# xss603/neglected architecture

> Architecture diagram of the GitHub repository xss603/neglected, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-30). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/xss603/neglected
- Repository: https://github.com/xss603/neglected

## Overview

Neglected is a Kubernetes operations workspace, not one integrated application: it collects cluster-support tools, security and networking assets, observability artifacts, operators, and backup workflows. A representative user-to-result flow is a route audit: an operator supplies an application or route source, the tool probes endpoints, then reports authentication reachability. The database-backup operator has a separate Kubernetes reconciliation workflow. Other README-listed capabilities are preserved as distinct components; unsampled wiring is not inferred.

Main entry points: [`operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go`](https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go) (Backup reconciler), [`apps/startlette/find_routes_unauth.py`](https://github.com/xss603/neglected/blob/main/apps/startlette/find_routes_unauth.py) (Route probe), [`apps/startlette/find-cl.py`](https://github.com/xss603/neglected/blob/main/apps/startlette/find-cl.py) (Route audit), [`training/devsecops/otel-metrics-test/main.go`](https://github.com/xss603/neglected/blob/main/training/devsecops/otel-metrics-test/main.go) (OTel metrics test)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_route_audits["Route security audits"]
  node_route_sources["Route sources"]
  node_route_audit["Route audit<br/>[find-cl.py]"]
  node_route_probe["Route probe"]
  node_audit_results["Findings"]
end

subgraph group_cluster_ops["Cluster operations"]
  node_cluster_support["Cluster support"]
  node_argo_audits["Argo audits"]
  node_gateway_diagnostics["Gateway diagnostics"]
end

subgraph group_operator["Backup operator"]
  node_databasebackup_cr["DatabaseBackup request"]
  node_backup_controller["Backup reconciler"]
  node_backup_job["Kubernetes Job"]
  node_operator_manager["Operator manager<br/>[main.go]"]
end

subgraph group_telemetry["Telemetry"]
  node_otel_test["OTel metrics test<br/>[main.go]"]
  node_otel_collector["OTLP collector"]
  node_grafana_dashboard["HTTP analytics dashboard"]
end

subgraph group_platform_assets["Platform assets"]
  node_backup_workflows["Qdrant backup workflows"]
  node_trivy_assets["Trivy triage and upload"]
  node_registry_policies["Registry admission policies"]
end

node_operator_user(("Operator"))
node_kubernetes[("Kubernetes API")]

node_operator_user -->|"runs audit"| node_route_audit
node_route_sources -->|"provides routes"| node_route_audit
node_route_audit -->|"reports findings"| node_audit_results
node_operator_user -->|"runs probe"| node_route_probe
node_route_probe -->|"discovers routes"| node_route_sources
node_route_probe -->|"reports findings"| node_audit_results
node_operator_manager -->|"registers controller"| node_backup_controller
node_backup_controller -->|"reads request"| node_databasebackup_cr
node_backup_controller -->|"creates job"| node_backup_job
node_backup_controller -->|"updates status"| node_databasebackup_cr
node_operator_user -->|"runs test"| node_otel_test
node_otel_test -->|"exports metrics"| node_otel_collector
node_registry_policies -->|"mutates admissions"| node_kubernetes

