yamllint is now pre-installed in the runner-tools Docker image.
Removes fragile pip install step that was failing silently.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
PEP 668 blocks pip install in externally-managed Python environments
(Debian/Ubuntu). Adding --break-system-packages flag to fix CI.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
- yamllint: install via pip, validate environments/ argocd-apps/ apps/
- kubeconform: remove || true fallback, fail on invalid manifests
- Both linters now block PR merge on errors
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
6 test suites covering deployment, service, ingress, networkpolicy,
HPA, and PSS restricted security contexts. CI step added to
pr-checks workflow (requires helm-unittest in runner image).
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
