Files
kubernetes-security-baselin…/ci/k3d-ci-cluster-config.yaml
T
swaphb 8934ea95a4
Kube-bench CIS scan / Scan ephemeral K3s cluster (push) Failing after 3m11s
Use lightweight cluster topology in CI
2026-08-09 22:01:11 -04:00

25 lines
513 B
YAML

apiVersion: k3d.io/v1alpha5
kind: Simple
metadata:
name: security-baseline-ci
# CI only needs one control-plane node for the K3s CIS scan. Keeping agents
# out of this disposable job avoids unnecessary Docker resource pressure on
# shared GitHub or Gitea runners.
servers: 1
agents: 0
options:
k3s:
extraArgs:
- arg: --disable=traefik
nodeFilters:
- server:*
k3d:
wait: true
timeout: 180s
kubeconfig:
updateDefaultKubeconfig: true
switchCurrentContext: true