-0035-hourly-observation-h6nh6", + "metadata.uid": "bae9c1bc-743b-4231-9be4-2f5d67ff5542", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "32Mi" + }, + "requests": { + "cpu": "5m", + "memory": "8Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "email-connect", + "metadata.name": "email-connect-7789f47cbb-k4tdw", + "metadata.uid": "8c27087a-76f9-456c-bb71-1ae9cd92b6c2", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "eso-token-renewer-29865760-zxpbw", + "metadata.uid": "92fb221e-50ce-446f-8693-6b43344e6368", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "eso-token-renewer-29867200-nmc7m", + "metadata.uid": "36b0116a-dc1d-41db-9ef7-3144194cd319", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "eso-token-renewer-29868640-tllf7", + "metadata.uid": "ff67c789-ad36-42b7-85c9-389420368fbf", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "external-secrets-65b567d7c7-wx5sn", + "metadata.uid": "3297717c-34eb-44d2-b8d4-6e5d2871dc44", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "external-secrets-cert-controller-7bccdcf5b-nhvtf", + "metadata.uid": "d4685a4f-0808-40ff-9cd6-bcee38b81b06", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "external-secrets", + "metadata.name": "external-secrets-webhook-686bdb4764-9nnsk", + "metadata.uid": "36b0f415-8bf0-4721-872d-84e56633c431", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-application-readback-5d58d48ff7-h5mm8", + "metadata.uid": "a58e03ff-9c39-4ce0-be58-5e6a58df22b1", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-informed-decision-lifecycle-7cb5869d7d-f5rk9", + "metadata.uid": "8a1cf44e-4fc5-48ac-9564-cd507fe89cd0", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-informed-decision-sitting-7b6d95b4f6-52z2j", + "metadata.uid": "ba3b21f5-f15d-4e8c-910b-8ebc6ecd4ba0", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-informed-decision-t03-869546497b-4zfzk", + "metadata.uid": "8986de19-4d58-45b1-807f-70003525e657", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "5m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-ops-warden-9bcc5b79c-wgr5p", + "metadata.uid": "98b8c2ed-af62-4825-9e64-bc52be5a959f", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-ops-warden-fetch-57f8fcd9dc-54cj6", + "metadata.uid": "1ec9beda-ff7c-42bb-84e0-c0eb8cde2474", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-secrets-engine-6467b96c6f-ncl5t", + "metadata.uid": "f9598eac-6db2-41a5-8054-fb35bb5c0861", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-tenant-engine-bfd95cfd6-c56nd", + "metadata.uid": "5c6afebd-c764-4be4-81b5-dc202aab252c", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "flex-auth", + "metadata.name": "flex-auth-user-engine-b745b6b5c-zhsfv", + "metadata.uid": "e465a32b-5eb0-4a53-94e5-0453faf3b960", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "forgejo", + "metadata.name": "forgejo-gitea-7474684b6-lnr9w", + "metadata.uid": "d4728052-b8df-4574-8a3e-74490a04472d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": "{\"limits\":{\"cpu\":\"100m\",\"memory\":\"64Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}}", + "spec.overhead": null + }, + { + "metadata.namespace": "forgejo", + "metadata.name": "forgejo-gitea-7d94988c79-krqdr", + "metadata.uid": "d741699c-41c5-46c2-8745-2338e181eaca", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": "{\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}} {\"requests\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"}}", + "spec.overhead": null + }, + { + "metadata.namespace": "forgejo", + "metadata.name": "forgejo-runner-6fcb669668-7g8m7", + "metadata.uid": "4e86e009-9adf-4e95-9560-ee79d4fbbfda", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "forgejo", + "metadata.name": "forgejo-runner-8bf88cd84-g4n65", + "metadata.uid": "5a0cc0e2-ba02-4f8c-852f-1e96543a174a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "informed-decision", + "metadata.name": "informed-decision-68d5f488d8-c576r", + "metadata.uid": "1153f806-1e05-4596-baf3-a4fa8adf08be", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "5m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "issue-core", + "metadata.name": "issue-core-77c86b879b-rlr8b", + "metadata.uid": "05b6c775-8077-4907-ace6-89de2422743f", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "knative-serving", + "metadata.name": "activator-6b4748664b-kpc4n", + "metadata.uid": "82d291dc-6c2b-4cab-b0f0-a550d993554d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "600Mi" + }, + "requests": { + "cpu": "50m", + "memory": "60Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "knative-serving", + "metadata.name": "autoscaler-764bdc4bc8-gl6x2", + "metadata.uid": "769e59a8-4759-4e44-af3a-d81eea62a0d3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1000Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "knative-serving", + "metadata.name": "controller-547767bf48-5nmcf", + "metadata.uid": "0eb1b679-ca9a-4e0b-8aa9-2464e8a67819", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1000Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "knative-serving", + "metadata.name": "net-kourier-controller-5bc4c79595-q5xqw", + "metadata.uid": "bdf04dd7-33a5-46cb-a4c1-64fc08ff4ac3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "500Mi" + }, + "requests": { + "cpu": "30m", + "memory": "200Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "knative-serving", + "metadata.name": "webhook-8566f4d4bb-rrrkg", + "metadata.uid": "bb9c74d7-2990-4d46-bb7e-881f60e64377", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "500Mi" + }, + "requests": { + "cpu": "30m", + "memory": "100Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kourier-system", + "metadata.name": "3scale-kourier-gateway-5cf57fc9fd-fplqc", + "metadata.uid": "1e3cafa1-1eba-4cde-946f-ac2a5f36d78f", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "800Mi" + }, + "requests": { + "cpu": "50