Skip to content

docs: restore Scarf gateway disclosure (FB-1354) - #30

Merged
dig-whois merged 4 commits into
mainfrom
fb-1354-scarf-v2
Jul 20, 2026
Merged

docs: restore Scarf gateway disclosure (FB-1354)#30
dig-whois merged 4 commits into
mainfrom
fb-1354-scarf-v2

Conversation

@dig-whois

@dig-whois dig-whois commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

Summary

  • restore Scarf download/company badges and the README pixel
  • advertise the Firebolt-owned OCI gateway for chart and default engine-image pulls
  • change the public default engine repository to oci.firebolt.io/firebolt-db/engine
  • keep CI and local-development engine pulls on GHCR so they do not generate Scarf analytics
  • document source-IP handling and direct-GHCR opt-outs
  • mirror oci.firebolt.io in Kind for explicit testing of shipped defaults

Opt out

To bypass Scarf completely, install from oci://ghcr.io/firebolt-db/helm-charts/firebolt-instance and set engineSpec.image.repository=ghcr.io/firebolt-db/engine. Any custom engine repository remains supported unchanged.

Firebolt-managed compute deployments already set engine repositories to the internal ECR mirror and therefore bypass Scarf.

Test plan

  • make docs
  • make lint
  • make docs-check
  • verify the shipped default engine uses oci.firebolt.io
  • verify CI and values-dev.yaml render the engine from GHCR
  • verify custom engine repository overrides are preserved
  • validate changed shell scripts with bash -n

DNS for oci.firebolt.io and px.firebolt.io is intentionally unchanged.


Note

Medium Risk
Changing the default engine image host affects every install that does not override the repository, adding reliance on the Scarf gateway for pulls (with documented GHCR bypass). Runtime behavior is unchanged aside from pull path and analytics.

Overview
Restores Scarf disclosure and routes community installs through Firebolt’s OCI gateway for chart installs and default engine image pulls, while keeping contributor/CI paths on GHCR.

The chart default engineSpec.image.repository changes from ghcr.io/firebolt-db/engine to oci.firebolt.io/firebolt-db/engine. User-facing docs and README now describe installing from oci://oci.firebolt.io/..., what Scarf records (version/platform; not chart values or query data), source-IP handling, and how to opt out (direct GHCR chart + engineSpec.image.repository=ghcr.io/firebolt-db/engine). README adds Scarf badges, a Telemetry section, and the tracking pixel.

CI and local dev avoid Scarf: helm/values-dev.yaml and scripts/ci/values.yaml explicitly set the engine repository back to GHCR. Kind e2e tooling mirrors oci.firebolt.io alongside ghcr.io/docker.io, and load-e2e-images.sh treats oci.firebolt.io engine refs like GHCR for registry-path normalization and arch checks.

Reviewed by Cursor Bugbot for commit 14b0387. Bugbot is set up for automated code reviews on this repo. Configure here.

@fireboltdb-docs-integration

fireboltdb-docs-integration Bot commented Jul 14, 2026

Copy link
Copy Markdown

Mintlify docs preview

Docs were aggregated into the Firebolt documentation site.

Status Preview Updated (UTC)
🟢 Ready View Preview Jul 20, 2026, 9:27 AM

Mintlify may take a few minutes to finish building. This comment updates on each sync while the source PR is open.

gm42
gm42 previously approved these changes Jul 14, 2026
Advertise the Firebolt-owned gateway and badges while documenting exactly what download metadata is visible and how users can bypass Scarf.
cursor[bot]
cursor Bot previously approved these changes Jul 20, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale comment

Risk: low. Approved: Cursor Bugbot passed with no findings, Security Agent was not configured for this PR, and all CI checks are green. No additional reviewers assigned (gm42 already approved).

Open in Web View Automation 

Sent by Cursor Approval Agent: Infra Reviewer

Use the Firebolt-owned gateway for default engine downloads while documenting the direct-GHCR opt-out and keeping Kind test mirrors compatible.
@dig-whois
dig-whois dismissed stale reviews from cursor[bot] and gm42 via f9b467d July 20, 2026 08:52
cursor[bot]
cursor Bot previously approved these changes Jul 20, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale comment

Risk: medium. Approved: Cursor Bugbot passed with no findings and Security Agent was not configured for this PR. No additional reviewers assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: Infra Reviewer

Keep public chart defaults measurable while preventing test and development environments from generating download analytics.
cursor[bot]
cursor Bot previously approved these changes Jul 20, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale comment

Risk: medium. Approved: Cursor Bugbot passed with no findings and Security Agent was not configured for this PR. No additional reviewers assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: Infra Reviewer

Describe repository selection directly without embedding telemetry rollout rationale in development and CI configuration.

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Risk: medium. Approved: Cursor Bugbot passed with no findings and Security Agent was not configured for this PR. No additional reviewers assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: Infra Reviewer

@dig-whois
dig-whois merged commit c6208d8 into main Jul 20, 2026
11 checks passed
@dig-whois
dig-whois deleted the fb-1354-scarf-v2 branch July 20, 2026 09:37
@fireboltdb-docs-integration

Copy link
Copy Markdown

Packdb docs aggregation ready for review

Docs were merged to main and aggregated into packdb.

Squash-merge the packdb PR into master to publish the docs. Urgent fixes can be cherry-picked to the active release/packdb-* branch like any other docs change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants