Module annotations 

Annotation keys the reconciler reads/writes on owned FluxCD resources.

Constants

APP

Label / annotation key stamping which RoutingSpec.hostnames entry a routing edge (Ingress / DNSEndpoint) belongs to. Value is the entry’s app slot; a label-selector on this key slices every emitted edge for a given app regardless of hostname form. Peer to ROUTING_FORM on the routing-axis pair.

ATTESTATION_ROOT

CONTENT_HASH

EXPORT_INDEX

Index of an export inside lifetime.ephemeral.exports. Stamped on the corresponding tatara-export-worker Job + its receipt ConfigMap so the reconciler can correlate them without re-parsing the spec JSON.

GENERATION

MANAGED_BY

PID

PROCESS

RELEASED_FROM

Stamped by the reconciler when transitioning into Releasing — records which terminal-reached gate the Process came from (Attested or Failed) so handle_releasing can pick the matching ExportTrigger set + the correct post-Releasing destination (Exiting from Attested, Zombie from Failed).

ROLE

Labels the export-worker Jobs the reconciler emits during Releasing. Selector: tatara.pleme.io/role=export.

ROUTING_FORM

Label / annotation key stamping the routing form ("stable" | "instance") on every emitted routing edge. Value is a crate::routing::RoutingForm wire-form string; consumers filtering the two forms compare to RoutingForm::as_str, never to a bare literal.

SIGNAL