emelinda d0bed7033a security-audit: enable mesh-access pipeline, audit-processor pinned by digest ... Config: pipelines security.k8s-audit (k8s_audit) + security.mesh-access (mesh_access); kafka.topic kept for rollback (pre-pipelines image ignores the pipelines key). Image pinned to digest sha256:56a23bec… (k8s-audit@05a186a, pipelines support) per repo policy п.38. Kafka ACL and MinIO policy need no changes (no ACLs; bucket user has s3:* on the whole bucket). Companion terraform change: ILM rule expire-mesh-access-90d.		2026-11-07 20:12:54 +03:00
..
idp-actions-bootstrap	security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent	2026-11-06 17:22:20 +03:00
authorizationpolicy-access-collector.yaml	Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration	2026-11-02 02:24:00 +03:00
helmrelease-access-collector.yaml	security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent	2026-11-06 17:22:20 +03:00
helmrelease-collector.yaml	security-audit: IsMap guards in transform/audit delete_key statements	2026-11-07 16:23:46 +03:00
kustomization.yaml	security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet)	2026-11-07 14:54:08 +03:00
namespace.yaml	**Add HelmRelease access-collector for processing ingress-gateway access logs in security-audit namespace with Kafka and Vault integration**	2026-11-02 00:33:20 +03:00
networkpolicy-access-collector.yaml	Add Vault audit logging integration for uralkal namespace with sidecars for file rotation, OTLP export, and Kafka integration	2026-11-02 02:24:00 +03:00
networkpolicy.yaml	security-audit: креды Kafka и PAT Zitadel — из статических Secret'ов вместо Vault Agent	2026-11-06 17:22:20 +03:00
processor-configmap.yaml	security-audit: enable mesh-access pipeline, audit-processor pinned by digest	2026-11-07 20:12:54 +03:00
processor-deployment.yaml	security-audit: enable mesh-access pipeline, audit-processor pinned by digest	2026-11-07 20:12:54 +03:00
processor-networkpolicy.yaml	security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet)	2026-11-07 14:54:08 +03:00
processor-serviceaccount.yaml	security-audit: add audit-processor — ship apiserver audit from Kafka to MinIO (Parquet)	2026-11-07 14:54:08 +03:00