From dbe37f7ffef3b57f29925df0cd3dc509ea1c3b82 Mon Sep 17 00:00:00 2001 From: archipelago Date: Mon, 10 Aug 2026 13:45:10 -0400 Subject: [PATCH] fix(grafana): manifest and curation move onto the fleet trust floor MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The signed catalog has homed grafana at lfg2025/grafana:10.2.0 in the fleet registry all along; the manifest still pulled Docker Hub's grafana/grafana, so the repo-mismatch guard (correctly) discarded the catalog image on every tick and warned every ~75s on every node. Registry verified to carry the image; aligning the repo path makes the already-signed catalog entry effective — no re-signing needed, no behavioural change beyond pull source. Co-Authored-By: Claude Fable 5 --- app-catalog/catalog.json | 2 +- apps/grafana/manifest.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/app-catalog/catalog.json b/app-catalog/catalog.json index 3bf07aa5..3ac01458 100644 --- a/app-catalog/catalog.json +++ b/app-catalog/catalog.json @@ -390,7 +390,7 @@ "author": "Grafana Labs", "category": "data", "tier": "recommended", - "dockerImage": "grafana/grafana:10.2.0", + "dockerImage": "source.archipelago-foundation.org/lfg2025/grafana:10.2.0", "repoUrl": "https://github.com/grafana/grafana", "containerConfig": { "ports": [ diff --git a/apps/grafana/manifest.yml b/apps/grafana/manifest.yml index 3ef6938a..77bcf662 100644 --- a/apps/grafana/manifest.yml +++ b/apps/grafana/manifest.yml @@ -5,7 +5,7 @@ app: description: Analytics and monitoring platform. Visualize metrics and create dashboards. container: - image: grafana/grafana:10.2.0 + image: source.archipelago-foundation.org/lfg2025/grafana:10.2.0 image_signature: cosign://... pull_policy: if-not-present data_uid: "472:472"