Visitar URL original
Document platform images, RDS IAM, and DB roles by Derek2Tu · Pull Request #1310 · stacklok/docs-website · GitHub
Skip to content

Document platform images, RDS IAM, and DB roles - #1310

Open
Derek2Tu wants to merge 2 commits into
mainfrom
docs/enterprise-install-gaps-v0.25
Open

Derek2Tu wants to merge 2 commits into
mainfrom
docs/enterprise-install-gaps-v0.25

Conversation

@Derek2Tu

@Derek2Tu Derek2Tu commented Nov 3, 2026 •

Copy link
Copy Markdown
Contributor

Description

Fills gaps in the Stacklok Enterprise install docs so operators can answer common pre-install questions from the docs alone.

  • Verify the distribution: the signed-images table and the "Verify across all images" loop now cover the connector-gateway, ai-gateway, and preflight-runner images. The IDENTITY regex now also matches _release-docker-image.yml, which signs presidio-analyzer and preflight-runner. Without it, cosign verify fails for those two images. Presidio Analyzer is now described as built from pinned upstream source rather than repackaged.
  • Deploy the platform:
    • New Container images section: which images each component pulls, the minimal install set, images the ToolHive Operator starts at runtime, the Replicated SDK image, and that every image is multi-architecture (linux/amd64 and linux/arm64). Digests are left to the install portal or crane digest.
    • The Kubernetes prerequisite notes that linux/amd64, linux/arm64, and mixed nodes are supported.
    • The license prerequisite now says Stacklok issues the license during onboarding and the install portal shows the License ID (same fix on the air-gap and verify pages).
    • The Enterprise Manager database section states that the chart creates no database login roles, and that role names in the examples are only examples.
    • New AWS RDS IAM authentication subsection: database.dynamicAuth and the global.postgres.dynamicAuth fallback, GRANT rds_iam for each role, and the Registry Server's dynamicAuth setting.
  • Install from a private registry: links to the new images section to cross-check the portal's image list.

The ai-gateway image name follows the data plane image rename, which ships in a release after v0.25.0. For older releases the verify loop prints SKIP for that image.

Type of change

  • Documentation update

Related issues/PRs

None.

Submitter checklist

Content and formatting

  • I have reviewed the content for technical accuracy
  • I have reviewed the content for spelling, grammar, and style

Reviewer checklist

Content

  • I have reviewed the content for technical accuracy
  • I have reviewed the content for spelling, grammar, and style

🤖 Generated with Claude Code

Add a container images reference, state the Kubernetes version bound,
document AWS RDS IAM auth and database role ownership, and fix the
cosign identity and image list on the verify page.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@vercel

vercel Bot commented Nov 3, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs-website Ready Ready Preview Nov 3, 2026 12:23am UTC

Request Review

Keep "1.30 or later" as the Kubernetes bound, clarify that Stacklok
issues the license, drop the Registry Server global IAM caveat, and
name the AI Gateway image ai-gateway.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
[Virtual MCP Server guides](../../toolhive/guides-vmcp/index.mdx) for Virtual
MCP Server (vMCP) gateways.

### Container images

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this section feels repetitive with the section above, maybe we could consolidate?

This branch was successfully deployed

1 active deployment
Preview — 8679bc7c Deployed Nov 3, 2026 by vercel[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants