• v0.1.229 95688d068c

    v0.1.229 Stable

    pipeline-bot released this 2026-07-21 16:45:25 +00:00 | 242 commits to main since this release

    • Bare registry self-mints its admin credential (severs registry-alice). The
      registry namespace now generates its own zot admin password (ESO Password
      generator → generator-backed htpasswd ExternalSecret, refreshInterval: "0" so
      it stays stable) and exposes it cluster-wide via a new
      zot-registry-registry-credentials ClusterSecretStore (own reader SA/Role/RoleBinding),
      replacing the cross-namespace zot-alice-registry-credentials store from
      XRegistry/alice. The workflows CI push creds (registry-credentials,
      zot-admin-credentials) repoint to the new store, and the in-cluster push host
      in the dockerconfig moves zot.registry-alice.svczot.registry.svc. Part of
      the XRegistry/alice teardown; the admin password rotates at this cutover (pushes
      only — pulls are anonymous).

    Included changes (v0.1.228 -> v0.1.229)

    • 19e28a0cd1c9 feat(registry): self-mint bare zot admin cred + flip workflows CI push off alice store
    Downloads