Production

defaults/main.yml

@@ -19,7 +19,7 @@ wikideck_image_pull_secrets: []
 
 # Static peer origins, at most 16. Empty means an isolated validator, not a network.
 wikideck_peers: []
-# Test/private networks only; permits private addresses AND HTTP in the app.
+# Operator-controlled test/private candidate clusters; permits private addresses AND HTTP.
 wikideck_allow_private_peers: false
 # Explicit mainnet candidate startup gates. Never set these before launch approval.
 wikideck_mainnet_launch: ""
@@ -51,6 +51,8 @@ wikideck_resources:
 wikideck_node_selector: {}
 wikideck_tolerations: []
 wikideck_affinity: {}
+# Pod-template annotations can trigger a rollout when a mutable image tag changes.
+wikideck_pod_annotations: {}
 # Trust only literal proxy source IPs/CIDRs whose edge overwrites forwarded headers.
 wikideck_trusted_proxies: []
 # Optional private operations listener; application binds it to container loopback.