kubernetes Safest First: Ordering a Migration by Blast Radius, Not by Image Count The nine-registry routing queue is sorted safest-first: gcrmirror touches one scanner, quay touches OpenBao's StatefulSet, and dragonflydb — GitLab's own Redis — comes with a note that skipping it is a reasonable choice.
gitops Deploy a Suspended CronJob, Run It Once, Then Trust the Schedule A nightly job against a fresh secret is how you get pager noise at 03:15 UTC. The GitOps-safe order: deploy suspended, verify by hand, then unsuspend.
