Registry Egress | NVIDIA AI Cluster Runtime

Generated by tools/registry-inventory — do not edit by hand. Run make registry-docs to regenerate.

Every package/container registry AICR’s builds and CI reach out to, extracted from the structured build/CI sources (recipes/registry.yaml, .settings.yaml, .goreleaser.yaml / .ko.yaml, Dockerfiles, .github Actions, tools/setup-tools). This host-level summary is the browsable companion to the CODEOWNER-gated allowlist that gates these hosts in CI (tools/registry-inventory/registry-allowlist.yaml). Transitive chart-rendered image pulls are inventoried separately in the BOM (docs/user/container-images.md); the full per-record inventory (image refs, pins, provenance) is produced by make registry-inventory.

Distinct hosts (26)

Host	Package types	Directions
`apt`	apt	pull
`aws.github.io`	helm-chart-http	pull
`charts.jetstack.io`	helm-chart-http	pull
`cr.agentgateway.dev`	oci-helm-chart	pull
`dl.k8s.io`	binary-release	pull
`docker.gitea.com`	container-image	pull
`docker.io`	container-image	pull
`get.helm.sh`	binary-release	pull
`ghcr.io`	container-image, oci-helm-chart	pull, push
`github-actions`	github-action	pull
`github.com`	binary-release	pull
`helm.ngc.nvidia.com`	helm-chart-http	pull
`homebrew`	brew	pull
`jmcgrath207.github.io`	helm-chart-http	pull
`kind.sigs.k8s.io`	binary-release	pull
`kubernetes-sigs.github.io`	helm-chart-http	pull
`nvcr.io`	container-image	pull
`nvidia.github.io`	helm-chart-http	pull
`open-policy-agent.github.io`	helm-chart-http	pull
`prometheus-community.github.io`	helm-chart-http	pull
`proxy.golang.org`	go-module	pull
`public.ecr.aws`	container-image	pull
`pypi.org`	pypi	pull
`raw.githubusercontent.com`	install-script	pull
`registry.k8s.io`	oci-helm-chart	pull
`sum.golang.org`	go-module	pull

Not statically gated

These egress surfaces are known but not host-gated — the inventory is a floor, not a ceiling:

tests/uat/lib/phases.sh (helm-diff plugin + workload images assembled from shell vars)
kwok/scripts/*.sh (in-cluster registry/gitea/karpenter side-loads)
pkg/**/*.go Sigstore endpoint constants (fulcio/rekor/tuf/oidc) — see pkg/defaults/sigstore.go
GitHub workflow inline image: and docker/login-action registry inputs
tools/setup-tools: best-effort only — URLs built from shell vars are reported as warnings, not records
GitHub Actions per-OWNER trust: all uses: collapse to host github-actions, so a new third-party action owner is not gated (only SHA-pinning is enforced, by TestExternalActionsArePinned)