marius/Open_Ultra_SAST
1
0
Fork 0
mirror of https://github.com/norandom/OpenUltraSAST.git synced 2026-10-16 11:49:28 +00:00
Code Issues Packages Projects Releases Wiki Activity

spec(plane-on-kubernetes): kind stays a first-class local execution mode

Browse Source 
Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01EmM1j46qgKMh3zqD1QMwEo
This commit is contained in:
Marius Ciepluch
2026-10-02 19:38:03 +02:00
co-authored by Claude Fable 5.1
parent 85107bfbcc
commit 17ac7ad69d
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.kiro/specs/plane-on-kubernetes/requirements.md
+4 -3
View File
@@ -9,7 +9,7 @@ production entry point (a delta Run for a push) is added. Context: `brief.md`, `
## Boundary Context ## Boundary Context
- **In scope**: the reconciler as an in-cluster workload; receiver and router addressed as Services; configurable - **In scope**: two profiles of one code base, `kind` (local, kept) and `k3s` (production); the reconciler as an in-cluster workload; receiver and router addressed as Services; configurable
cluster context, registry and image pins; our own snapshot and memory buckets; the Joern engine as a plane task cluster context, registry and image pins; our own snapshot and memory buckets; the Joern engine as a plane task
on a larger worker pool; worker pool sizing and autoscaling; a delta Run command and Workspaces from URL + on a larger worker pool; worker pool sizing and autoscaling; a delta Run command and Workspaces from URL +
commit; a deployment runbook with a proof on kind and a checklist for the target cluster. commit; a deployment runbook with a proof on kind and a checklist for the target cluster.
@@ -59,8 +59,9 @@ push from CI, not a laptop session, drives the plane.
in the image. in the image.
3. Provider and store credentials come from Kubernetes Secrets into the reconciler's environment, never into a 3. Provider and store credentials come from Kubernetes Secrets into the reconciler's environment, never into a
manifest, an ActorTemplate or a log; the start-request path is unchanged. manifest, an ActorTemplate or a log; the start-request path is unchanged.
4. `ousast plane run` from a laptop still works against the kind cluster for development (it is the same code 4. kind stays a first-class local execution mode, not a stepping stone: `ousast plane run` from a laptop
with the development defaults). against the kind cluster keeps working with the development profile (same code, same manifests, local
registry, host reconciler), and every release is proven on it before anything is applied to k3s.
### Requirement 3: Receiver and artifacts without a host ### Requirement 3: Receiver and artifacts without a host