From 2833115eff5e381c1bd07ee53250743d0e095052 Mon Sep 17 00:00:00 2001 From: kalvinparker <106995826+kalvinparker@users.noreply.github.com> Date: Fri, 14 Nov 2025 14:36:15 +0000 Subject: [PATCH] docs: add rendered update-flow diagram (svg asset) --- docs/assets/images/update-flow.svg | 1 + 1 file changed, 1 insertion(+) create mode 100644 docs/assets/images/update-flow.svg diff --git a/docs/assets/images/update-flow.svg b/docs/assets/images/update-flow.svg new file mode 100644 index 0000000..2197884 --- /dev/null +++ b/docs/assets/images/update-flow.svg @@ -0,0 +1 @@ +Watchtower Update FlowWatchtower Update FlowUsercmd .root.internal.actions.Updatecontainer.Clientpkg.registry.digestpkg.registry.authpkg.registryDocker EngineUserUsercmd (root)cmd (root)internal/actions.Updateinternal/actions.Updatecontainer.Clientcontainer.Clientpkg/registry/digestpkg/registry/digestpkg/registry/authpkg/registry/authpkg/registrypkg/registryDocker EngineDocker Enginetrigger runUpdatesWithNotifications()Update(client, UpdateParams)ListContainers(filter)loop[per container]IsContainerStale(container, params)PullImage (maybe)CompareDigest(container, registryAuth)GetToken(challenge)getCachedToken / storeTokennewTransport() (usesinsecure-registry /registry-ca)HEAD manifest with tokenalt[digest matches]no pull neededImagePull(image)HasNewImage -> stale/newestImageSortByDependenciesStopContainer / StartContainer (with lifecycle hooks)RemoveImageByID (cleanup)progress.Report()Tokens are cached by auth URL (realm+service+scope)ExpiresIn (seconds) sets TTL when providedTLS is secure-by-default`--registry-ca` provides PEM bundle`--registry-ca-validate` fails startup on invalid bundle \ No newline at end of file