rock 2501a68528 fix: add PodSecurity contexts to all poimen deployments ...

- runAsNonRoot, runAsUser 1000, seccompProfile RuntimeDefault
- Drop ALL capabilities, no privilege escalation
- readOnlyRootFilesystem on memory (with /tmp emptyDir)
- git-sync init runs as root with only CHOWN+DAC_OVERRIDE caps
- All pods use their service accounts

2026-08-30 07:20:08 -07:00

..

deployment.yaml

fix: add PodSecurity contexts to all poimen deployments

2026-08-30 07:20:08 -07:00

kustomization.yaml

fix: remove obsidian-remote UI (too glitchy via noVNC)

2026-08-29 09:37:07 -07:00

obsidian-git-ssh-secret.enc.yaml

feat: obsidian git-sync from poimen-obesdient-memory repo

2026-08-28 16:31:48 -07:00

obsidian.yaml

fix: add PodSecurity contexts to all poimen deployments

2026-08-30 07:20:08 -07:00

opensearch-deployment.yaml

chore: Archive completed task files (M0, M1, M3, M3.5, M4.1-2, M3.6.1)

2026-08-27 20:25:05 -07:00

secrets-actual.yaml

Implement M3.6.1: DocCorpusSource with heading-boundary chunking (196 tests)

2026-08-23 09:42:09 -07:00

secrets.yaml

Add K8s app deployment, Dockerfile, and CI workflow (Option A)

2026-08-23 00:01:30 -07:00

service.yaml

Add K8s app deployment, Dockerfile, and CI workflow (Option A)

2026-08-23 00:01:30 -07:00

vault-pvc.yaml

feat: add Obsidian vault projection with Longhorn storage (#13)

2026-08-24 01:58:39 +00:00