mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 03:49:26 +00:00
32 lines
1.0 KiB
Cheetah
32 lines
1.0 KiB
Cheetah
|
# The reconciler's artifact receiver by name (ai-service-plane task 0). Actors reach nothing but through Agent
|
||
|
|
# Substrate's egress gateway, and the gateway allows HTTP by hostname only (never an IP address): the runner dials
|
||
|
|
# this Service's ClusterIP on port 80 with Host `ousast-receiver.ax-system.svc.cluster.local`; the gateway allows
|
||
|
|
# it on that Host and connects to the ClusterIP, which kube-proxy maps to the endpoint below, the host's receiver
|
||
|
|
# on ${OUSAST_ARTIFACT_PORT} at the kind gateway. Rendered by up.sh.
|
||
|
|
apiVersion: v1
|
||
|
|
kind: Service
|
||
|
|
metadata:
|
||
|
|
name: ousast-receiver
|
||
|
|
namespace: ax-system
|
||
|
|
spec:
|
||
|
|
ports:
|
||
|
|
- name: http
|
||
|
|
port: 80
|
||
|
|
targetPort: ${OUSAST_ARTIFACT_PORT}
|
||
|
|
protocol: TCP
|
||
|
|
---
|
||
|
|
apiVersion: discovery.k8s.io/v1
|
||
|
|
kind: EndpointSlice
|
||
|
|
metadata:
|
||
|
|
name: ousast-receiver-host
|
||
|
|
namespace: ax-system
|
||
|
|
labels:
|
||
|
|
kubernetes.io/service-name: ousast-receiver
|
||
|
|
addressType: IPv4
|
||
|
|
ports:
|
||
|
|
- name: http
|
||
|
|
port: ${OUSAST_ARTIFACT_PORT}
|
||
|
|
protocol: TCP
|
||
|
|
endpoints:
|
||
|
|
- addresses: ["${KIND_GATEWAY}"]
|