apiVersion: "catalog.confighub.com/v1alpha1"
kind: "BaseVariantRecord"
metadata:
  name: "cloudnative-pg-cloudnative-pg-0-29-0-default"
  labels:
    sourceType: "helm"
    component: "cloudnative-pg/cloudnative-pg"
    sourceVersion: "0.29.0"
    base: "default"
spec:
  source:
    type: "helm"
    name: "cloudnative-pg/cloudnative-pg"
    version: "0.29.0"
    record: "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
    packageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudnative-pg-cloudnative-pg:0.29.0@sha256:e93ea31c853c4189fe2a553a452221a9f79f82d89f5526f234ba130215731178"
    selection:
      name: "default"
      kind: "catalog-preset"
      provider: "Config Workshop"
      record: "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
  baseVariant:
    name: "default"
    revision: "r001"
    digest: "8c21ef9be6a5c549ed6773c206fc99e6918bc727587a48eefad0517f0b3d6a9b"
    digestRole: "helm-variant-revision"
    digestRecord: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/variant-revision.yaml"
  configuration:
    format: "kubernetes-yaml"
    objects: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/rendered/release-objects.yaml"
    inventory: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/rendered/object-inventory.yaml"
    objectCount: 22
    digest: "b11817a3879adca31331188e6ff8e77b031832c62ec22eceb86a565d827f6ea1"
    digestRole: "canonical-object-set"
    digestRecord: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/variant-revision.yaml"
  processing:
    sourceIntent:
      status: "recorded"
      record: "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
    materialization:
      method: "helm-render"
      status: "captured"
      outputDigest: "b11817a3879adca31331188e6ff8e77b031832c62ec22eceb86a565d827f6ea1"
      record: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/variant-revision.yaml"
    flattening:
      status: "decided"
      verdict: "flatten-with-routes"
      action: "retain-exact-objects-with-routes"
      scope: "cloudnative-pg/cloudnative-pg@0.29.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes"
      record: "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
    boundaries:
      - "Helm rendered the pinned chart and values into the exact objects retained by this base."
  assessment:
    stages:
      -
        id: "inspection"
        question: "What do I have?"
        answer: "Inspect the helm source, choices, locks, and any existing output before selecting a destination."
        requiredInputs:
          - "The chart and values, a rendered object set, or a package that contains them"
        catalogMatchRequired: false
        sourceIntentRequired: false
        destinationAccessRequired: false
        deploymentRequired: false
        evidenceState: "completed"
        resultState: "available"
        records:
          - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
          - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/rendered/release-objects.yaml"
          - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/rendered/object-inventory.yaml"
        nextAction: "Inspect or compare the source and exact files before choosing a destination."
      -
        id: "materialization"
        question: "What will it produce?"
        answer: "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration."
        requiredInputs:
          - "The pinned chart, version, values, namespace, release name, and render capabilities"
        catalogMatchRequired: false
        sourceIntentRequired: true
        destinationAccessRequired: false
        deploymentRequired: false
        evidenceState: "completed"
        resultState: "pass"
        records:
          - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
          - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/revisions/default/r001/variant-revision.yaml"
        nextAction: "Review the exact object set and its digest."
      -
        id: "destination"
        question: "Can this destination accept it?"
        answer: "No destination answer is available yet because target facts or lifecycle handling are incomplete."
        requiredInputs:
          - "The exact candidate configuration"
          - "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts"
        catalogMatchRequired: false
        sourceIntentRequired: true
        destinationAccessRequired: true
        deploymentRequired: false
        evidenceState: "pending"
        resultState: "pending"
        records:
          - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
        nextAction: "Choose the destination, record its facts, and resolve the required lifecycle work before apply."
      -
        id: "post-deployment"
        question: "Did it work?"
        answer: "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly."
        requiredInputs:
          - "The exact delivered revision and destination"
          - "Live controller, resource, health, runtime, drift, and rollback observations required by the claim"
        catalogMatchRequired: false
        sourceIntentRequired: true
        destinationAccessRequired: true
        deploymentRequired: true
        evidenceState: "not-run"
        resultState: "not-run"
        records:
          []
        nextAction: "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately."
  inputs:
    fixedAtBuildTime:
      - "chart=cloudnative-pg/cloudnative-pg"
      - "version=0.29.0"
      - "base=default"
      - "valuesProfile=recipes/cloudnative-pg/cloudnative-pg/0.29.0/effective-values.yaml"
      - "namespace=cnpg-system"
      - "releaseName=cloudnative-pg"
      - "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
    installTime:
      []
    installTimeStatus: "not-yet-declared"
  lifecycle:
    requirements:
      status: "gap"
      items:
        -
          id: "crd-ordering"
          origin: "base"
          type: "lifecycle-action"
          detail: "CRD ordering declaration for the 11 CloudNativePG CRDs."
        -
          id: "webhook-certificate"
          origin: "base"
          type: "lifecycle-action"
          detail: "Webhook caBundle supplied by the operator after it starts. A mutating and a validating webhook configuration render with no caBundle, and no template supplies one; the operator injects its own certificate once it runs."
