Skip to content

add: orca-k8s-bulk-onboarding — bulk Kubernetes cluster onboarding skill - #28

Open
aleksandr-orca wants to merge 3 commits into
mainfrom
add/orca-k8s-bulk-onboarding
Open

aleksandr-orca wants to merge 3 commits into
mainfrom
add/orca-k8s-bulk-onboarding

Conversation

@aleksandr-orca

Copy link
Copy Markdown
Contributor

Summary

  • Adds orca-k8s-bulk-onboarding, a skill that gets many Kubernetes clusters fully connected to Orca in one pass — implements KSPM-1072.
  • Triages every target cluster first instead of defaulting everything to the Kubernetes Connector tunnel: public clusters blocked by a fixable native issue (network access, auth mode, permissions) get that fix applied first, pulling live per-cluster-type remediation (title/explanation/fix_steps/cli_fix_steps/doc_links) straight from Orca's own API; private clusters Orca already knows about, and clusters Orca hasn't discovered at all, go straight to the Connector.
  • For self-managed/undiscovered clusters with no cloud account of their own, lists the org's real cloud accounts and helps pick a suitable one — there's no placeholder account to fall back to.
  • Mints exactly one shared tunnel credential pair for everything that needs the Connector, reuses the chart's existingSecret pattern to keep it out of shell history, and surfaces easy-to-miss per-cluster flags (openshift, proxyURL, forceSelfManaged, tolerations) instead of silently skipping them.
  • Covers wiring the Connector into a user's own CI/Terraform pipeline for clusters created dynamically, pointing to a reusable Terraform module instead of a one-off batch run.
  • Loops the install without stopping on the first failure, verifies every Connector-path cluster comes online, and hands a dropped tunnel (connector_disconnected) or an install failure off to orca-k8s-connector-troubleshoot instead of re-diagnosing it.
  • Updates README.md with the skill table entry, a "Fleet onboarding" workflow line, and a full skill details block.

@orca-security-eu orca-security-eu Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 0   low 0   info 0 View in Orca

…-check boolean limitation

These landed on the orca side (PR #81161) after this skill was last updated.

@orca-security-eu orca-security-eu Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Orca Security Scan Summary

Status Check Issues by priority
Passed Passed Infrastructure as Code high 0   medium 0   low 0   info 0 View in Orca
Passed Passed OSS Licenses high 0   medium 0   low 0   info 0 View in Orca
Passed Passed SAST high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Secrets high 0   medium 0   low 0   info 0 View in Orca
Passed Passed Vulnerabilities high 0   medium 0   low 0   info 0 View in Orca

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants