Use lightweight cluster topology in CI

2026-08-09 22:01:11 -04:00
parent 8955ba6873
commit 8934ea95a4
3 changed files with 31 additions and 5 deletions
@@ -0,0 +1,24 @@
+apiVersion: k3d.io/v1alpha5
+kind: Simple
+metadata:
+  name: security-baseline-ci
+
+# CI only needs one control-plane node for the K3s CIS scan. Keeping agents
+# out of this disposable job avoids unnecessary Docker resource pressure on
+# shared GitHub or Gitea runners.
+servers: 1
+agents: 0
+
+options:
+  k3s:
+    extraArgs:
+      - arg: --disable=traefik
+        nodeFilters:
+          - server:*
+  k3d:
+    wait: true
+    timeout: 180s
+  kubeconfig:
+    updateDefaultKubeconfig: true
+    switchCurrentContext: true
+