sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

security-audit: audit-processor af50e663, drop retention config section

Browse Source 
New image removes the bucket lifecycle check (retention is owned by terraform
minio-buckets lifecycle_rules), so the retention section is dropped from the
processor config map.
This commit is contained in:
emelinda 2026-11-07 17:24:47 +03:00
parent a60b171bea
commit a6a176d6c5
2 changed files with 1 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
infrastructure/security-audit/base/processor-configmap.yaml
View File

@ -45,12 +45,6 @@ data:
access_key_file: /vault/secrets/minio-access-key access_key_file: /vault/secrets/minio-access-key
secret_key_file: /vault/secrets/minio-secret-key secret_key_file: /vault/secrets/minio-secret-key
# Срок хранения обеспечивает ILM бакета; processor только проверяет правила при старте.
retention:
days: 90
prefixes: [events/, changes/]
check_on_start: true
http: http:
host: 0.0.0.0 host: 0.0.0.0
port: 8000 # /healthz, /readyz, /metrics port: 8000 # /healthz, /readyz, /metrics

2
infrastructure/security-audit/base/processor-deployment.yaml
View File

@ -27,7 +27,7 @@ spec:
containers: containers:
- name: audit-processor - name: audit-processor
# Образ FROM scratch, USER 65534; CONFIG_PATH=/etc/k8s-audit/config.yaml — в ENTRYPOINT образа. # Образ FROM scratch, USER 65534; CONFIG_PATH=/etc/k8s-audit/config.yaml — в ENTRYPOINT образа.
image: cr.yandex/crp3ccidau046kdj8g9q/k8s-audit-processor:394b6f9d image: cr.yandex/crp3ccidau046kdj8g9q/k8s-audit-processor:af50e663
ports: ports:
- {name: http, containerPort: 8000} - {name: http, containerPort: 8000}
readinessProbe: readinessProbe: