atlas-iac/docs/cluster-audit-20261002/render-validation.json

817 lines
16 KiB
JSON
Raw Normal View History

[
{
"name": "ai-llm",
"path": "./services/ai-llm",
"kinds": {
"Namespace": 1,
"ConfigMap": 1,
"Service": 3,
"PersistentVolumeClaim": 4,
"Deployment": 3,
"Job": 3,
"NetworkPolicy": 3
},
"count": 18
},
{
"name": "bstein-dev-home",
"path": "./services/bstein-dev-home",
"kinds": {
"Namespace": 1,
"ServiceAccount": 2,
"Role": 4,
"ClusterRole": 2,
"RoleBinding": 4,
"ClusterRoleBinding": 2,
"ConfigMap": 3,
"Service": 3,
"Deployment": 4,
"CronJob": 1,
"Job": 1,
"ImagePolicy": 2,
"ImageRepository": 2,
"Ingress": 1,
"SecretProviderClass": 1
},
"count": 33
},
{
"name": "bstein-dev-home-migrations",
"path": "./services/bstein-dev-home/migration-jobs",
"kinds": {
"Job": 1
},
"count": 1
},
{
"name": "cassandra",
"path": "./services/cassandra",
"kinds": {
"Namespace": 1,
"ResourceQuota": 3,
"ServiceAccount": 10,
"Role": 1,
"RoleBinding": 1,
"ConfigMap": 1,
"Service": 3,
"LimitRange": 1,
"PersistentVolumeClaim": 2,
"Deployment": 3,
"StatefulSet": 1,
"CronJob": 1,
"Job": 4,
"ImagePolicy": 4,
"ImageRepository": 4,
"Ingress": 1,
"SecretProviderClass": 3
},
"count": 44
},
{
"name": "cassandra-auth",
"path": "./services/cassandra-auth",
"kinds": {
"ConfigMap": 1,
"Job": 3
},
"count": 4
},
{
"name": "cert-manager",
"path": "./infrastructure/cert-manager",
"kinds": {
"Namespace": 1,
"HelmRelease": 1
},
"count": 2
},
{
"name": "comms",
"path": "./services/comms",
"kinds": {
"Namespace": 1,
"ServiceAccount": 6,
"Role": 2,
"ClusterRole": 4,
"RoleBinding": 2,
"ClusterRoleBinding": 4,
"ConfigMap": 11,
"Service": 8,
"Deployment": 9,
"CronJob": 4,
"Job": 10,
"Certificate": 1,
"HelmRelease": 2,
"Ingress": 7,
"SecretProviderClass": 1,
"Middleware": 2
},
"count": 74
},
{
"name": "core",
"path": "./infrastructure/core",
"kinds": {
"StorageClass": 5,
"ServiceAccount": 1,
"ClusterRole": 1,
"ClusterRoleBinding": 1,
"ConfigMap": 3,
"PriorityClass": 4,
"Deployment": 1,
"CronJob": 1,
"ValidatingAdmissionPolicy": 1,
"ValidatingAdmissionPolicyBinding": 1,
"DaemonSet": 4,
"ClusterIssuer": 2,
"RuntimeClass": 1
},
"count": 26
},
{
"name": "crypto",
"path": "./services/crypto",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1
},
"count": 2
},
{
"name": "descheduler",
"path": "./infrastructure/descheduler",
"kinds": {
"HelmRelease": 1
},
"count": 1
},
{
"name": "finance",
"path": "./services/finance",
"kinds": {
"Namespace": 1,
"ServiceAccount": 2,
"Role": 2,
"RoleBinding": 3,
"ConfigMap": 3,
"Service": 2,
"PersistentVolumeClaim": 2,
"Deployment": 2,
"CronJob": 2,
"Job": 1,
"Ingress": 2
},
"count": 22
},
{
"name": "flux-system",
"path": "./clusters/atlas/flux-system",
"kinds": {
"Namespace": 1,
"ResourceQuota": 1,
"CustomResourceDefinition": 14,
"ServiceAccount": 6,
"ClusterRole": 3,
"ClusterRoleBinding": 2,
"Service": 3,
"Deployment": 6,
"ImageUpdateAutomation": 6,
"Kustomization": 58,
"NetworkPolicy": 3,
"GitRepository": 1
},
"count": 104
},
{
"name": "game-stream",
"path": "./services/game-stream",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ConfigMap": 3,
"Service": 6,
"Deployment": 1,
"StatefulSet": 1,
"DaemonSet": 1,
"Certificate": 1,
"Ingress": 1
},
"count": 16
},
{
"name": "gitea",
"path": "./services/gitea",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ConfigMap": 1,
"Service": 2,
"PersistentVolumeClaim": 1,
"Deployment": 1,
"Job": 1,
"Ingress": 1
},
"count": 9
},
{
"name": "gitops-ui",
"path": "./services/gitops-ui",
"kinds": {
"ClusterRoleBinding": 1,
"Certificate": 1,
"HelmRelease": 1,
"NetworkPolicy": 1,
"GitRepository": 1
},
"count": 5
},
{
"name": "harbor",
"path": "./services/harbor",
"kinds": {
"Namespace": 1,
"ServiceAccount": 2,
"ConfigMap": 6,
"PersistentVolumeClaim": 2,
"Deployment": 1,
"Job": 6,
"Certificate": 1,
"HelmRelease": 1,
"ImagePolicy": 8,
"ImageRepository": 8,
"SecretProviderClass": 1
},
"count": 37
},
{
"name": "health",
"path": "./services/health",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Role": 1,
"RoleBinding": 2,
"ConfigMap": 2,
"Service": 1,
"PersistentVolumeClaim": 2,
"Deployment": 1,
"CronJob": 2,
"Ingress": 1
},
"count": 14
},
{
"name": "helm",
"path": "./infrastructure/sources/helm",
"kinds": {
"HelmRepository": 16
},
"count": 16
},
{
"name": "hermes",
"path": "./services/hermes",
"kinds": {
"Namespace": 1,
"ServiceAccount": 10,
"Role": 4,
"ClusterRole": 3,
"RoleBinding": 4,
"ClusterRoleBinding": 4,
"ConfigMap": 26,
"Service": 26,
"PersistentVolumeClaim": 18,
"Deployment": 23,
"StatefulSet": 2,
"DaemonSet": 1,
"Certificate": 1,
"Lease": 1,
"ImagePolicy": 5,
"ImageRepository": 5,
"Ingress": 5,
"NetworkPolicy": 33,
"SecretProviderClass": 1,
"Middleware": 6,
"ServersTransport": 2
},
"count": 181
},
{
"name": "hermes-chat",
"path": "./services/hermes-chat",
"kinds": {
"Namespace": 1,
"PersistentVolumeClaim": 1
},
"count": 2
},
{
"name": "hermes-observer-bindings",
"path": "./services/hermes-observer-bindings",
"kinds": {
"RoleBinding": 39
},
"count": 39
},
{
"name": "hermes-observer-rbac",
"path": "./services/hermes-observer-rbac",
"kinds": {
"ClusterRole": 2,
"ClusterRoleBinding": 1
},
"count": 3
},
{
"name": "hermes-scm-broker",
"path": "./services/hermes-scm-broker",
"kinds": {
"ConfigMap": 2,
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 1,
"NetworkPolicy": 1
},
"count": 6
},
{
"name": "hermes-scm-namespace",
"path": "./services/hermes-scm-namespace",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1
},
"count": 2
},
{
"name": "hermes-triage-demo",
"path": "./services/hermes-triage-demo",
"kinds": {
"Namespace": 1,
"Role": 2,
"RoleBinding": 2
},
"count": 5
},
{
"name": "jellyfin",
"path": "./services/jellyfin",
"kinds": {
"Namespace": 1,
"ConfigMap": 1,
"Service": 1,
"PersistentVolumeClaim": 4,
"Deployment": 1,
"Ingress": 1
},
"count": 9
},
{
"name": "jenkins",
"path": "./services/jenkins",
"kinds": {
"Namespace": 1,
"ServiceAccount": 3,
"Role": 1,
"ClusterRole": 1,
"RoleBinding": 1,
"ClusterRoleBinding": 1,
"ConfigMap": 4,
"Service": 1,
"PersistentVolumeClaim": 4,
"Deployment": 2,
"Ingress": 1,
"SecretProviderClass": 1
},
"count": 21
},
{
"name": "keycloak",
"path": "./services/keycloak",
"kinds": {
"Namespace": 1,
"ServiceAccount": 3,
"ConfigMap": 6,
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 2,
"Job": 24,
"Ingress": 1,
"SecretProviderClass": 1
