docs(deploy): mark the unsigned ZOT OCIRepository dev-only #33

Merged

nalum merged 1 commit from docs/zot-ocirepo-dev-only into main

2026-08-13 11:32:02 +00:00

nalum commented

2026-08-13 10:29:23 +00:00

Owner

See the verification comment on the issue: no flux runs on the live cluster, so the unsigned source is dormant. This makes the manifest self-warning so it stays that way.

Fixes #20

🤖 Generated with Claude Code

See the verification comment on the issue: no flux runs on the live cluster, so the unsigned source is dormant. This makes the manifest self-warning so it stays that way. Fixes #20 🤖 Generated with [Claude Code](https://claude.com/claude-code)

nalum added 1 commit

2026-08-13 10:29:23 +00:00

docs(deploy): mark the unsigned ZOT OCIRepository dev-only

check / web (push) Successful in 1m34s

Details

check / go (push) Successful in 1m51s

Details

82d645cb39

The ZOT variant carries no cosign verify block, so anything that can
push to zot:5000 would control deploys if flux ever reconciled it.
Verified 2026-08-13: the live kind cluster runs no flux controllers at
all (no flux CRDs; the app image is deployed digest-pinned by make
deploy), so the unsigned source is dormant today. The header now says
so loudly, and points the family install at the verified lihnet
variant.

Fixes #20

nalum force-pushed docs/zot-ocirepo-dev-only from 82d645cb39

check / web (push) Successful in 1m34s

Details

check / go (push) Successful in 1m51s

Details

to 860aed876f

check / web (push) Successful in 1m30s

Details

check / go (push) Successful in 1m45s

Details

2026-08-13 11:25:40 +00:00

Compare