docs(iris): MOD-19813 Agent Memory self-managed docs for the iris-identity-service subchart (chart 1.0.0)

[gudata]

Do not merge yet

Draft until redis-ai/redis-agent-memory chart 1.0.0 is published. Blocked on
redislabsdev/iris#1603 (standalone Identity
Service packaging, MOD-17627) and
redislabsdev/iris#1764 (MOD-19272), which are
themselves waiting on the iris-identity-service 1.0.0 chart release (MOD-19270). Merging
earlier would publish a contract no released chart satisfies.

What this updates

Ticket: MOD-19813 (docs tracking) · Contract source: MOD-19272 · Merge gate: MOD-19270

Chart 1.0.0 (breaking; upgrades from 0.x unsupported) consumes the published
iris-identity-service chart as a subchart instead of Memory-local templates. The self-managed
Agent Memory pages are updated to match the new operator contract:

• Object names: Identity Service objects are now <release>-iris-identity-service
  (redis-agent-memory-iris-identity-service with the default release), including the
  -control-token and -runtime-memory-dp Secrets.
• Image tags: image.tag and controlplane.image.tag are now required; the chart carries no
  defaults. The bundled Identity Service takes its image tag from the pinned subchart. Air-gapped
  mirroring instructions and tags updated.
• identityService.*: now the subchart's values contract — controlToken.* became
  control.*, config.* moved to configData, image.tag no longer required.
• External Identity Service: identityService.enabled=false with
  dataplane.identityServiceBaseURL and externalIdentityService.* is documented in the values
  tables and a new troubleshooting row.
• global.* fallbacks: global.security.profile, global.imagePullSecrets, and
  global.tls.caCertSecret reach the subchart; the chart's local values do not. The mirrored-registry
  and FIPS examples use global.*, and the render-failure rows explain the guards.
• FIPS posture: set through global.security.profile=fips; requires explicit https://
dataplane.identityServiceBaseURL and an https://
identityService.productValidation.products.memory.baseURL. New troubleshooting rows quote the
  exact render-failure messages.
• Configuration: the chart owns auth.agent_keys.introspection.base_url, credential, and
  allow_insecure_transport in the chart-rendered path and refuses hand-set values; BYO config
  example updated to the new Identity Service Service name.

Relationship to #4227

#4227 (MOD-19267) edits operations.md, prerequisites.md, and reference.md for the current
0.x contract. This PR rewrites the same FIPS and troubleshooting sections for 1.0.0 and folds
in #4227's content under the new values paths. Whichever merges second should be rebased; if #4227
merges first, this branch resolves its FIPS section to the 1.0.0 wording.

Testing

• Verified every updated name, values path, default, and render-failure message against the chart
  sources on the MOD-19272 branch (memory/helm, identity-service/helm), including
  iris-identity-service.fullname name resolution and the _helpers.tpl guard messages.
• No helm rendering run: the docs quote chart behavior, they do not template it.
• Link style and aliases unchanged; alias_check and link_check should be unaffected.

[github-actions]

Staging links:
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/authentication/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/configuration/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/deploy/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/operations/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/prerequisites/
https://redis.io/docs/staging/MOD-19272-ids-subchart-docs/operate/iris/agent-memory/self-managed/reference/

[github-actions]

🧠 Redis Memory

Found 6 related items from repository history (1 new this commit):

• PR — MOD-18825: Correct Iris self-managed docs for RAM 0.7.0 and LangCache 0.0.1

  Ticket: MOD-18825 · Control Plane OpenAPI text: [redislabsdev/iris#1648](https://github.

• PR — docs(iris): document both https endpoints for the RAM FIPS posture

  **Hold until the Agent Memory chart release that includes redislabsdev/iris#1606 is publis

• PR — MOD-17747: Add self-managed LangCache documentation

  Summary

• PR — WIP: Playbook self-managed operator docs

  MOD-19679 — Self-managed Redis Agent Playbooks operator documentation.

• Commit — MOD-17747: Fix chart-value and naming bugs found by content review

  MOD-17747: Fix chart-value and naming bugs found by content review

• Commit — docs(iris): MOD-19272 Agent Memory self-managed docs for the iris-identity-service subchart 🆕

  docs(iris): MOD-19272 Agent Memory self-managed docs for the iris-identity-service subchart

Memory updated at 77ea461