Merge pull request #1209 from yinkscss/fix/1187-1189-1190-1191-cleanup

[1187][1189][1190][1191] Remove dead flags, obsolete docs, redundant metrics, stale benchmarks

Author: OtowoSamuel

.github/workflows/ci.yml

@@ -321,7 +321,8 @@ jobs:
             --ignore RUSTSEC-2026-0049 \
             --ignore RUSTSEC-2026-0182 \
             --ignore RUSTSEC-2026-0185 \
-            --ignore RUSTSEC-2026-0187
+            --ignore RUSTSEC-2026-0187 \
+            --ignore RUSTSEC-2026-0204
 
       - name: Verify third-party license references are up to date
         run: make check-third-party-licenses

.github/workflows/dependency-review.yml

@@ -80,7 +80,9 @@ jobs:
             --ignore RUSTSEC-2026-0098 \
             --ignore RUSTSEC-2026-0099 \
             --ignore RUSTSEC-2026-0104 \
-            --ignore RUSTSEC-2026-0149
+            --ignore RUSTSEC-2026-0149 \
+            --ignore RUSTSEC-2026-0187 \
+            --ignore RUSTSEC-2026-0204
 
       - name: Generate audit JSON report
         if: always()

.github/workflows/maintenance.yml

@@ -59,7 +59,9 @@ jobs:
             --ignore RUSTSEC-2026-0149 \
             --ignore RUSTSEC-2026-0049 \
             --ignore RUSTSEC-2026-0182 \
-            --ignore RUSTSEC-2026-0185
+            --ignore RUSTSEC-2026-0185 \
+            --ignore RUSTSEC-2026-0187 \
+            --ignore RUSTSEC-2026-0204
 
   docs-health:
     name: Docs Health Check

.gitignore

@@ -96,7 +96,9 @@ starfield.html
 skills-lock.json
 
 # Benchmark results — regenerate with: make benchmark-webhook-save
-results/
+# Keep results/.gitkeep tracked so the directory exists for local/CI writes.
+results/*
+!results/.gitkeep
 
 # Helm rendered manifests — regenerate with: helm template stellar-operator charts/stellar-operator
 rendered/

Cargo.lock

@@ -5,7 +5,7 @@ edition = "2021"
 authors = ["Stellar K8s Contributors"]
 description = "Cloud-Native Kubernetes Operator for Stellar Infrastructure"
 license = "Apache-2.0"
-repository = "https://github.com/stellar/stellar-k8s"
+repository = "https://github.com/OtowoOrg/Stellar-K8s"
 
 [dependencies]
 ed25519-dalek = { version = "2", features = ["rand_core"] }
@@ -116,7 +116,7 @@ prometheus-client = { version = "0.22", optional = true }
 once_cell = { version = "1", optional = true }
 
 # TLS and certificate generation
-rustls = "0.23"
+rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12"] }
 rcgen = { version = "0.13", features = ["pem", "x509-parser"] }
 axum-server = { version = "0.7.0", features = ["tls-rustls"] }
 rustls-pki-types = "1.14.1"

Cargo.toml

@@ -4,7 +4,7 @@ ARG SOURCE_DATE_EPOCH=0
 # Stage 1: Chef - Dependency Caching Layer
 # (linux/amd64 only)
 # ==============================================================================
-FROM lukemathwalker/cargo-chef:1.95-bookworm AS chef
+FROM lukemathwalker/cargo-chef:latest-rust-1.95-slim-bookworm AS chef
 WORKDIR /app
 
 # ==============================================================================
@@ -80,7 +80,7 @@ COPY target/release/kubectl-stellar /kubectl-stellar
 # health-check declaration that are identical between the local-dev and CI
 # runtime images.  Both runtime-local and runtime inherit from this stage.
 # ==============================================================================
-FROM debian:bookworm-slim@sha256:1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef AS runtime-base
+FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818 AS runtime-base
 
 # Install runtime dependencies for dynamic linking
 RUN apt-get update -qq && \

Dockerfile

@@ -308,36 +308,27 @@ The operator exposes the following production-readiness metrics:
 
 The operator supports runtime feature flags via the `stellar-operator-config` ConfigMap. Changes are picked up **without restart**.
 
+Dead flags that no longer gated any code paths were removed. Only `enable_dr` remains.
+
 ```yaml
 apiVersion: v1
 kind: ConfigMap
 metadata:
   name: stellar-operator-config
   namespace: stellar-system
 data:
-  enable_cve_scanning: "true"
-  enable_read_pool: "false"
   enable_dr: "false"
-  enable_peer_discovery: "true"
-  enable_archive_health: "true"
-  enable_soroban_metrics: "true"
 ```
 
-| Flag                     | Default | Description                         |
-| ------------------------ | ------- | ----------------------------------- |
-| `enable_cve_scanning`    | `true`  | Automatic CVE patch reconciliation  |
-| `enable_read_pool`       | `false` | Read-replica pool management        |
-| `enable_dr`              | `false` | Disaster-recovery drill scheduling  |
-| `enable_peer_discovery`  | `true`  | Automatic peer discovery            |
-| `enable_archive_health`  | `true`  | History archive health checks       |
-| `enable_soroban_metrics` | `true`  | Soroban-specific Prometheus metrics |
+| Flag        | Default | Description                                                   |
+| ----------- | ------- | ------------------------------------------------------------- |
+| `enable_dr` | `false` | Disaster-recovery / cross-region bridge resources and drills |
 
 When using the Helm chart, set flags via `values.yaml`:
 
 ```yaml
 featureFlags:
-  enableCveScanning: "true"
-  enableReadPool: "false"
+  enableDr: false
 ```
 
 ---