Zastava Runtime Operations Runbook - Retired

Status

This runbook is retired for active Stella Ops operations.

Stella Ops does not support Kubernetes or Helm deployments. The former Zastava runtime plane was described as an Observer DaemonSet plus Admission Webhook, which is a Kubernetes-specific deployment model and is no longer an approved product path.

Do not use this document to install DaemonSets, admission webhooks, Helm overlays, Kubernetes secrets, NetworkPolicies, or kubectl rollout procedures.

Replacement Direction

Runtime evidence for non-Kubernetes container estates must be planned through the RuntimeInstrumentation host-agent model:

• Stella Ops Linux host agent.
• Stella Ops Windows host agent.
• Shared Agent.Core contracts.
• Optional Linux sensor inputs, including Tetragon where explicitly enabled.
• Digest-gated evidence publication into the Stella Ops control plane.

The current planning record is docs/modules/runtime-instrumentation/host-agent-strategy.md. The original re-scope sprint (SPRINT_20260501_050_RuntimeInstrumentation_host_agent_strategy) is archived under docs-archive/implplan/.

Historical Note

The old Kubernetes-specific workflow remains available through git history only. Any future Zastava/runtime posture work must be re-scoped as a non-Kubernetes Linux/Windows host-agent capability before implementation.