m", + "memory": "200Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "coredns-7bdb54f89-xjwxc", + "metadata.uid": "0728483c-b845-4fbd-8526-9d824a952fb6", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "memory": "170Mi" + }, + "requests": { + "cpu": "100m", + "memory": "70Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "helm-install-traefik-899cq", + "metadata.uid": "8e5e9309-6d23-449a-88dd-14f692bc3d01", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "helm-install-traefik-crd-nwg2m", + "metadata.uid": "21222045-846a-442f-a8e5-ae9c3b21a112", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "local-path-provisioner-6bc6568469-5c72m", + "metadata.uid": "5e0c650a-7fea-40bd-bf23-6e1052481c9d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "metrics-server-786d997795-87mjp", + "metadata.uid": "50a640de-7f89-46ae-81ba-cd1537e8437e", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "requests": { + "cpu": "100m", + "memory": "70Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "svclb-traefik-0c8aecaf-wrjtx", + "metadata.uid": "33f491d4-a510-4eec-b0e6-00e8dbab9274", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{} {}", + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "kube-system", + "metadata.name": "traefik-6df99cd5b9-vl84h", + "metadata.uid": "bef525fe-2dcc-429a-a03b-7c3f453a5b92", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "mfa", + "metadata.name": "privacyidea-86b695c88c-9kh7g", + "metadata.uid": "2a44aa01-84e0-4778-a7c3-d0597b192259", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"500m\",\"memory\":\"512Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"256Mi\"}} {\"limits\":{\"cpu\":\"500m\",\"memory\":\"384Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"128Mi\"}}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "mfa", + "metadata.name": "privacyidea-backup-29865810-wgt6j", + "metadata.uid": "d7223b15-1108-459c-b875-f23cbc14d3d3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "mfa", + "metadata.name": "privacyidea-backup-29867250-n8hcj", + "metadata.uid": "1613b1fe-4e41-40be-b73b-d8e403a471d6", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "mfa", + "metadata.name": "privacyidea-backup-29868690-w5lhc", + "metadata.uid": "da29cddd-e99f-40e3-b48d-c7cf534d3f07", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "32Mi" + }, + "requests": { + "cpu": "10m", + "memory": "16Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "openbao", + "metadata.name": "openbao-0", + "metadata.uid": "a109c4af-2267-4d64-b4c8-05d9eb8b5f4c", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "openbao", + "metadata.name": "openbao-server-test", + "metadata.uid": "ee0d7675-e03c-40a5-9709-62c91109c6ea", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "openbao", + "metadata.name": "openbao-ui-gateway-dff968786-nb9xx", + "metadata.uid": "89944e9c-4f60-4602-baaf-1ab407135b37", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "playwright", + "metadata.name": "playwright-c5b9c8bd7-fbfqv", + "metadata.uid": "a22030a4-c12d-4e97-be8d-98a8d80808c2", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "ephemeral-storage": "1Gi", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "ephemeral-storage": "256Mi", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "policy-nexus", + "metadata.name": "policy-nexus-74f4b8776f-f8qrt", + "metadata.uid": "89aff180-d91d-40d7-8d1e-657a68f99223", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "rapp-qonto-egress", + "metadata.name": "qonto-egress-proxy-57c6478477-ngb5r", + "metadata.uid": "200f3173-0af3-4ebe-8498-93a940dbfc23", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "20m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "rapp-qonto", + "metadata.name": "rapp-qonto-audit-collector-f94bc5f46-whc2n", + "metadata.uid": "92ef9104-469c-4b28-a0cc-f781f53bb26e", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "256Mi" + }, + "requests": { + "cpu": "20m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "rein-aharness", + "metadata.name": "rein-aharness-54b4c74b8-hk2lw", + "metadata.uid": "57a97f17-4eb3-44f0-ac8c-87f438ec7c8d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "reuse", + "metadata.name": "reuse-surface-77c8c476f4-qs8mf", + "metadata.uid": "4693401c-c97f-422f-a7d3-af8d0411ef5d", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "reuse", + "metadata.name": "reuse-surface-landing-77c77ddf4c-7n7ns", + "metadata.uid": "9d826f16-e012-4b22-b1e5-3b99baa248fe", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "50m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sbom-nexus", + "metadata.name": "sbom-nexus-579f7b6b7-cbnhd", + "metadata.uid": "f1b5f091-0722-406e-9b6c-282088ca49a3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "authelia-7f57c4c4fc-mk5hb", + "metadata.uid": "7678e756-0af9-4eb9-bc25-c8b09ca490fc", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "authelia-backup-29865795-f4wpl", + "metadata.uid": "6f3d6333-b7ad-4285-a766-b15b81b8159a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "authelia-backup-29867235-fjn5h", + "metadata.uid": "477da2da-3132-47bf-82da-40885e09ef5a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "authelia-backup-29868675-6dg8p", + "metadata.uid": "18b6b8de-25a4-4d97-ba99-fc592189aa27", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "identity-provisioner-76465449d5-nd5q9", + "metadata.uid": "f7461d8a-f1ca-417b-998a-168bec5ad97a", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "keycape-5fc5dd9b7f-zv5xm", + "metadata.uid": "bf0d4674-cbe4-4e44-b105-b799eb4c124e", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "keycape-factor-renewer-29869610-6r98l", + "metadata.uid": "e6743da9-06c2-41dc-ad0d-b19fdaa30f58", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "keycape-factor-renewer-29869620-qghnm", + "metadata.uid": "36cee595-d7a7-4db0-828d-e640f39fe008", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "lldap-backup-29865780-vzlzf", + "metadata.uid": "6431e209-18c5-46c5-9bdc-2dd4e7290880", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "lldap-backup-29867220-z9rxb", + "metadata.uid": "4af3cda7-fe25-42ee-88f4-a728c01e03e8", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "lldap-backup-29868660-fl86v", + "metadata.uid": "dfd9eb7a-4b59-4d6f-9579-5f42f291398b", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "lldap-f6df76764-jjp97", + "metadata.uid": "b05329a6-8b9d-45d6-a573-c03c04e667be", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "200m", + "memory": "128Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "sso", + "metadata.name": "nk-wp21-auth-test", + "metadata.uid": "f1a9703e-1082-48a5-8929-9f10b1cd82c3", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "state-hub", + "metadata.name": "state-hub-5d977977f9-bd2bs", + "metadata.uid": "160a2d7c-dba2-4a5c-983d-442f78cd1151", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "2Gi" + }, + "requests": { + "cpu": "250m", + "memory": "512Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "state-hub", + "metadata.name": "state-hub-mcp-6c4757bb75-jx7f9", + "metadata.uid": "36e68593-2ce3-474d-aacb-eba5bd04b84b", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "512Mi" + }, + "requests": { + "cpu": "10m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "state-hub", + "metadata.name": "state-hub-memo-dispatch-5758dd4c-pk87d", + "metadata.uid": "9759fc3e-0d88-42d3-b8ab-c17f9a82ada6", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "96Mi" + }, + "requests": { + "cpu": "5m", + "memory": "24Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "96Mi" + }, + "requests": { + "cpu": "5m", + "memory": "24Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "target-revenue", + "metadata.name": "target-revenue-7c9c854fb7-bkzr2", + "metadata.uid": "2e156979-e771-435d-b2a0-76a7165cee76", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "target-revenue", + "metadata.name": "target-revenue-pg-1", + "metadata.uid": "a2af72af-bbff-45fe-b369-2849dc858fc6", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": {}, + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "alertmanager-telemetry-alertmanager-0", + "metadata.uid": "938501d3-c07b-4bbf-bfb5-5fde9063ecb0", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"250m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"25m\",\"memory\":\"64Mi\"}} {}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "prometheus-telemetry-prometheus-0", + "metadata.uid": "595f943d-4331-4d25-9d70-0b5420e95d52", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"1\",\"memory\":\"1536Mi\"},\"requests\":{\"cpu\":\"100m\",\"memory\":\"512Mi\"}} {}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "telemetry-grafana-6f769b96d7-5tksr", + "metadata.uid": "ad7a57a0-4c43-42ca-a606-9f8d3dbc3f63", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": "{\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"limits\":{\"cpu\":\"100m\",\"memory\":\"128Mi\"},\"requests\":{\"cpu\":\"10m\",\"memory\":\"32Mi\"}} {\"limits\":{\"cpu\":\"500m\",\"memory\":\"384Mi\"},\"requests\":{\"cpu\":\"50m\",\"memory\":\"128Mi\"}}", + "spec.initContainers[*].resources": {}, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "telemetry-kube-state-metrics-58f6f4c74-plmtg", + "metadata.uid": "aacc8285-d9cb-4cb4-aaa2-d148af97a629", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "250m", + "memory": "128Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "telemetry-operator-74754bcf9c-rzk2r", + "metadata.uid": "ba5c8e4c-44a2-464a-aef3-df88fb3794a2", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "telemetry-smtp-proof-20260928-egress-bwv9n", + "metadata.uid": "6700121b-01e6-45dc-ab6f-33ecce7681a0", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "telemetry", + "metadata.name": "telemetry-smtp-proof-20260928-ltd7q", + "metadata.uid": "8d352e00-3707-4848-b754-6960b249f748", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Failed", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "100m", + "memory": "64Mi" + }, + "requests": { + "cpu": "10m", + "memory": "32Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "tenant-engine", + "metadata.name": "tenant-engine-d75584d94-9mhhx", + "metadata.uid": "055627eb-7aaf-459d-931b-4c84decacd89", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "300m", + "memory": "192Mi" + }, + "requests": { + "cpu": "25m", + "memory": "48Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-6c894f6b76-bcvpf", + "metadata.uid": "ebe2bab8-67b2-4f8d-afea-74b0cdc9d829", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "50m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-backup-29865840-kffh5", + "metadata.uid": "218e5c62-0499-4e03-a9f8-ba3c68ec1ef1", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-backup-29867280-pk8pc", + "metadata.uid": "63f25f33-3ed6-447d-89b9-0cb2760e9a62", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-backup-29868720-6r95r", + "metadata.uid": "53589325-db58-4c3c-bcca-9738bc663e78", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "500m", + "memory": "256Mi" + }, + "requests": { + "cpu": "25m", + "memory": "64Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-pg-1", + "metadata.uid": "044a0a91-1464-4e64-913f-cec8e6350bb9", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "100m", + "memory": "256Mi" + } + }, + "spec.overhead": null + }, + { + "metadata.namespace": "user-engine", + "metadata.name": "user-engine-restore-drill-q5s5v", + "metadata.uid": "46c03264-eb6e-456e-9bda-17549a15eef5", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Succeeded", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "512Mi" + }, + "requests": { + "cpu": "50m", + "memory": "128Mi" + } + }, + "spec.initContainers[*].resources": null, + "spec.overhead": null + }, + { + "metadata.namespace": "vergabe-demo-company", + "metadata.name": "vergabe-teilnahme-5c98dfcbd6-7w9vn", + "metadata.uid": "3e680310-ee47-466a-b36a-bfb1c18547f4", + "spec.nodeName": "239.62.205.92.host.secureserver.net", + "status.phase": "Running", + "spec.resources": null, + "spec.initContainers[*].restartPolicy": null, + "spec.containers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "60m", + "memory": "256Mi" + } + }, + "spec.initContainers[*].resources": { + "limits": { + "cpu": "1", + "memory": "1Gi" + }, + "requests": { + "cpu": "60m", + "memory": "256Mi" + } + }, + "spec.overhead": null + } + ] + }, + "transport": { + "exit_code": 0, + "stderr_present": false + }, + "supplement_sha256": "6de3b981e46c3504362038236777da2d44d8126f444490093a66e5d5a4827738" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/supplement.