Operator Guide
Operator Guide
Guides for operators who run and secure Kokumi in a cluster.
The admin account, OIDC single sign-on, and sessions.
Kubernetes-native RBAC via identity-to-ServiceAccount mapping.
The Kitchen, where Kokumi keeps the settings of an installation.
The signing key, verifying artifacts with cosign, and requiring signed sources.
Image mirrors, letting nodes pull vendored images, and registry sizing.
The scanner component, the vulnerability database in air-gapped clusters, and network isolation.
Register the clusters Kokumi deploys to, and hand them to Argo CD.
Group clusters, decide who deploys there, and which Environments come first.
Verify install.yaml and the Kokumi image, and scan the image’s SBOMs.
Last updated on