Declare the live release units for this owner.

The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows.

Assistant: grok
Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397

registry/release-units/argocd.yaml

@@ -0,0 +1,51 @@
+# No owner classification file. Recorded internal/high for this wave.
+kind: release-unit
+unit_id: argocd
+owner: railiance-cluster
+contract_version: 1.0.0
+data_classification: internal
+criticality: high
+composition:
+  purpose: Covers the live argocd workloads as one release unit.
+  member_repos:
+  - repo: railiance-cluster
+    role: rollout owner
+    deployables:
+    - argocd-application-controller
+    - argocd-applicationset-controller
+    - argocd-redis
+    - argocd-repo-server
+rollout_contract:
+  default_mode: owner-deploy
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: StatefulSet
+  namespace: argocd
+  name: argocd-application-controller
+- kind: Deployment
+  namespace: argocd
+  name: argocd-applicationset-controller
+- kind: Deployment
+  namespace: argocd
+  name: argocd-redis
+- kind: Deployment
+  namespace: argocd
+  name: argocd-repo-server
+pins:
+  component:
+    name: ocm.railiance.dev/argocd
+    version: live
+  resources: []
+  sources:
+  - name: railiance-cluster
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: aad0e7094a69682725d2c280a6e049331e6223d2

registry/release-units/cert-manager.yaml

@@ -0,0 +1,47 @@
+# No owner classification file. Recorded internal/high for this wave.
+kind: release-unit
+unit_id: cert-manager
+owner: railiance-cluster
+contract_version: 1.0.0
+data_classification: internal
+criticality: high
+composition:
+  purpose: Covers the live cert-manager workloads as one release unit.
+  member_repos:
+  - repo: railiance-cluster
+    role: rollout owner
+    deployables:
+    - cert-manager
+    - cert-manager-cainjector
+    - cert-manager-webhook
+rollout_contract:
+  default_mode: helm-upgrade-install
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: Deployment
+  namespace: cert-manager
+  name: cert-manager
+- kind: Deployment
+  namespace: cert-manager
+  name: cert-manager-cainjector
+- kind: Deployment
+  namespace: cert-manager
+  name: cert-manager-webhook
+pins:
+  component:
+    name: ocm.railiance.dev/cert-manager
+    version: live
+  resources: []
+  sources:
+  - name: railiance-cluster
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: aad0e7094a69682725d2c280a6e049331e6223d2

registry/release-units/cloudnative-pg.yaml

@@ -0,0 +1,39 @@
+# No owner classification file. Recorded internal/high for this wave.
+kind: release-unit
+unit_id: cloudnative-pg
+owner: railiance-cluster
+contract_version: 1.0.0
+data_classification: internal
+criticality: high
+composition:
+  purpose: Covers the live cloudnative-pg workloads as one release unit.
+  member_repos:
+  - repo: railiance-cluster
+    role: rollout owner
+    deployables:
+    - cnpg-controller-manager
+rollout_contract:
+  default_mode: owner-deploy
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: Deployment
+  namespace: cnpg-system
+  name: cnpg-controller-manager
+pins:
+  component:
+    name: ocm.railiance.dev/cloudnative-pg
+    version: live
+  resources: []
+  sources:
+  - name: railiance-cluster
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: aad0e7094a69682725d2c280a6e049331e6223d2

registry/release-units/external-secrets.yaml

@@ -0,0 +1,58 @@
+# No owner classification file. Recorded internal/high for this wave.
+kind: release-unit
+unit_id: external-secrets
+owner: railiance-cluster
+contract_version: 1.0.0
+data_classification: internal
+criticality: high
+composition:
+  purpose: Covers the live external-secrets workloads as one release unit.
+  member_repos:
+  - repo: railiance-cluster
+    role: rollout owner
+    deployables:
+    - eso-token-renewer
+    - external-secrets
+    - external-secrets-cert-controller
+    - external-secrets-webhook
+rollout_contract:
+  default_mode: helm-upgrade-install
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: CronJob
+  namespace: external-secrets
+  name: eso-token-renewer
+- kind: Deployment
+  namespace: external-secrets
+  name: external-secrets
+- kind: Deployment
+  namespace: external-secrets
+  name: external-secrets-cert-controller
+- kind: Deployment
+  namespace: external-secrets
+  name: external-secrets-webhook
+pins:
+  component:
+    name: ocm.railiance.dev/external-secrets
+    version: live
+  resources:
+  - name: python
+    type: ociImage
+    version: live
+    digest:
+      hashAlgorithm: SHA-256
+      normalisationAlgorithm: ociArtifactDigest/v1
+      value: sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9
+  sources:
+  - name: railiance-cluster
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: aad0e7094a69682725d2c280a6e049331e6223d2

registry/release-units/k3s.yaml

@@ -0,0 +1,67 @@
+# No owner classification file. Recorded internal/high for this wave.
+kind: release-unit
+unit_id: k3s
+owner: railiance-cluster
+contract_version: 1.0.0
+data_classification: internal
+criticality: high
+composition:
+  purpose: Covers the live k3s workloads as one release unit.
+  member_repos:
+  - repo: railiance-cluster
+    role: rollout owner
+    deployables:
+    - coredns
+    - helm-install-traefik
+    - helm-install-traefik-crd
+    - local-path-provisioner
+    - metrics-server
+    - svclb-mas-smtp-d86db2b1
+    - svclb-traefik-0c8aecaf
+    - traefik
+rollout_contract:
+  default_mode: helm-upgrade-install
+smoke_contract:
+  required:
+  - workload-ready
+rollback_contract:
+  order:
+  - owner-rollback
+workloads:
+- kind: Deployment
+  namespace: kube-system
+  name: coredns
+- kind: Job
+  namespace: kube-system
+  name: helm-install-traefik
+- kind: Job
+  namespace: kube-system
+  name: helm-install-traefik-crd
+- kind: Deployment
+  namespace: kube-system
+  name: local-path-provisioner
+- kind: Deployment
+  namespace: kube-system
+  name: metrics-server
+- kind: DaemonSet
+  namespace: kube-system
+  name: svclb-mas-smtp-d86db2b1
+- kind: DaemonSet
+  namespace: kube-system
+  name: svclb-traefik-0c8aecaf
+- kind: Deployment
+  namespace: kube-system
+  name: traefik
+pins:
+  component:
+    name: ocm.railiance.dev/k3s
+    version: live
+  resources: []
+  sources:
+  - name: railiance-cluster
+    type: git
+    version: live
+    digest:
+      hashAlgorithm: SHA-1
+      normalisationAlgorithm: gitCommit/v1
+      value: aad0e7094a69682725d2c280a6e049331e6223d2