Live-verified the container_update role's strategy_dockerfile.yml task file exists at the exact path the KB names, stamped the source note. Replaced the mermaid cheap-check flowchart with a real branch-shaped Nextcloud diagram. Added: the real Vault-backed push auth mechanism (Gitea PAT -> Vault Agent -> docker login --password-stdin, same pattern as everywhere else in the fleet), the real docker manifest inspect command instead of a vague "digest check", real app names in the holdouts table instead of generic descriptions (matching how the rest of this repo already names real apps), the anonymous-volume-pruning detail, and a real (redacted) screenshot of the actual Gitea package registry showing genuine self-built container images.
247 KiB
1920x920px
247 KiB
1920x920px