Documentation

Welcome to the Kokumi documentation.

Kokumi is a Kubernetes operator for OCI-first GitOps config delivery that preserves the review and traceability properties of Git. As OCI becomes the standard mechanism for shipping Kubernetes config, most tools trade away Git’s human review and audit trail to get there. Kokumi keeps both: OCI artifacts as the immutable source of truth, with approval gates and full render visibility before anything reaches your cluster.

It models your delivery workflow as composable primitives:

Resource	Role
Product	Complete definition of an application: source, rendering, base values and patches
Recipe	Rendering profile instructions (planned, not yet implemented)
Order	Variant of a Product, such as one environment, holding only what differs
Preparation	Immutable OCI artifact rendered from an Order
Serving	Active deployment selecting exactly one Preparation
Registry	A connection to an OCI registry: its URL prefix, credentials, TLS settings and scheme
Repository	A catalog entry: an OCI repository to browse and create Products from