click node_route_audit "https://github.com/xss603/neglected/blob/main/apps/startlette/find-cl.py"
click node_route_probe "https://github.com/xss603/neglected/blob/main/apps/startlette/find_routes_unauth.py"
click node_cluster_support "https://github.com/xss603/neglected/tree/main/cluster/scripts"
click node_argo_audits "https://github.com/xss603/neglected/tree/main/cluster/argo"
click node_gateway_diagnostics "https://github.com/xss603/neglected/tree/main/networking/kgateway"
click node_databasebackup_cr "https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/api/v1alpha1/databasebackup_types.go"
click node_backup_controller "https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go"
click node_operator_manager "https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/main.go"
click node_otel_test "https://github.com/xss603/neglected/blob/main/training/devsecops/otel-metrics-test/main.go"
click node_grafana_dashboard "https://github.com/xss603/neglected/blob/main/observability/grafana-dashboards/starlette-http-analytics-dashboard.json"
click node_backup_workflows "https://github.com/xss603/neglected/tree/main/workflows/wkf-qdrant-bkp"
click node_trivy_assets "https://github.com/xss603/neglected/tree/main/operators/trivy-operator"
click node_registry_policies "https://github.com/xss603/neglected/tree/main/manifests/kyverno-policies"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_route_sources,node_route_audit,node_route_probe,node_audit_results toneBlue
class node_cluster_support,node_argo_audits,node_gateway_diagnostics,node_kubernetes toneAmber
class node_databasebackup_cr,node_backup_controller,node_backup_job,node_operator_manager toneMint
class node_otel_test,node_otel_collector,node_grafana_dashboard toneRose
class node_backup_workflows,node_trivy_assets,node_registry_policies,node_operator_user toneIndigo
```

## Components

### Route security audits

- **Route sources**
- [Route audit](https://github.com/xss603/neglected/blob/main/apps/startlette/find-cl.py): `apps/startlette/find-cl.py`
- [Route probe](https://github.com/xss603/neglected/blob/main/apps/startlette/find_routes_unauth.py): `apps/startlette/find_routes_unauth.py`
- **Findings**

### Cluster operations

- [Cluster support](https://github.com/xss603/neglected/tree/main/cluster/scripts): `cluster/scripts`
- [Argo audits](https://github.com/xss603/neglected/tree/main/cluster/argo): `cluster/argo`
- [Gateway diagnostics](https://github.com/xss603/neglected/tree/main/networking/kgateway): `networking/kgateway`

### Backup operator

- [DatabaseBackup request](https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/api/v1alpha1/databasebackup_types.go): `operators/operator-sdk/databasebackup-operator/api/v1alpha1/databasebackup_types.go`
- [Backup reconciler](https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go): `operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go`
- **Kubernetes Job**
- [Operator manager](https://github.com/xss603/neglected/blob/main/operators/operator-sdk/databasebackup-operator/main.go): `operators/operator-sdk/databasebackup-operator/main.go`

### Telemetry

- [OTel metrics test](https://github.com/xss603/neglected/blob/main/training/devsecops/otel-metrics-test/main.go): `training/devsecops/otel-metrics-test/main.go`
- **OTLP collector**
- [HTTP analytics dashboard](https://github.com/xss603/neglected/blob/main/observability/grafana-dashboards/starlette-http-analytics-dashboard.json): `observability/grafana-dashboards/starlette-http-analytics-dashboard.json`

### Platform assets

- [Qdrant backup workflows](https://github.com/xss603/neglected/tree/main/workflows/wkf-qdrant-bkp): `workflows/wkf-qdrant-bkp`
- [Trivy triage and upload](https://github.com/xss603/neglected/tree/main/operators/trivy-operator): `operators/trivy-operator`
- [Registry admission policies](https://github.com/xss603/neglected/tree/main/manifests/kyverno-policies): `manifests/kyverno-policies`

### Other components

- **Operator**
- **Kubernetes API**

## Connections

- Operator → Route audit: runs audit (evidence: `apps/startlette/find-cl.py`)
- Route sources → Route audit: provides routes (evidence: `apps/startlette/find-cl.py`)
- Route audit → Findings: reports findings (evidence: `apps/startlette/find-cl.py`)
- Operator → Route probe: runs probe (evidence: `apps/startlette/find_routes_unauth.py`)
- Route probe → Route sources: discovers routes (evidence: `apps/startlette/find_routes_unauth.py`)
- Route probe → Findings: reports findings (evidence: `apps/startlette/find_routes_unauth.py`)
- Operator manager → Backup reconciler: registers controller (evidence: `operators/operator-sdk/databasebackup-operator/main.go`)
- Backup reconciler → DatabaseBackup request: reads request (evidence: `operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go`)
- Backup reconciler → Kubernetes Job: creates job (evidence: `operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go`)
- Backup reconciler → DatabaseBackup request: updates status (evidence: `operators/operator-sdk/databasebackup-operator/internal/controller/databasebackup_controller.go`)
- Operator → OTel metrics test: runs test (evidence: `training/devsecops/otel-metrics-test/main.go`)
- OTel metrics test → OTLP collector: exports metrics (evidence: `training/devsecops/otel-metrics-test/main.go`)
- Registry admission policies → Kubernetes API: mutates admissions (evidence: `README.md`)