Open
Description
I'm not sure if we're even running anything today.
We should consider setting up a strongly append-only copy (AR immutable tags or something like that) somewhere as isolated as possible from the main prod credentials, which serves only to sync in append-only backup of published images to a trusted location, should we ever need it.
It should not be public read, just a private backup mirror.
/sig k8s-infra
/priority important-longterm