mirror of
https://github.com/hanzoai/vault.git
synced 2026-10-30 18:18:35 +00:00
zeekay
cda584c628
- Multi-stage Alpine Dockerfile with non-root user and healthcheck - K8s: namespace (hanzo-vault, PCI zone 3), deployment (Recreate, read-only rootfs, security hardening), service, NetworkPolicies (deny-all default, allow commerce on 8443, allow DNS) - ServiceAccount for RBAC - GitHub Actions: test, build (multi-arch GHCR), Trivy scan, deploy
9 lines
133 B
YAML
9 lines
133 B
YAML
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: hanzo-vault
|
|
labels:
|
|
name: hanzo-vault
|
|
pci-zone: "3"
|
|
pci-scope: "true"
|