        -
          id: "prune-protection"
          origin: "base"
          type: "lifecycle-action"
          detail: "Prune protection for the keep-annotated CRDs. All eleven CRDs in templates/crds/crds.yaml carry helm.sh/resource-policy: keep, so they survive an uninstall and a delivery runtime must not prune them."
      records:
        - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
        - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
    routeIntent:
      status: "gap"
      routes:
        -
          id: "crd-ordering"
          requirementRefs:
            - "crd-ordering"
          phase: "apply"
          proposedActor: "selected destination actor"
          proposedMechanism: "CRD ordering declaration for the 11 CloudNativePG CRDs."
          automatic: false
          status: "requires-destination-resolution"
          sourceStatus: "recorded-not-run"
          supportedRuntimes:
            []
          checks:
            []
          evidence:
            - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
        -
          id: "webhook-certificate"
          requirementRefs:
            - "webhook-certificate"
          phase: "observe"
          proposedActor: "the operator"
          proposedMechanism: "Webhook caBundle supplied by the operator after it starts. A mutating and a validating webhook configuration render with no caBundle, and no template supplies one; the operator injects its own certificate once it runs."
          automatic: false
          status: "requires-destination-resolution"
          sourceStatus: "recorded-not-run"
          supportedRuntimes:
            []
          checks:
            []
          evidence:
            - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
        -
          id: "prune-protection"
          requirementRefs:
            - "prune-protection"
          phase: "destination-resolution"
          proposedActor: "selected destination actor"
          proposedMechanism: "Prune protection for the keep-annotated CRDs. All eleven CRDs in templates/crds/crds.yaml carry helm.sh/resource-policy: keep, so they survive an uninstall and a delivery runtime must not prune them."
          automatic: false
          status: "requires-destination-resolution"
          sourceStatus: "recorded-not-run"
          supportedRuntimes:
            []
          checks:
            []
          evidence:
            - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
      records:
        - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
        - "recipes/cloudnative-pg/cloudnative-pg/0.29.0/publication/flattening-safety-verdict.yaml"
    targetFacts:
      status: "gap"
      declared:
        {}
      requirementRefs:
        []
      records:
        - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
    resolution:
      status: "gap"
      rule: "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest."
      records:
        []
  ownership:
    status: "partly-declared"
    sourceControlled:
      - "Fields produced from the recorded chart values and render context"
    variantControlled:
      - "Post-render object fields recorded in ConfigHub after upload"
    targetSupplied:
      []
    deliveryProtected:
      []
    records:
      - "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-29-0-default.yaml"
    rule: "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review."
  delivery:
    literalConfigOci:
      status: "published-with-receipt"
      observedReference: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bundles/catalog-cloudnative-pg-cloudnative-pg-0-29-0-default:latest@sha256:9683e15d52ffa2fd9bef63add4befb29e1d3426a9bea5fefc8843b0c1fa9089f"
      manifestDigest: "sha256:9683e15d52ffa2fd9bef63add4befb29e1d3426a9bea5fefc8843b0c1fa9089f"
      layerDigest: "sha256:fdfe2d12dc2ea7c2794bfe772366b9b18058ad4cf1ef493873de778a8d283c8d"
      objectSetSha256: "sha256:b11817a3879adca31331188e6ff8e77b031832c62ec22eceb86a565d827f6ea1"
      receipt: "data/certified-bundles/receipts/catalog/cloudnative-pg-0.29.0-default/receipt.yaml"
      receiptSha256: "sha256:106cce4a85944f35c9022efb6749732a29abdf06c67dca3566a9f28c45a471ae"
      publicationReceipt: "runs/certified-bundles/catalog-cloudnative-pg-cloudnative-pg-0-29-0-default/publication-receipt.yaml"
      publicationReceiptSha256: "sha256:bb6c677025c19c33c2da72cc3878f1b36e04b8f87880ccfd457f481acbb511b6"
      routes:
        -
          path: "data/certified-bundles/routes/catalog/cloudnative-pg-cloudnative-pg-0.29.0-default/crd-ordering.yaml"
          sha256: "sha256:705e1f02d2dcea6814fff274d005bc20cf7e8263606aa15596a634acc8fd53d7"
          role: "route: crd-ordering"
        -
          path: "data/certified-bundles/routes/catalog/cloudnative-pg-cloudnative-pg-0.29.0-default/prune-protection.yaml"
          sha256: "sha256:3fcdc6baa12f11985f28ffcbada1a98f0569adef695310b714492f69791a8ce8"
          role: "route: resource-policy-keep"
        -
          path: "data/certified-bundles/routes/catalog/cloudnative-pg-cloudnative-pg-0.29.0-default/webhook-certificate.yaml"
          sha256: "sha256:960aa62f5cc7f031a59f8b4e25d880a609ce81bcc5d6fdb91a8edc8cf40741d8"
          role: "route: plan-step webhook-certificate"
      note: "The receipt and publication receipt declare these route files; this binding does not prove a remote pullback or route execution."
    configHubReleaseOci:
      status: "not-recorded-for-this-base"
      note: "No current ConfigHub Space release OCI receipt is recorded for this exact base."
    argoCd: "not-recorded-for-this-base"
    flux: "not-recorded-for-this-base"
    direct: "not-recorded-for-this-base"
    historicalGitopsOciStatus: "todo"
  policy:
    profile: "catalog-standard"
    productionAdds:
      - "workflow-approval"
  evidence:
    renderParity: "yes"
    confighubScanOps: "todo"
    localKind: "todo"
    lifecycleObserved: "todo"
    gitopsOciLive: "todo"
    liveDualParity: "todo"
    twoClusterKind: "todo"
    variantPromotion: "missing-confighub-proof"
  operations:
    resourceClass: "not-yet-classified"
    ownerClass: "not-yet-classified"
    changeCadence: "not-yet-classified"
status:
  level: "available"
  claim: "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here."
  limits:
    - "This record does not claim that the base has been uploaded to a live ConfigHub Space."
    - "The inputs still required at installation are not yet fully recorded for every Helm configuration."
    - "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
