Skip to content

docs: align Registry v2 migration runbook with release 4.5 - #864

Merged
zhhray merged 12 commits into
mainfrom
codex/update-registry-v2-migration-runbook
Nov 12, 2026
Merged

zhhray merged 12 commits into
mainfrom
codex/update-registry-v2-migration-runbook

Conversation

@zhhray

@zhhray zhhray commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Summary

The Registry v2 migration runbook now reflects the release-4.5 Operator and ac compatibility contract.

Changes

  • Document the separation and persistent binding between the Operator installation namespace and the Registry operand namespace.
  • Add the required Operator pause/hold gate before cold metadata import and explain why InstallPlan approval alone is insufficient.
  • Verify readOnly, storage Unmanaged, pull-secret Unmanaged, and suspended Pruner state before import.
  • Add release-4.5 ImageDigest and static namespace LimitRange verification.
  • Document the compatible ac 4.3 output contract, AC_REGISTRY_COMPAT_OUTPUT, explicit Registry URL behavior, original 4.3 client limitations, and platform-admin prune/GC boundary.
  • Record the Registry /v2/ authentication realm so an unreachable challenge host or port cannot be mistaken for a healthy endpoint.

Validation

  • git diff --check
  • Source and migration contract review against cluster-image-registry-operator release-4.5 (a51a2183) and ac release-4.5 (2c00a8d9)
  • Historical compatibility and migration session review

Restructure the runbook around a stage overview and add the checks that
were missing where a mistake cannot be undone.

- add a stage table with interruption and re-run columns
- fail closed when an Ingress UID drifts in P5 instead of deleting it
- snapshot the Secret list before the chart uninstall in P5
- refuse to record P2 when the maintenance record is missing
- pass the CA bundle to ac through SSL_CERT_FILE in P8
- assert the storage management state in P7 and P8
- compare digest sets with comm instead of counting rows
- split the appendix into known limitations and retries/recovery
Split long interactive functions into short Bash blocks with explicit results
and failure checks. Validate compatibility inventory output as exactly one JSON
array and prevent delete previews after failed or incomplete queries.

Clarify the compatibility client's Registry TLS verification limitation and
retain verified HTTPS, OCI-client, and kubelet checks for acceptance.
PR checks compared untouched generated translations with updated English before the main-only translation step could regenerate them. Check changed translations and manual translations on PRs, while keeping post-translation validation strict. Add regression tests for source-only edits, changed pairs, and manual-translation opt-outs.
@zhhray
zhhray deployed to translate November 12, 2026 08:39 — with GitHub Actions Active
@zhhray
zhhray merged commit e50d436 into main Nov 12, 2026
1 check passed
@zhhray
zhhray deleted the codex/update-registry-v2-migration-runbook branch November 12, 2026 09:32

This branch was successfully deployed

1 active deployment
translate — ba4bdafd Deployed Nov 12, 2026 by zhhray via build #2789
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant