radix-platform
radix-platform copied to clipboard
Omnia Radix platform - base scripts and code
## Changelog since v1.28.0 ## Urgent Upgrade Notes ### (No, really, you MUST read this before you upgrade) - Stopped accepting component configuration for `kube-proxy` and `kubelet` during `kubeadm upgrade...
Get some insight from the community on which scalers(features) can be the most important. Implement on scaler first and then scale up in the next iteration. Update radix-config / radix-operator...
Make it possible to host application in different clusters, in different regions. Clusters: radix-platform - North Europe (Dublin) radix-c2 - West Europe (Amsterdam) - [ ] https://github.com/equinor/radix/issues/140 Users can select...
- [ ] #1371 - [ ] Would be nice to recreate a new cluster with the rumored federated workload identity (creating kubernetes with the api-server flag `--oidc-issuer-url` - https://github.com/Azure/AKS/issues/2861...
We recommend limiting pod HostPath volume mounts in your Kubernetes cluster to the configured allowed host paths. If there's a compromise, the container node access from the containers should be...
Change configuration for Radix application to respect the security setting "Containers should run with read-only root filesystem" ### Radix applications config & merge to release (promote to prod) - [x]...
Create terraform for backup resources: backup vault, backup configuration, backup policy - [ ] dev - [ ] playground - [ ] platform - [ ] c2 - [ ]...
Include ACR in the terraform resources Implement Private Link Configure Network - [ ] radixacrdev - [ ] radixacrplayground - [ ] radixacrplatform - [ ] radixacrc2 For applications -...
Create user assigned identities, today created by script - [ ] radix-id-canary-scaler-**_cluster_** - [ ] radix-id-aks-**_cluster_** - [ ] radix-id-akskubelet-**_cluster_**
Add lifecycle policy for storage accounts dev, playground: No versioning or soft delete protection, LRS -> delete 7d platform, c2: Backup vault, GRS, -> cool 30d -> delete 90d -...