Bridge scoped Linux registry credentials for native Binjovi #372

Merged
binjovi-bot merged 1 commit from feat/linux-registry-store-bridges into trunk 2026-09-06 18:36:53 +00:00
Owner

Add two exact-name secret reader identities and ClusterSecretStores for native Linux candidate exports and immutable publication. Each Role permits GET on one Zot credential only; stores accept only binjovi-builds, never workflows. No Secret values change. Required before core Binjovi PR884 mounts. Focused red-green tests, full tests/check.sh, and kubectl kustomize passed. The active native Flux check also invokes the new guard.

Add two exact-name secret reader identities and ClusterSecretStores for native Linux candidate exports and immutable publication. Each Role permits GET on one Zot credential only; stores accept only binjovi-builds, never workflows. No Secret values change. Required before core Binjovi PR884 mounts. Focused red-green tests, full tests/check.sh, and kubectl kustomize passed. The active native Flux check also invokes the new guard.
feat(linux): bridge scoped native registry credentials
All checks were successful
binjovi/ci Binjovi completed the frozen plan
b15f9fa1c7
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!372
No description provided.