Opt-in Kustomize Component patches for PingOne Advanced Services (P1AS). Patches are organized by subsystem under components/ and named with a version suffix matching their target P1AS release.
To apply a patch, add its path to the components: list in a cluster-state-repo (CSR) kustomization.yaml.
See the Confluence Component Patch Homepage for full usage details.
| Path | Description | Targeted P1AS Version(s) |
|---|---|---|
components/karpenter/karpenter_patch_2_1 |
Updates EC2NodeClass AMI family to AL2023 | 2.1 |
components/logging/fluentbit_aws_patch_* |
Routes Fluent Bit logs to S3 via amazon/aws-for-fluent-bit |
1.19.2, 2.0, 2.1 |
components/logging/fluentbit_metrics_patch_* |
Adds Prometheus scrape annotations to Fluent Bit DaemonSet | 1.19.2, 2.0 |
components/logging/opensearch_ism_patch_* |
Deploys standard ISM policy (hot → warm at 30d → delete at 31d) | 1.19.2, 2.0 |
components/logging/opensearch_warm_nodes_patch_* |
Removes warm node pool; sets ISM audit retention to 45 days | 1.19.2, 2.0 |
components/logging/opensearch_drain_data_node_patch_* |
Enables drainDataNodes for graceful OpenSearch node removal |
1.19.2, 2.0 |
components/logging/opensearch_enable_auth_patch_* |
Configures authenticated Prometheus scraping of OpenSearch | 1.19.2, 2.0 |
components/logging/opensearch_alert_rbac_patch_* |
Applies RBAC config for OpenSearch alerting | 1.19.2, 2.0 |
components/logging/kube-rbac-proxy_* |
Enables kube-rbac-proxy on controller-manager | 1.19.2, 2.0 |
components/logging/osd_query_csv_patch_* |
Grants OSD users the ability to export queries as CSV | 1.19.2, 2.0 |
components/logging/osd_pf_unique_users_patch_1_19_2 |
Adds PF unique-users dashboard; extends PF audit retention to 45 days | 1.19.2 |
components/network/nlb_heartbeat_patch_2_0 |
Fixes missing NLB annotation and PingCentral heartbeat content-length (PDO-9671, PDO-9687) | 2.0 |
components/nginx/ingress_nginx_vuln_2_1_1 |
Updates ingress controller to SigSci-enabled image; removes obsolete modsecurity annotations | 2.1.1 |
components/nginx_configmap_patch_1_18 |
Configures ingress-nginx-public: SigSci module, worker tuning, upstream log format, SSL ciphers | 1.18 |
components/nginx_configmap_patch_1_19 |
Configures ingress-nginx-public: SigSci module, worker tuning, upstream log format, SSL ciphers | 1.19 |
components/remove_modsecurity_ingress_patch_2_2 |
Removes modsecurity annotations from all ingress resources after ingress-nginx 1.14.4 upgrade | 2.2+ |
components/pingaccess/sync_admin_engine_certs_patch |
CronJob that detects admin cert changes and restarts engine pods to reload (PA and PA-WAS) | All |
components/sigsci_agent |
Tunes SigSci sidecar CPU, nginx-ingress-controller resources, and HPA scaling | v1.19, 2.0.x, 2.1 |
components/xxl_patches_1_19/pingfederate |
Increased resource limits/requests and HPA ranges for PingFederate | 1.19.2 |
components/xxl_patches_1_19/pingaccess |
Increased resource limits/requests and HPA ranges for PingAccess | 1.19.2 |
components/xxl_patches_1_19/pingaccess-was |
Increased resource limits/requests and HPA ranges for PingAccess-WAS | 1.19.2 |
components/xxl_patches_1_19/pingdirectory |
Increased resource limits/requests and HPA ranges for PingDirectory | 1.19.2 |
components/xxl_patches_1_19/nginx |
Increased resource limits/requests and HPA ranges for nginx | 1.19.2 |
components/xxl_patches_1_19/logstash |
Increased resource limits/requests and HPA ranges for Logstash | 1.19.2 |
components/xxl_patches_1_19/fluent-bit |
Increased resource limits/requests and HPA ranges for Fluent Bit | 1.19.2 |
components/xxl_patches_1_19/prometheus |
Increased resource limits/requests and HPA ranges for Prometheus | 1.19.2 |
See the Confluence Component Patch Homepage