Module annotations 

Annotation keys the reconciler reads/writes on owned FluxCD resources.

Constants

ALLOCATION

Peer to REQUESTOR on the same allocator-bind axis: the bare Allocation name (no namespace prefix), stamped alongside so downstream consumers that key on the Allocation identity alone (a single-namespace UI, an in-cluster label selector that already carries the namespace) don’t need to re-split REQUESTOR’s composed reference.

APP

Label / annotation key stamping which RoutingSpec.hostnames entry a routing edge (Ingress / DNSEndpoint) belongs to. Value is the entry’s app slot; a label-selector on this key slices every emitted edge for a given app regardless of hostname form. Peer to ROUTING_FORM on the routing-axis pair.

ATTESTATION_ROOT

CONTENT_HASH

EXPORT_INDEX

Index of an export inside lifetime.ephemeral.exports. Stamped on the corresponding tatara-export-worker Job + its receipt ConfigMap so the reconciler can correlate them without re-parsing the spec JSON.

GENERATION

MANAGED_BY

PID

PROCESS

RELEASED_FROM

Stamped by the reconciler when transitioning into Releasing — records which terminal-reached gate the Process came from (Attested or Failed) so handle_releasing can pick the matching ExportTrigger set + the correct post-Releasing destination (Exiting from Attested, Zombie from Failed).

REQUESTOR

Stamped by tatara-pool-reconciler::controller_allocation:: reconcile on the member Process at the moment an EphemeralAllocation transitions Queued → Bound. Value is the requestor Allocation’s <ns>/<name> qualified reference (composed through the same <ns>/<name> shape every peer substrate composer routes through — see crate::qualified_process_ref). Downstream consumers (operator dashboards, admission webhooks, audit-trail scrapers) grep for this key to answer “which allocator drove this member Process into its ephemeral overlay”.

REQUESTOR_KIND

Peer to REQUESTOR + ALLOCATION on the same allocator-bind axis: mirrors [crate::allocation::RequestorRef.kind] verbatim onto the bound member Process so consumers that dispatch on the requestor-kind axis (a GitHub-PR-scoped webhook, a scheduler-window scoped fairness gate, a per-kind quota enforcer) never have to fetch the Allocation object again.

ROLE

Labels the export-worker Jobs the reconciler emits during Releasing. Selector: tatara.pleme.io/role=export.

ROUTING_FORM

Label / annotation key stamping the routing form ("stable" | "instance") on every emitted routing edge. Value is a crate::routing::RoutingForm wire-form string; consumers filtering the two forms compare to RoutingForm::as_str, never to a bare literal.

SIGNAL