apiVersion: "catalog.confighub.com/v1alpha1"
kind: "BaseVariantRecord"
metadata:
  name: "hashicorp-terraform-1-1-2-no-crds"
  labels:
    sourceType: "helm"
    component: "hashicorp/terraform"
    sourceVersion: "1.1.2"
    base: "no-crds"
spec:
  source:
    type: "helm"
    name: "hashicorp/terraform"
    version: "1.1.2"
    record: "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml"
    packageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2"
  baseVariant:
    name: "no-crds"
    revision: "r001"
    digest: ""
  configuration:
    format: "kubernetes-yaml"
    objects: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/release-objects.yaml"
    inventory: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/object-inventory.yaml"
    objectCount: 0
  inputs:
    fixedAtBuildTime:
      - "chart=hashicorp/terraform"
      - "version=1.1.2"
      - "base=no-crds"
      - "valuesProfile=recipes/hashicorp/terraform/1.1.2/effective-values-no-crds.yaml"
      - "namespace=default"
      - "releaseName=terraform"
      - "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
    installTime:
      -
        name: "workspaces.app.terraform.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
          name: "workspaces.app.terraform.io"
          purpose: "Terraform Workspace CRD managed outside this no-crds preset"
          sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
          sourceVariant: "default"
          suggestedSource: "kubectl apply -f <terraform-workspace-crd.yaml>"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "terraformrc"
        type: "requiredSecrets"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
            - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
          keys:
            - "credentials"
          name: "terraformrc"
          namespace: "default"
          purpose: "Terraform CLI credentials mounted at /etc/terraform/.terraformrc"
          sourcePath: "../../target-prerequisite-plan.yaml"
          suggestedSource: "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
      -
        name: "workspacesecrets"
        type: "requiredSecrets"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
            - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
          name: "workspacesecrets"
          namespace: "default"
          purpose: "Sensitive Terraform workspace variables mounted at /tmp/secrets"
          sourcePath: "../../target-prerequisite-plan.yaml"
          suggestedSource: "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
    installTimeStatus: "partly-declared"
  routing:
    routes:
      []
    targetFacts:
      status: "declared-target-facts-and-observed-action-records"
      declared:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
            name: "workspaces.app.terraform.io"
            purpose: "Terraform Workspace CRD managed outside this no-crds preset"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "kubectl apply -f <terraform-workspace-crd.yaml>"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
            keys:
              - "credentials"
            name: "terraformrc"
            namespace: "default"
            purpose: "Terraform CLI credentials mounted at /etc/terraform/.terraformrc"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
            name: "workspacesecrets"
            namespace: "default"
            purpose: "Sensitive Terraform workspace variables mounted at /tmp/secrets"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
      requirements:
        -
          category: "crd"
          name: "workspaces.app.terraform.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Terraform Workspace CRD managed outside this no-crds preset"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
            - "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml"
            - "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
        -
          category: "secret"
          name: "default/terraformrc"
          namespace: "default"
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Terraform CLI credentials mounted at /etc/terraform/.terraformrc"
          check: "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
          declarationPath: "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
          sourceVariant: ""
          sourcePath: "../../target-prerequisite-plan.yaml"
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
            - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
            - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
        -
          category: "secret"
          name: "default/workspacesecrets"
          namespace: "default"
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Sensitive Terraform workspace variables mounted at /tmp/secrets"
          check: "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
          declarationPath: "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
          sourceVariant: ""
          sourcePath: "../../target-prerequisite-plan.yaml"
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
            - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
            - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
      actions:
        -
          lane: "G/P"
          prerequisiteKind: "unknown"
          prerequisiteName: "unknown"
          actionKind: "operator-review"
          ownerClass: "operator-review"
          requiredInputs: "operator review of the runtime residue"
          evidenceRequired: "an operator decision recorded for this base/target; then a fresh G/P parity receipt for this base"
          automatic: false
          supportArtifact: "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
          sourceReceipt: "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
          rerunCommand: "npm run live-parity:run -- --recipe recipes/hashicorp/terraform/1.1.2 --base no-crds"
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          evidence:
            - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
            - "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
        -
          lane: "K"
          prerequisiteKind: "secret"
          prerequisiteName: "Secret workspacesecrets; Secret terraformrc"
          actionKind: "stage-secret"
          ownerClass: "user-stage"
          requiredInputs: "Secret workspacesecrets; Secret terraformrc"
          evidenceRequired: "the named Secret(s) present in the target namespace before apply; then a fresh K parity receipt for this base"
          automatic: false
          supportArtifact: "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
          sourceReceipt: "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
          rerunCommand: "npm run kind-parity:run -- --chart hashicorp/terraform --version 1.1.2 --base no-crds"
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          evidence:
            - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
            - "recipes/hashicorp/terraform/1.1.2/target-prerequisite-plan.yaml"
      coverage:
        state: "attached-with-observed-actions"
        reason: "3 prerequisite declarations and 2 follow-up action records are attached."
        declarationSource: "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
        nextAction: ""
    sourceRecord: "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml"
  delivery:
    literalConfigOci:
      status: "not-published-in-this-record"
      note: "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
    configHubReleaseOci:
      status: "not-recorded-for-this-base"
      note: "No current ConfigHub Space release OCI receipt is recorded for this exact base."
    argoCd: "not-recorded-for-this-base"
    flux: "not-recorded-for-this-base"
    direct: "not-recorded-for-this-base"
    historicalGitopsOciStatus: "watch"
  policy:
    profile: "catalog-standard"
    productionAdds:
      - "human-approval"
  evidence:
    renderParity: "yes"
    confighubScanOps: "yes"
    localKind: "no"
    lifecycleObserved: "todo"
    gitopsOciLive: "watch"
    liveDualParity: "watch"
    twoClusterKind: "no"
    variantPromotion: "proven"
  operations:
    resourceClass: "not-yet-classified"
    ownerClass: "not-yet-classified"
    changeCadence: "not-yet-classified"
status:
  level: "available"
  claim: "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here."
  limits:
    - "This record does not claim that the base has been uploaded to a live ConfigHub Space."
    - "The small typed install-time surface is not yet complete for every Helm base."
    - "A multi-preset installer package OCI is not the same as a single literal configuration OCI."