},
"count": 40
},
{
"name": "logging",
"path": "./services/logging",
"kinds": {
"Namespace": 1,
"ServiceAccount": 4,
"ConfigMap": 8,
"Secret": 1,
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 2,
"CronJob": 2,
"DaemonSet": 3,
"Job": 3,
"HelmRelease": 5,
"Ingress": 1,
"SecretProviderClass": 1
},
"count": 33
},
{
"name": "longhorn",
"path": "./infrastructure/longhorn/core",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ConfigMap": 2,
"Deployment": 1,
"CronJob": 1,
"Job": 3,
"HelmRelease": 1,
"RecurringJob": 4,
"SecretProviderClass": 1
},
"count": 15
},
{
"name": "longhorn-adopt",
"path": "./infrastructure/longhorn/adopt",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ClusterRole": 1,
"ClusterRoleBinding": 1,
"ConfigMap": 1,
"Job": 1
},
"count": 6
},
{
"name": "longhorn-ui",
"path": "./infrastructure/longhorn/ui-ingress",
"kinds": {
"ServiceAccount": 1,
"Service": 1,
"Deployment": 1,
"Ingress": 1,
"Middleware": 3
},
"count": 7
},
{
"name": "mailu",
"path": "./services/mailu",
"kinds": {
"Namespace": 1,
"ServiceAccount": 3,
"Role": 2,
"RoleBinding": 2,
"ConfigMap": 4,
"Service": 1,
"Deployment": 2,
"CronJob": 1,
"DaemonSet": 1,
"Certificate": 1,
"HelmRelease": 1,
"SecretProviderClass": 1,
"IngressRoute": 1,
"ServersTransport": 1
},
"count": 22
},
{
"name": "maintenance",
"path": "./services/maintenance",
"kinds": {
"Namespace": 1,
"ServiceAccount": 11,
"Role": 1,
"ClusterRole": 6,
"RoleBinding": 1,
"ClusterRoleBinding": 6,
"ConfigMap": 9,
"Service": 5,
"PersistentVolumeClaim": 1,
"Deployment": 6,
"CronJob": 3,
"DaemonSet": 9,
"Job": 3,
"Certificate": 2,
"ImagePolicy": 6,
"ImageRepository": 4,
"Ingress": 2,
"NetworkPolicy": 2,
"SecretProviderClass": 1
},
"count": 79
},
{
"name": "metallb",
"path": "./infrastructure/metallb",
"kinds": {
"Namespace": 1,
"HelmRelease": 1,
"IPAddressPool": 2,
"L2Advertisement": 2
},
"count": 6
},
{
"name": "monerod",
"path": "./services/crypto/monerod",
"kinds": {
"ConfigMap": 2,
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 1,
"Ingress": 1
},
"count": 6
},
{
"name": "monitoring",
"path": "./services/monitoring",
"kinds": {
"Namespace": 1,
"ServiceAccount": 3,
"ClusterRole": 2,
"ClusterRoleBinding": 2,
"ConfigMap": 24,
"Service": 7,
"PersistentVolumeClaim": 1,
"Deployment": 4,
"CronJob": 2,
"DaemonSet": 3,
"Job": 6,
"HelmRelease": 5,
"SecretProviderClass": 1
},
"count": 61
},
{
"name": "nextcloud",
"path": "./services/nextcloud",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ConfigMap": 2,
"Service": 2,
"PersistentVolumeClaim": 4,
"Deployment": 2,
"CronJob": 2,
"Ingress": 2
},
"count": 16
},
{
"name": "nextcloud-mail-sync",
"path": "./services/nextcloud-mail-sync",
"kinds": {
"Role": 1,
"RoleBinding": 2,
"ConfigMap": 1,
"CronJob": 1
},
"count": 5
},
{
"name": "oauth2-proxy",
"path": "./services/oauth2-proxy",
"kinds": {
"Service": 1,
"Deployment": 1,
"Ingress": 1,
"Middleware": 2
},
"count": 5
},
{
"name": "openclaw",
"path": "./services/openclaw",
"kinds": {
"Namespace": 1,
"PersistentVolumeClaim": 1
},
"count": 2
},
{
"name": "openldap",
"path": "./services/openldap",
"kinds": {
"Service": 1,
"StatefulSet": 1
},
"count": 2
},
{
"name": "outline",
