openova/openova
1
0
Fork 0
Code Issues Pull Requests Actions 14 Packages Projects Releases Wiki Activity

cutover: pivot 51 HelmRepository URLs to local Harbor
Some checks are pending
Vendor-coupling guardrail / Vendor-coupling guardrail (push) Waiting to run
Details
Cluster bootstrap-kit drift guardrail / Detect bootstrap-kit drift (push) Waiting to run
Details
Phase-8a preflight C — Cilium Gateway HTTPRoute admission / Preflight Cilium HTTPRoute admission (push) Waiting to run
Details
Test — Bootstrap Kit (kind cluster + Flux) / dependency-graph-audit (push) Waiting to run
Details
Test — Bootstrap Kit (kind cluster + Flux) / pin-sync-audit (push) Waiting to run
Details
Test — Bootstrap Kit (kind cluster + Flux) / manifest-validation (push) Blocked by required conditions
Details
Test — Bootstrap Kit (kind cluster + Flux) / kind-reconciliation (push) Blocked by required conditions
Details

Browse Source
This commit is contained in:
self-sovereign-cutover 2026-05-18 14:54:10 +00:00
parent bece97e2c2
commit d63a8c05d9
50 changed files with 61 additions and 50 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
clusters/_template/bootstrap-kit/01-cilium.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/01a-gateway-api.yaml
View File

@ -39,7 +39,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/02-cert-manager.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/03-flux.yaml
View File

@ -41,7 +41,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/04-crossplane.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/05-sealed-secrets.yaml
View File

@ -16,7 +16,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/05a-reflector.yaml
View File

@ -28,7 +28,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/06a-bp-self-sovereign-cutover.yaml
View File

@ -43,7 +43,7 @@ spec:
# helmrepository-patches) is what flips this URL to the local Harbor
# post-handover; until then this Sovereign is soft-tethered like the
# rest of the kit.
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/07-nats-jetstream.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/08-openbao.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/09-keycloak.yaml
View File

@ -20,7 +20,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/10-gitea.yaml
View File

@ -21,7 +21,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/11-powerdns.yaml
View File

@ -61,7 +61,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/12-external-dns.yaml
View File

@ -35,7 +35,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

13
clusters/_template/bootstrap-kit/13-bp-catalyst-platform.yaml
View File

@ -25,7 +25,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---
@ -737,6 +737,17 @@ spec:
# N regions correctly. Without this the chroot fell back to the
# live-Nodes path and emitted "1 cluster 1 region" on every
# multi-region Sovereign (caught on t126, 2026-05-16).
# ─── openova-catalog HelmRepository URL (TBD-C19, 2026-05-18) ──
# Pivoted by self-sovereign-cutover step-06 phase-2.5 from
# oci://ghcr.io/openova-io → local Harbor mirror so the
# catalyst-platform chart re-renders openova-catalog HR with
# the post-cutover URL on every reconcile. Bootstrap-kit
# Kustomization preserves this override across reconciles —
# without it Step-08 catches `openova-catalog` regressing
# back to ghcr.io ~1 min after Phase-1 patch.
catalog:
helmRepository:
url: oci://registry.t22.omantel.biz/openova-io
sovereign:
# MUST be quoted: SOVEREIGN_REGIONS_JSON contains valid JSON like
# `[{"cloudRegion":"hel1",...}]`. Without quotes, YAML interprets

2
clusters/_template/bootstrap-kit/14-crossplane-claims.yaml
View File

@ -19,7 +19,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/15-external-secrets.yaml
View File

@ -32,7 +32,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/15a-external-secrets-stores.yaml
View File

@ -25,7 +25,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/16-cnpg.yaml
View File

@ -35,7 +35,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/17-valkey.yaml
View File

@ -27,7 +27,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/18-seaweedfs.yaml
View File

@ -32,7 +32,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/19-harbor.yaml
View File

@ -58,7 +58,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/19a-bp-sandbox.yaml
View File

@ -35,7 +35,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/20-opentelemetry.yaml
View File

@ -40,7 +40,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/21-alloy.yaml
View File

@ -37,7 +37,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/22-loki.yaml
View File

@ -34,7 +34,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/23-mimir.yaml
View File

@ -34,7 +34,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/24-tempo.yaml
View File

@ -32,7 +32,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/25-grafana.yaml
View File

@ -37,7 +37,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/27-kyverno.yaml
View File

@ -34,7 +34,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/28-reloader.yaml
View File

@ -32,7 +32,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/29-vpa.yaml
View File

@ -32,7 +32,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/30-trivy.yaml
View File

@ -33,7 +33,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/31-falco.yaml
View File

@ -31,7 +31,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/32-sigstore.yaml
View File

@ -34,7 +34,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/33-syft-grype.yaml
View File

@ -31,7 +31,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/34-velero.yaml
View File

@ -49,7 +49,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/35-coraza.yaml
View File

@ -36,7 +36,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/49-bp-cert-manager-powerdns-webhook.yaml
View File

@ -73,7 +73,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/50-cluster-autoscaler.yaml
View File

@ -59,7 +59,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/51-bp-k8s-ws-proxy.yaml
View File

@ -40,7 +40,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/52-bp-guacamole.yaml
View File

@ -54,7 +54,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/54-bp-dmz-vcluster.yaml
View File

@ -36,7 +36,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/55-bp-hcloud-ccm.yaml
View File

@ -54,7 +54,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/56-bp-openova-flow-server.yaml
View File

@ -38,7 +38,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/57-bp-openova-flow-emitter.yaml
View File

@ -31,7 +31,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/58-bp-mgmt-vcluster.yaml
View File

@ -44,7 +44,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/59-bp-rtz-vcluster.yaml
View File

@ -39,7 +39,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/60-bp-vcluster-helmrepo.yaml
View File

@ -52,7 +52,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---

2
clusters/_template/bootstrap-kit/80-newapi.yaml
View File

@ -31,7 +31,7 @@ metadata:
spec:
type: oci
interval: 15m
url: oci://ghcr.io/openova-io
url: oci://registry.t22.omantel.biz/openova-io
secretRef:
name: ghcr-pull
---