synapse-cluster-agent

Overview ¶

Command synapse-cluster-agent is the Kubernetes cluster agent (#411/#446, epic #405). It reads a live cluster through the read-only collector (internal/infrastructure/k8sinv), enrols with the control plane's fleet API, and posts the collected snapshot each resync so the control plane maps and persists it into the asset model. It runs with the read-only ClusterRole shipped in deploy/k8s/cluster-agent.yaml. The private key is generated locally; only a CSR is sent.

It is a composition root only: it loads Kubernetes config (in-cluster first, then a kubeconfig), builds the collector + fleet client, and calls the testable run(). Collection is read-only — the agent never mutates the cluster.