packages/core/platform/templates/containerd-registry-secret.yaml still renders a Secret named patch-containerd into cozy-system from .Values.registries.mirrors, gated on that value being non-empty. Nothing in the tree reads it. The only other reference is packages/apps/kubernetes/README.md, which says the Secret was removed.
So an operator in a restricted-egress environment sets registries.mirrors, watches a Secret appear in cozy-system, and gets no mirroring. The values key is still advertised, the artifact is still produced, and the effect is gone.
Two ways out. Wire it to the Talos machineconfig so the key does what it claims, or delete the template and the values key together. Either works. What is there now does not.
The README needs a fix whichever way it goes, since it currently documents the opposite of what the tree does.
Related: #3950, which covers the same registry channel from the tenant side.
packages/core/platform/templates/containerd-registry-secret.yamlstill renders a Secret namedpatch-containerdintocozy-systemfrom.Values.registries.mirrors, gated on that value being non-empty. Nothing in the tree reads it. The only other reference ispackages/apps/kubernetes/README.md, which says the Secret was removed.So an operator in a restricted-egress environment sets
registries.mirrors, watches a Secret appear incozy-system, and gets no mirroring. The values key is still advertised, the artifact is still produced, and the effect is gone.Two ways out. Wire it to the Talos machineconfig so the key does what it claims, or delete the template and the values key together. Either works. What is there now does not.
The README needs a fix whichever way it goes, since it currently documents the opposite of what the tree does.
Related: #3950, which covers the same registry channel from the tenant side.