For the complete documentation index, see llms.txt.

Procedural

Guarded Entrypoint for Custom Assembly
How Guarded Entrypoint lets a Custom Assembly image resolve secrets, run preflight checks, and override its command at container start, and how to turn it on.
Manage Custom Assembly Overlays with chainctl
How to use chainctl to create overlays and bind them to specific tags of a repository, or to every repository in an organization or folder.
Adding a package to a Chainguard Container
Choose how to add a package to a Chainguard Container, find the package name, apply the change, and confirm the package reached the finished image.
Provision Chainguard users with SCIM
How SCIM provisioning to the Chainguard platform behaves, and how to manage the provisioning connection over its lifetime.
How to integrate Okta SSO with Chainguard
Procedural tutorial on how to create an Okta app integration
Disallowing non-default capabilities
Using Policy Controller to prevent running pods with extra capabilities
Disallowing privileged pods
Using Policy Controller to prevent running privileged pods