sarex/iac
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
0b8318f547
iac/infrastructure/security-audit/base
History
emelinda 0b8318f547 security-audit: drop flux-system read polling from apiserver audit pipeline 
filter/audit in audit-collector drops get/list/watch events from
system:serviceaccount:flux-system:* (helm/kustomize/source controllers polling
fluxcd resources every few seconds — the bulk of the topic volume). GitOps
mutations are kept: they are the actual trail of cluster changes.
2026-11-07 15:45:37 +03:00
..
idp-actions-bootstrap security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent 2026-11-06 17:22:20 +03:00
authorizationpolicy-access-collector.yaml Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration 2026-11-02 02:24:00 +03:00
helmrelease-access-collector.yaml security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent 2026-11-06 17:22:20 +03:00
helmrelease-collector.yaml security-audit: drop flux-system read polling from apiserver audit pipeline 2026-11-07 15:45:37 +03:00
kustomization.yaml security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) 2026-11-07 14:54:08 +03:00
namespace.yaml **Add HelmRelease access-collector for processing ingress-gateway access logs in security-audit namespace with Kafka and Vault integration** 2026-11-02 00:33:20 +03:00
networkpolicy-access-collector.yaml Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration 2026-11-02 02:24:00 +03:00
networkpolicy.yaml security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent 2026-11-06 17:22:20 +03:00
processor-configmap.yaml security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) 2026-11-07 14:54:08 +03:00
processor-deployment.yaml security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) 2026-11-07 14:54:08 +03:00
processor-networkpolicy.yaml security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) 2026-11-07 14:54:08 +03:00
processor-serviceaccount.yaml security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet) 2026-11-07 14:54:08 +03:00