apps

name	target	repo · branch	status

repos

name	kind	clone url

name

clone url (ssh)

name

target

hostname (optional)

host port (docker — reachable at localhost:port; blank = ephemeral)

branch

repo

Pick a repo (register one under repos first). An app deploys a repo + branch.

deploy key (private repos — kube Secret name / docker host path; saved for later, not yet mounted)

env vars (interpolated into the repo's nori.yaml — how a homolog and a prod app on the same repo differ)

image (nori runtime)

health & readiness probes (requires an ops component in the app's nori.yaml)

code provenance (verify the app's code is signed by a trusted key on every boot)

extra hosts (docker — one per line; sibling nori containers resolve automatically)

A bare name maps to the docker host gateway (norictl serves it on the host); use name:target for an explicit IP.