Skip to main content

Security Model

Namespace Isolation

  • Zombie Mode runs in a dedicated namespace: codiac-components.

RBAC

  • Inherits your organization’s existing Kubernetes RBAC.
  • Overrides require cluster permissions.

Data

  • Zombie Mode only manages deployments/replicas.
  • Secrets, configs, and ingress remain untouched.

Overhead

  • Lightweight agent, negligible performance impact.