Create C2 Mikado cards for harden-zot-registry #229

Merged

eblume merged 1 commit from harden-zot-mikado-cards into main

2026-02-20 17:56:26 -08:00

eblume commented

2026-02-20 17:52:44 -08:00

Owner

Summary

Replace the old pre-Mikado plan doc (docs/how-to/plans/harden-zot-registry.md) with a proper C2 Mikado chain in docs/how-to/zot/
Root goal: harden-zot-registry — enable OIDC + API key auth on zot with anonymous pull preserved
Three leaf prereqs: register-zot-oidc-client, wire-ci-registry-auth, enforce-tag-immutability
Add Zot section to how-to.md index, remove plan entry from plans index
All doc checks pass (docs-check-links, docs-check-index, docs-mikado)

Changes

New: docs/how-to/zot/harden-zot-registry.md — C2 Mikado root goal
New: docs/how-to/zot/register-zot-oidc-client.md — Register OIDC client in Authentik
New: docs/how-to/zot/wire-ci-registry-auth.md — Wire CI push paths with registry auth
New: docs/how-to/zot/enforce-tag-immutability.md — Prevent version tag overwrites
Deleted: docs/how-to/plans/harden-zot-registry.md — Old plan doc (content absorbed into Mikado cards)
Updated: docs/how-to/how-to.md — Add Zot section, remove plan entry
Updated: docs/how-to/plans/plans.md — Remove plan entry

🤖 Generated with Claude Code

## Summary - Replace the old pre-Mikado plan doc (`docs/how-to/plans/harden-zot-registry.md`) with a proper C2 Mikado chain in `docs/how-to/zot/` - Root goal: `harden-zot-registry` — enable OIDC + API key auth on zot with anonymous pull preserved - Three leaf prereqs: `register-zot-oidc-client`, `wire-ci-registry-auth`, `enforce-tag-immutability` - Add Zot section to `how-to.md` index, remove plan entry from plans index - All doc checks pass (`docs-check-links`, `docs-check-index`, `docs-mikado`) ## Changes - **New:** `docs/how-to/zot/harden-zot-registry.md` — C2 Mikado root goal - **New:** `docs/how-to/zot/register-zot-oidc-client.md` — Register OIDC client in Authentik - **New:** `docs/how-to/zot/wire-ci-registry-auth.md` — Wire CI push paths with registry auth - **New:** `docs/how-to/zot/enforce-tag-immutability.md` — Prevent version tag overwrites - **Deleted:** `docs/how-to/plans/harden-zot-registry.md` — Old plan doc (content absorbed into Mikado cards) - **Updated:** `docs/how-to/how-to.md` — Add Zot section, remove plan entry - **Updated:** `docs/how-to/plans/plans.md` — Remove plan entry 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 1 commit

2026-02-20 17:52:44 -08:00

Create C2 Mikado cards for harden-zot-registry d7109300cf

Replace the old pre-Mikado plan doc with a proper C2 Mikado chain:
root goal (harden-zot-registry) and three leaf prereqs
(register-zot-oidc-client, wire-ci-registry-auth, enforce-tag-immutability).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>