mirror of
https://github.com/norandom/OpenUltraSAST.git
synced 2026-10-16 11:49:28 +00:00
A lean overlay omits otel-collector, prometheus and jaeger and disables the exporters; on an existing cluster up.sh scales them to 0. Verified live: render has no otel-system resources, up.sh idempotent (54 s second run), smoke Run done, kind node 2.66 -> 1.82 GiB. Docs say server VM. Implemented with Codex. Co-Authored-By: Claude Opus 5.5 <[email protected]>
45 lines
1.0 KiB
YAML
45 lines
1.0 KiB
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
# prepare-substrate.py stages the upstream kind overlay beside this directory.
|
|
resources:
|
|
- ../kind-upstream
|
|
patches:
|
|
- target:
|
|
namespace: otel-system
|
|
patch: |-
|
|
$patch: delete
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: unused
|
|
- target:
|
|
kind: Namespace
|
|
name: otel-system
|
|
patch: |-
|
|
$patch: delete
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: otel-system
|
|
- target:
|
|
kind: ClusterRole
|
|
name: ate-prometheus
|
|
patch: |-
|
|
$patch: delete
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: ClusterRole
|
|
metadata:
|
|
name: ate-prometheus
|
|
- target:
|
|
kind: RoleBinding
|
|
name: ate-prometheus
|
|
namespace: ate-system
|
|
patch: |-
|
|
$patch: delete
|
|
apiVersion: rbac.authorization.k8s.io/v1
|
|
kind: RoleBinding
|
|
metadata:
|
|
name: ate-prometheus
|
|
namespace: ate-system
|
|
- path: ate-otel-config.yaml
|