6 Commits

Author	SHA1	Message	Date
emelinda	3162679524	security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent ... В контуре uralkal роли Vault (security-audit, security-audit-bootstrap) не заведены. Коллекторы и Job idp-actions-bootstrap монтируют Secret'ы namespace (security-audit-kafka, kafka-ca) projected volume'ом в /vault/secrets под теми же именами файлов — конфиг коллекторов (${file:...}, ca_file) не меняется. Из NetworkPolicy убран egress в Vault, из оверлея uralkal — dependsOn на HelmRelease vault.	2026-11-06 17:22:20 +03:00
emelinda	30f1d32fc5	Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration	2026-11-02 09:22:20 +03:00
emelinda	2aaa45bf3c	Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration	2026-11-02 02:24:00 +03:00
emelinda	2f5e37f598	**Add Zitadel events ingestion pipeline with AuthorizationPolicy and initial Job configuration for security-audit namespace**	2026-11-02 00:57:05 +03:00
emelinda	ae1a683ada	**Add HelmRelease access-collector for processing ingress-gateway access logs in security-audit namespace with Kafka and Vault integration**	2026-11-02 00:33:20 +03:00
emelinda	ad7050ca7d	Add audit collector HelmRelease for security-audit namespace to process and export kube-apiserver audit logs, including Kafka and Vault integration	2026-11-01 22:02:54 +03:00