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/supplement.py new file mode 100644 index 00000000..f7abf06d --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/supplement.py @@ -0,0 +1,26 @@ +"""Coordinator-executed public scheduling fields only, no full Pod/env/config reads.""" +import hashlib,json,subprocess +from pathlib import Path +P=Path(__file__).parent +source=(P/'preflight.py').read_text().split("if __name__=='__main__':")[0] +assert hashlib.sha256((P/'preflight.py').read_bytes()).hexdigest()=='1011e5872ebee718e969b7012b17c0737e10eaaed804e0c4ae254024d8ad5248' +source+=''' +try: + nodes=query('nodes',['metadata.name','metadata.uid','status.addresses','spec.unschedulable','spec.taints','status.allocatable','status.nodeInfo.kubeletVersion']) + cluster=query('namespace',['metadata.name','metadata.uid'],name='kube-system') + rows=nodes.get('rows',[]);clusters=cluster.get('rows',[]) + valid=nodes.get('ok') and cluster.get('ok') and len(clusters)==1 and clusters[0].get('metadata.uid')=='a553c742-0115-43d4-99a4-a5ca56fe0786' and any(a.get('address')=='92.205.62.239' and a.get('type') in {'InternalIP','ExternalIP'} for row in rows for a in (row.get('status.addresses') if type(row.get('status.addresses')) is list else []) if type(a) is dict) + result={'observed_at':datetime.datetime.now(datetime.timezone.utc).isoformat(),'nodes':nodes,'cluster':cluster,'held_fence':False,'persistent_mutations':False} + if not valid:result={'refused':'target-identity','persistent_mutations':False} + else:result['pods']=query('pods',['metadata.namespace','metadata.name','metadata.uid','spec.nodeName','status.phase','spec.resources','spec.initContainers[*].restartPolicy','spec.containers[*].resources','spec.initContainers[*].resources','spec.overhead'],allns=True) +except Exception:result={'refused':'sanitized-supplement-failure'} +print(json.dumps(result)) +''' +try: + r=subprocess.run(['ssh','-o','BatchMode=yes','-o','ConnectTimeout=12','railiance01','python3','-'],input=source,capture_output=True,text=True,timeout=140) + try:result=json.loads(r.stdout) if r.returncode==0 else {'refused':'sanitized-ssh-failure'} + except ValueError:result={'refused':'sanitized-output-shape'} + result['transport']={'exit_code':r.returncode,'stderr_present':bool(r.stderr)} +except (OSError,subprocess.TimeoutExpired):result={'refused':'sanitized-supplement-unconfirmed'} +result['supplement_sha256']=hashlib.sha256(Path(__file__).read_bytes()).hexdigest() +(P/'scheduling-supplement.json').write_text(json.dumps(result,indent=2)+'\n');print(json.dumps({'receipt':str(P/'scheduling-supplement.json'),'refused':result.get('refused'),'node_ok':result.get('nodes',{}).get('ok'),'pod_ok':result.get('pods',{}).get('ok')})) diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_preflight.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_preflight.py new file mode 100644 index 00000000..94816e83 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_preflight.py @@ -0,0 +1,64 @@ +import importlib.util,json,unittest +from pathlib import Path +P=Path(__file__).parent +spec=importlib.util.spec_from_file_location('preflight',P/'preflight.py');m=importlib.util.module_from_spec(spec);spec.loader.exec_module(m) +payload=json.loads((P/'payload.json').read_text()) +class Checks(unittest.TestCase): + def setUp(self):self.original=m.invoke + def tearDown(self):m.invoke=self.original + def test_explicit_fields_and_shape(self): + calls=[] + def fake(argv,stdin=None):calls.append(argv);return 0,'alpha\x1e["beta"]\n',False + m.invoke=fake + result=m.query('pods',['metadata.name','spec.containers[*].image'],namespace='flex-auth') + self.assertEqual(result['rows'],[{'metadata.name':'alpha','spec.containers[*].image':['beta']}]) + self.assertIn('-o',calls[0]);self.assertTrue(calls[0][-1].startswith('jsonpath=')) + def test_error_suppression(self): + m.invoke=lambda *a:(1,'SENTINEL_SECRET',True) + self.assertNotIn('SENTINEL_SECRET',json.dumps(m.query('pods',['metadata.name']))) + def test_fail_closed_identity(self): + m.invoke=lambda *a:(1,'SENTINEL_SECRET',True) + result=m.run(payload) + self.assertEqual(result['refused'],'target-identity');self.assertNotIn('SENTINEL_SECRET',json.dumps(result)) + def test_exact_address_and_cluster_shape(self): + original_query=m.query + for addresses,cluster in [([{'type':'Hostname','address':'92.205.62.239'}],[{'metadata.uid':'a553c742-0115-43d4-99a4-a5ca56fe0786'}]),([{'type':'InternalIP','address':'192.205.62.239'}],[{'metadata.uid':'a553c742-0115-43d4-99a4-a5ca56fe0786'}]),([{'type':'InternalIP','address':'92.205.62.239'}],[])]: + calls=[] + def query(resource,fields,**kw): + calls.append(resource) + return {'ok':True,'rows':[{'status.addresses':addresses}]} if resource=='nodes' else {'ok':True,'rows':cluster} + m.query=query + try: + result=m.run(payload);self.assertEqual(result['refused'],'target-identity');self.assertEqual(calls,['nodes','namespace']) + finally:m.query=original_query + def test_exact_projection(self): + deploy=next(x for x in payload['resources'] if x['kind']=='Deployment') + self.assertEqual(m.deployment_projection(deploy),payload['expected_projection']) + def test_mock_admission_no_secret_error_leak(self): + original_query=m.query + def query(resource,fields,**kw): + if resource=='nodes':return {'ok':True,'rows':[{'status.addresses':[{'type':'InternalIP','address':'92.205.62.239'}]}]} + if resource=='namespace':return {'ok':True,'rows':[{'metadata.uid':'a553c742-0115-43d4-99a4-a5ca56fe0786'}]} + return {'ok':True,'rows':[]} + m.query=query + calls=[] + def fake(argv,stdin=None): + calls.append(argv) + if argv[0]=='helm':return 0,'[]',False + if '--dry-run=server' in argv: + obj=json.loads(stdin) + if obj['kind']=='Deployment': + values=list(m.deployment_projection(obj).values())+[obj['spec']['replicas']] + return 0,'\x1e'.join(json.dumps(v) for v in values),False + return 0,obj['kind']+'/'+obj['metadata']['name'],False + return 1,'SENTINEL_SECRET',True + m.invoke=fake + try: + result=m.run(payload) + self.assertTrue(all(x['admitted'] for x in result['dry_runs'])) + deploy=next(x for x in result['dry_runs'] if x['kind']=='Deployment') + self.assertTrue(deploy['projection_matches']);self.assertEqual(deploy['replicas'],0) + self.assertFalse(result['held_fence']);self.assertNotIn('SENTINEL_SECRET',json.dumps(result)) + self.assertTrue(all('--dry-run=server' in c for c in calls if c[0]=='kubectl' and c[1]=='apply')) + finally:m.query=original_query +if __name__=='__main__':unittest.main() diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_resources.py b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_resources.py new file mode 100644 index 00000000..6b0ac0e5 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/test_resources.py @@ -0,0 +1,20 @@ +import unittest +from decimal import Decimal +from analyze_resources import objects,quantity,analyze +class Checks(unittest.TestCase): + def test_adjacent(self):self.assertEqual(objects('{} {"requests":{"cpu":"10m"}}'),[{}, {'requests':{'cpu':'10m'}}]) + def test_bad_stream(self): + for text in ['{} secret','{} []','null']: + with self.assertRaises(ValueError):objects(text) + def test_units(self): + self.assertEqual(quantity('1','cpu'),1000);self.assertEqual(quantity('25m','cpu'),25);self.assertEqual(quantity('32Mi','memory'),33554432) + def test_scheduler(self): + def row(phase='Running'): + return {'status.phase':phase,'spec.nodeName':'node','spec.containers[*].resources':'{"requests":{"cpu":"10m","memory":"1Mi"}} {"requests":{"cpu":"20m"}}','spec.initContainers[*].resources':{'requests':{'cpu':'100m'}},'spec.overhead':{'cpu':'2m'},'spec.initContainers[*].restartPolicy':None,'spec.resources':None} + supplement={'nodes':{'rows':[{'metadata.name':'node','status.addresses':[{'address':'92.205.62.239'}],'status.allocatable':{'cpu':'1','memory':'1Gi'}}]},'pods':{'rows':[row(),row('Succeeded')]}} + result=analyze({},supplement);self.assertEqual(Decimal(result['requested_cpu_m']),102);self.assertEqual(result['nonterminal_bound_pods'],1) + def test_restartable_conservative(self): + r={'status.phase':'Running','spec.nodeName':'n','spec.containers[*].resources':{'requests':{'cpu':'20m'}},'spec.initContainers[*].resources':{'requests':{'cpu':'100m'}},'spec.overhead':None,'spec.initContainers[*].restartPolicy':'Always','spec.resources':None} + s={'nodes':{'rows':[{'metadata.name':'n','status.addresses':[{'address':'92.205.62.239'}],'status.allocatable':{'cpu':'1','memory':'1Gi'}}]},'pods':{'rows':[r]}} + self.assertEqual(Decimal(analyze({},s)['requested_cpu_m']),120) +if __name__=='__main__':unittest.main() diff --git a/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/verification.json b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/verification.json new file mode 100644 index 00000000..cc2f935c --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/native-preflight-r1/verification.json @@ -0,0 +1,20 @@ +{ + "files": { + "preflight.py": "1011e5872ebee718e969b7012b17c0737e10eaaed804e0c4ae254024d8ad5248", + "payload.json": "c78879355d9f451d9dbf2c36cd74e35c996cc24d1e3d79c2a9dc6238baa5dde8", + "run.py": "9923bc6ecdc0951d11debea727dedc9ff30b2b9abe152db9aa1020b6a6ef0114", + "test_preflight.py": "cdf21c8af88e0e7d22dfb717d41c59726bdab8e157dcace369f71a5af5ed810f" + }, + "frozen_resources_equal": true, + "frozen_projection_equal": true, + "platform_module_sha256": "4fb9ce6608ad04c4f5dc98a95796dc88a08a2453dc15c0d40c5c688fc02f573f", + "platform_projection_ast_equal": true, + "focused_tests_passed": 6, + "local_kubectl_format_check": { + "status": "unavailable-offline", + "kubeconfig": "/dev/null", + "reason": "client dry-run still attempted discovery on localhost and connection refused; no credential files read", + "raw_stderr_suppressed": true, + "followup": "Coordinator validates JSONPath using identity-only existing metadata before full wrapper. Synthetic string separator test alone is not actual client proof." + } +} diff --git a/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/actual-public-supplement.json b/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/actual-public-supplement.json new file mode 100644 index 00000000..4bc8e099 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/actual-public-supplement.json @@ -0,0 +1,328 @@ +{ + "applications": { + "eso-token-renewer": { + "exists": true, + "ok": true, + "selected": { + "automated_present": false, + "metadata": { + "name": "eso-token-renewer", + "namespace": "argocd", + "owners": [], + "resource_version": "76246569", + "uid": "b10d1e31-08da-4364-b537-4e166eeeb25e" + }, + "operation_phase": "Succeeded", + "operation_present": false, + "resources": [ + { + "kind": "ConfigMap", + "name": "eso-token-renewer-worker-5c86dt7fm7", + "namespace": "external-secrets" + }, + { + "kind": "ServiceAccount", + "name": "eso-token-renewer", + "namespace": "external-secrets" + }, + { + "kind": "CronJob", + "name": "eso-token-renewer", + "namespace": "external-secrets" + } + ], + "source": { + "chart": null, + "path": "argocd/platform-addons/eso-token-renewer", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "b2ebe108495c4d06ebb6ca33893ea4a2a23c9725" + }, + "sources": [] + }, + "stderr_present": false + }, + "informed-decision": { + "exists": true, + "ok": true, + "selected": { + "automated_present": false, + "metadata": { + "name": "informed-decision", + "namespace": "argocd", + "owners": [], + "resource_version": "76247431", + "uid": "499868f2-eabc-4df4-ae31-b89ce58d750d" + }, + "operation_phase": "Succeeded", + "operation_present": false, + "resources": [ + { + "kind": "ConfigMap", + "name": "informed-decision-runtime-6c221878d051", + "namespace": "informed-decision" + }, + { + "kind": "ConfigMap", + "name": "informed-decision-runtime-c81577741a09", + "namespace": "informed-decision" + }, + { + "kind": "ConfigMap", + "name": "informed-decision-workload-registry", + "namespace": "informed-decision" + }, + { + "kind": "PersistentVolumeClaim", + "name": "informed-decision-data", + "namespace": "informed-decision" + }, + { + "kind": "Service", + "name": "informed-decision", + "namespace": "informed-decision" + }, + { + "kind": "Service", + "name": "informed-decision-workload", + "namespace": "informed-decision" + }, + { + "kind": "ServiceAccount", + "name": "review", + "namespace": "informed-decision" + }, + { + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review-ingress", + "namespace": "approval-engine" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-lifecycle-ingress", + "namespace": "flex-auth" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review-ingress", + "namespace": "flex-auth" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review", + "namespace": "informed-decision" + }, + { + "kind": "ClusterRole", + "name": "informed-decision-tokenreview", + "namespace": null + }, + { + "kind": "ClusterRoleBinding", + "name": "informed-decision-tokenreview", + "namespace": null + } + ], + "source": { + "chart": null, + "path": "deploy/lifecycle", + "repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git", + "targetRevision": "312ab97e876e17341bf16f9e95397e14c2ac2720" + }, + "sources": [] + }, + "stderr_present": false + }, + "openbao-secretstore": { + "exists": true, + "ok": true, + "selected": { + "automated_present": false, + "metadata": { + "name": "openbao-secretstore", + "namespace": "argocd", + "owners": [], + "resource_version": "76247497", + "uid": "f2932505-e649-4b99-b505-4789ed21301f" + }, + "operation_phase": "Succeeded", + "operation_present": false, + "resources": [ + { + "kind": "ClusterSecretStore", + "name": "openbao", + "namespace": null + } + ], + "source": { + "chart": null, + "path": "argocd/platform-addons/openbao-secretstore", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "d2dbc19c254247652c49fda8721c80d53bca206a" + }, + "sources": [] + }, + "stderr_present": false + }, + "railiance-apps-root": { + "exists": true, + "ok": true, + "selected": { + "automated_present": false, + "metadata": { + "name": "railiance-apps-root", + "namespace": "argocd", + "owners": [], + "resource_version": "76247264", + "uid": "3078d1f5-07c2-44cc-bff7-c2ee2a2c9e7c" + }, + "operation_phase": "Succeeded", + "operation_present": false, + "resources": [ + { + "kind": "Application", + "name": "activity-core", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "bao-notice", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "eso-token-renewer", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "informed-decision", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "informed-decision-requester", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "openbao-secretstore", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "secret-annotation-guard", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "state-hub-memo-dispatch", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "target-revenue", + "namespace": "argocd" + } + ], + "source": { + "chart": null, + "path": "argocd/railiance01/applications", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "main" + }, + "sources": [] + }, + "stderr_present": false + } + }, + "held_fence": false, + "objects": { + "deployment/flex-auth-secrets-engine": { + "exists": true, + "ok": true, + "selected": { + "conditions": [ + { + "reason": "NewReplicaSetAvailable", + "status": "True", + "type": "Progressing" + }, + { + "reason": "MinimumReplicasAvailable", + "status": "True", + "type": "Available" + } + ], + "field_managers": [ + { + "manager": "helm", + "operation": "Update" + }, + { + "manager": "k3s", + "operation": "Update" + } + ], + "metadata": { + "name": "flex-auth-secrets-engine", + "namespace": "flex-auth", + "owners": [], + "resource_version": "75291996", + "uid": "f83a5f5c-7dd7-4aac-bc02-d447e423e6ae" + } + }, + "stderr_present": false + }, + "externalsecret.external-secrets.io/flex-auth-secrets-engine-envelope-signing": { + "exists": false, + "ok": true + }, + "persistentvolumeclaim/flex-auth-secrets-engine-outbox": { + "exists": false, + "ok": true + }, + "secretstore.external-secrets.io/openbao-flex-auth-envelope-signing": { + "exists": false, + "ok": true + }, + "serviceaccount/flex-auth-envelope-signing-eso": { + "exists": false, + "ok": true + }, + "serviceaccount/flex-auth-secrets-engine": { + "exists": true, + "ok": true, + "selected": { + "conditions": [], + "field_managers": [ + { + "manager": "helm", + "operation": "Update" + } + ], + "metadata": { + "name": "flex-auth-secrets-engine", + "namespace": "flex-auth", + "owners": [], + "resource_version": "57721771", + "uid": "4fd62828-c7b6-47ce-ac44-11b9fab851c4" + } + }, + "stderr_present": false + } + }, + "observed_at": "2026-10-16T19:12:36.858755+00:00", + "persistent_mutations": false, + "schema": "platform-native-plan-public-supplement.v1", + "transport": { + "exit_code": 0, + "stderr_present": false + }, + "collector_sha256": "sha256:151f54e7815d97f0e28437f8db17f20c1eb436dce56ec332d36b88e0abfbc91d", + "coordinator_completed_at": "2026-10-16T19:12:36.585389+00:00" +} diff --git a/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/owner-review.json b/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/owner-review.json new file mode 100644 index 00000000..efd3b431 --- /dev/null +++ b/docs/changes/netkingdom-target-2026-10-16/platform-native-plan-review-next/owner-review.json @@ -0,0 +1,302 @@ +{ + "schema": "railiance-platform.bounded-native-plan-review.v1", + "reviewer": "railiance-platform-owner (agent railiance-platform, codex)", + "work_item": "RPF-WP-0035-T12", + "decision": "approved", + "scope": "Exact P4/R2 Platform custody/read-lane and existing Argo Application manual-sync/freeze execution proposal, contingent on mandatory observed execution gates. Owner plan review only; not founder approval, native execution, CCR approval recording or completed native-admission disposition.", + "intent_basis": "INTENT Secure Custody, Stable Interfaces and Operable and Observable; Staff PEP-shaped attended founder-gated effects. SCOPE retains OpenBao custody/policy/delivery acceptance, not workload/Helm, cluster runtime/storage, identity or authorization ownership.", + "exact_revisions": { + "platform_revision": "84c529f239c81e6d3ca337015700b03e3a862f53", + "packet_p4_manifest_sha256": "9eec861838a8e9138f2c821cff3014998fbe74bb01447642bf50d44e8b3b7cb3", + "rollout_r2_manifest_sha256": "5be7a7f438624dcb35b7dbc96e7c9e5a8e2d5d1b1966cb4338aa5aecbe3a8b59", + "chart_revision": "dc042022f7c30671cf0a7605cf43ef6d96d04242", + "image_revision": "84c78e072c8f3daf2bc3b90f8efc8fbeb16c3cf0", + "image_digest": "sha256:09a83b273740133518cc7e7915fb211381e06545d347d2dd1974042525ac981f", + "deployment_projection_sha256": "8ce375f065552c551538f3acc7300c427407057eeff1d0b43755bfdf8a46169c", + "ccr_proposed_sha256": "44bbbf4aff84c3b085afdb14708106fd9a12ac03a0c47774913931a87fb94ada" + }, + "evidence": { + "live_preflight_sha256": "7a45f821e57b6ea9a4603db52a603ab230016da2d4145d1b772baa7f4a11840b", + "observed_at": "2026-10-16T18:53:06.325922+00:00", + "all_seven_server_dry_runs_accepted": true, + "projection_source_matches_server_admitted_stopped_render": true, + "held_fence": false, + "actual_signer_stopped": false, + "application_supplement_sha256": "f02a9b595d9246a358d19b37bdad8fde158b7f0c9657a6ff088874732511a32c", + "application_supplement_observed_at": "2026-10-16T19:12:36.858755+00:00", + "application_collector_sha256": "sha256:151f54e7815d97f0e28437f8db17f20c1eb436dce56ec332d36b88e0abfbc91d" + }, + "platform_read_lane": { + "ccr": "CCR-2026-0050", + "policy": "workload-kv-read-flex-auth-envelope-signing", + "role": "external-secrets-flex-auth-envelope-signing", + "sa": "flex-auth/flex-auth-envelope-signing-eso", + "audience": "openbao", + "ttl_seconds": 900, + "max_ttl_seconds": 900, + "explicit_max_ttl_seconds": 900, + "no_default_policy": true, + "permissions": "Exact platform/data/workloads/flex-auth/envelope-signing read plus lookup-self read/revoke-self update; no metadata/list/sibling/write/delete grant. KV document has all three fields; ESO projects only ED25519_PRIVATE_KEY to seed. No field-level authorization claim.", + "delivery": "Namespaced SecretStore flex-auth/openbao-flex-auth-envelope-signing and ExternalSecret flex-auth/flex-auth-secrets-engine-envelope-signing; Owner target creation, Retain deletion, 5m refresh; dedicated SA automount false. This proposed namespaced lane does not mutate existing ClusterSecretStore/openbao or legacy ESO token renewer." + }, + "observed_application_scope": [ + { + "name": "railiance-apps-root", + "uid": "3078d1f5-07c2-44cc-bff7-c2ee2a2c9e7c", + "automated": false, + "last_phase": "Succeeded", + "relevance": "Parent of existing nine Applications; hold manual sync during ceremony to prevent child source/policy changes.", + "source": { + "chart": null, + "path": "argocd/railiance01/applications", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "main" + }, + "queued_operation_present": false, + "resource_tuples": [ + { + "kind": "Application", + "name": "activity-core", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "bao-notice", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "eso-token-renewer", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "informed-decision", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "informed-decision-requester", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "openbao-secretstore", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "secret-annotation-guard", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "state-hub-memo-dispatch", + "namespace": "argocd" + }, + { + "kind": "Application", + "name": "target-revenue", + "namespace": "argocd" + } + ], + "resource_version": "76247264" + }, + { + "name": "informed-decision", + "uid": "499868f2-eabc-4df4-ae31-b89ce58d750d", + "automated": false, + "last_phase": "Succeeded", + "relevance": "Resource inventory includes NetworkPolicies informed-decision-lifecycle-ingress and informed-decision-review-ingress in flex-auth. Hold manual sync affecting those policies; no signer Deployment/ESO resource ownership observed.", + "source": { + "chart": null, + "path": "deploy/lifecycle", + "repoURL": "https://forgejo.coulomb.social/coulomb/informed-decision.git", + "targetRevision": "312ab97e876e17341bf16f9e95397e14c2ac2720" + }, + "queued_operation_present": false, + "resource_tuples": [ + { + "kind": "ConfigMap", + "name": "informed-decision-runtime-6c221878d051", + "namespace": "informed-decision" + }, + { + "kind": "ConfigMap", + "name": "informed-decision-runtime-c81577741a09", + "namespace": "informed-decision" + }, + { + "kind": "ConfigMap", + "name": "informed-decision-workload-registry", + "namespace": "informed-decision" + }, + { + "kind": "PersistentVolumeClaim", + "name": "informed-decision-data", + "namespace": "informed-decision" + }, + { + "kind": "Service", + "name": "informed-decision", + "namespace": "informed-decision" + }, + { + "kind": "Service", + "name": "informed-decision-workload", + "namespace": "informed-decision" + }, + { + "kind": "ServiceAccount", + "name": "review", + "namespace": "informed-decision" + }, + { + "kind": "Deployment", + "name": "informed-decision", + "namespace": "informed-decision" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review-ingress", + "namespace": "approval-engine" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-lifecycle-ingress", + "namespace": "flex-auth" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review-ingress", + "namespace": "flex-auth" + }, + { + "kind": "NetworkPolicy", + "name": "informed-decision-review", + "namespace": "informed-decision" + }, + { + "kind": "ClusterRole", + "name": "informed-decision-tokenreview", + "namespace": null + }, + { + "kind": "ClusterRoleBinding", + "name": "informed-decision-tokenreview", + "namespace": null + } + ], + "resource_version": "76247431" + }, + { + "name": "openbao-secretstore", + "uid": "f2932505-e649-4b99-b505-4789ed21301f", + "automated": false, + "last_phase": "Succeeded", + "relevance": "Owns ClusterSecretStore/openbao only; existing shared delivery controller-adjacent app. No proposed signer namespaced lane ownership observed; preserve existing state and no related manual sync during ceremony.", + "source": { + "chart": null, + "path": "argocd/platform-addons/openbao-secretstore", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "d2dbc19c254247652c49fda8721c80d53bca206a" + }, + "queued_operation_present": false, + "resource_tuples": [ + { + "kind": "ClusterSecretStore", + "name": "openbao", + "namespace": null + } + ], + "resource_version": "76247497" + }, + { + "name": "eso-token-renewer", + "uid": "b10d1e31-08da-4364-b537-4e166eeeb25e", + "automated": false, + "last_phase": "Succeeded", + "relevance": "Owns legacy renewer ConfigMap/SA/CronJob in external-secrets, not new dedicated Kubernetes-auth role. Preserve unchanged; no stop/disable of unrelated shared renewer proposed.", + "source": { + "chart": null, + "path": "argocd/platform-addons/eso-token-renewer", + "repoURL": "https://forgejo.coulomb.social/coulomb/railiance-platform.git", + "targetRevision": "b2ebe108495c4d06ebb6ca33893ea4a2a23c9725" + }, + "queued_operation_present": false, + "resource_tuples": [ + { + "kind": "ConfigMap", + "name": "eso-token-renewer-worker-5c86dt7fm7", + "namespace": "external-secrets" + }, + { + "kind": "ServiceAccount", + "name": "eso-token-renewer", + "namespace": "external-secrets" + }, + { + "kind": "CronJob", + "name": "eso-token-renewer", + "namespace": "external-secrets" + } + ], + "resource_version": "76246569" + } + ], + "observed_signer_controller": "No Application in the current complete inventory owns flex-auth-secrets-engine Deployment, signer SecretStore/ExternalSecret or outbox PVC. Helm release revision4 and native Deployment/ReplicaSet controller are actual signer write path; Access owns exact manual/CI/Helm writer freeze. No new signer Argo adoption or controller configuration change is proposed.", + "mandatory_execution_gates": [ + "Initial founder rollout/CCR decision may authorize only its explicitly enumerated read-lane apply and Access stopped-candidate preparation effects under reviewed owner scopes; it does not require those effects to exist before authorization. After that authorization and execution, assemble separately reviewed final one-use custody scope from approved CCR bytes/confirmed native bindings, authenticated founder entity, future absolute UTC expiry, held exclusive-window receipt, stopped native projection/fence and independent consumer baseline. All five dispositions bind this exact completed scope before custody. Actual founder/expiry/CCR/window remain null in frozen P4 preparation; this review fills none.", + "Before window refresh exact Application UID/source revision/resource tuples/current operation and manual sync settings for the identified apps and root. Freeze explicit manual sync/CI/Helm actors by founder executor/abort-owner agreement; require no pending/running Argo operation affecting relevant resources. Last Succeeded alone is not proof of no newly queued operation. Preserve before-state metadata; no speculative absence-of-all-possible-writers requirement. The19:12:36 supplement establishes all four selected Applications manual/no queued operation at that time, not a reserved future window.", + "Platform approves only source read-lane policy/role/delivery design here. Separate founder CCR decision and reviewed role/policy apply/readback are required; verify exact SA namespace/audience, native policy and all 900s/max/no-default attributes. Native positive/negative ESO login/path tests and safely reduced Ready/SecretSynced/version correspondence are separate evidence; no raw Secret/JWT outputs.", + "Access installs exact stopped candidate through reviewed Helm path and authenticates competing workload writers; actual observedGeneration, Deployment/owned ReplicaSets0, no owned/terminating/signer-SA/seed-mount pods and no HPA must hold. Exact native projection must equal8ce375f, independently of successful server dry-run. Secrets owns stopped/failclosed consumer; cluster owns refreshed headroom/storage/PV retention.", + "Founder runs only exact approved silent child/source/admission-file hash through attended Warden OIDC. Use private0700 receipt/admission custody,0600 files, trusted dependencies/runtime and explicit same-UID containment assessment. 5