"path": "./services/outline",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Service": 2,
"PersistentVolumeClaim": 1,
"Deployment": 2,
"Ingress": 1
},
"count": 8
},
{
"name": "pegasus",
"path": "./services/pegasus",
"kinds": {
"ServiceAccount": 1,
"ConfigMap": 2,
"Service": 1,
"Deployment": 2,
"ImagePolicy": 1,
"ImageRepository": 1,
"Ingress": 1,
"SecretProviderClass": 1
},
"count": 10
},
{
"name": "planka",
"path": "./services/planka",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Service": 1,
"PersistentVolumeClaim": 2,
"Deployment": 1,
"Ingress": 1
},
"count": 7
},
{
"name": "postgres",
"path": "./infrastructure/postgres",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Service": 1,
"StatefulSet": 1,
"SecretProviderClass": 1
},
"count": 5
},
{
"name": "quality",
"path": "./services/quality",
"kinds": {
"Namespace": 1,
"ServiceAccount": 2,
"ConfigMap": 2,
"Service": 3,
"PersistentVolumeClaim": 1,
"Deployment": 3,
"CronJob": 1,
"Certificate": 1,
"Ingress": 1
},
"count": 15
},
{
"name": "resource-guardrails",
"path": "./infrastructure/resource-guardrails",
"kinds": {
"LimitRange": 29
},
"count": 29
},
{
"name": "sui-metrics",
"path": "./services/sui-metrics/overlays/atlas",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"ConfigMap": 1,
"Service": 1,
"Deployment": 1
},
"count": 5
},
{
"name": "traefik",
"path": "./infrastructure/traefik",
"kinds": {
"CustomResourceDefinition": 10,
"ServiceAccount": 1,
"ClusterRole": 1,
"ClusterRoleBinding": 1,
"Service": 3,
"Deployment": 1,
"PodDisruptionBudget": 1,
"IngressClass": 1
},
"count": 19
},
{
"name": "typhon",
"path": "./services/typhon",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Service": 1,
"Deployment": 2,
"NetworkPolicy": 1,
"SecretProviderClass": 1
},
"count": 7
},
{
"name": "vault",
"path": "./services/vault",
"kinds": {
"Namespace": 1,
"ServiceAccount": 4,
"ClusterRoleBinding": 1,
"ConfigMap": 6,
"Secret": 1,
"Service": 2,
"StatefulSet": 1,
"CronJob": 2,
"Job": 4,
"Certificate": 1,
"Ingress": 1,
"Middleware": 5,
"ServersTransport": 1
},
"count": 30
},
{
"name": "vault-csi",
"path": "./infrastructure/vault-csi",
"kinds": {
"ServiceAccount": 1,
"Role": 1,
"ClusterRole": 1,
"RoleBinding": 1,
"ClusterRoleBinding": 1,
"DaemonSet": 1,
"HelmRelease": 1
},
"count": 7
},
{
"name": "vault-hermes-jenkins-token-seed",
"path": "./services/vault-hermes-jenkins-token-seed",
"kinds": {
"ServiceAccount": 1,
"ConfigMap": 1,
"Job": 1
},
"count": 3
},
{
"name": "vault-injector",
"path": "./infrastructure/vault-injector",
"kinds": {
"HelmRelease": 1
},
"count": 1
},
{
"name": "vaultwarden",
"path": "./services/vaultwarden",
"kinds": {
"Namespace": 1,
"ServiceAccount": 1,
"Role": 1,
"RoleBinding": 1,
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 1,
"Ingress": 1
},
"count": 8
},
{
"name": "wallet-monero-temp",
"path": "./services/crypto/wallet-monero-temp",
"kinds": {
"Service": 1,
"PersistentVolumeClaim": 1,
"Deployment": 1
},
"count": 3
},
{
"name": "xmr-miner",
"path": "./services/crypto/xmr-miner",
"kinds": {
"ServiceAccount": 1,
"ConfigMap": 1,
"Service": 1,
"Deployment": 2,
"DaemonSet": 1,
"SecretProviderClass": 1
},
"count": 7
}
]