platform-exemptions-automation

Type: regulative

Decision

Platform automation Docker images must be hosted outside the landing zones.

Why

Without an external registry, each landing zone needs persistent image hosting, adding always-on cost before any workload exists.

Violations

• Automation image pulled from a registry the platform pays to host.
• Registry provisioned inside a landing zone to host platform images.

Anchor

no-fixed-cost

Implements

• platform

Files

• landing-zones/bicep/modules/landingzone-automation.bicep
• landing-zones/bicep/modules/base/jobs-cron.bicep

Links

• azure-native-services-only (constrains) — GitHub Container Registry sits outside ARM, so it is a dependency the platform consumes rather than a service it adopts.

← Back to knowledge graph