Issuer Directory — Deployment

Audience: operators deploying Issuer Directory, the Stella Ops trust registry for CSAF publishers and VEX statement issuers.

Issuer Directory deployment follows the Stella Ops non-Kubernetes release model: Docker Compose, the Offline Kit, signed release manifests, and host/service-manager operations.

Scope: Kubernetes and Helm deployment instructions are retired. See Unsupported legacy paths.

Deployment checklist

  1. Verify the signed release manifest and Issuer Directory image digest.
  2. Configure PostgreSQL, Authority integration, and service credentials through Compose environment files or the approved host secret store.
  3. Start the service through the supported Compose profile or host service manager.
  4. Confirm startup migrations complete.
  5. Run readiness and issuer lookup health checks.
  6. Record the release manifest digest, config hash, migration result, and health output in the release evidence.

Unsupported legacy paths

Do not create Kubernetes Secrets, render Helm charts, run Helm upgrades, inspect pods, or use kubectl commands for Issuer Directory deployment.