apiVersion: "catalog.confighub.com/v1alpha1"
kind: "BaseVariantRecord"
metadata:
  name: "jetstack-trust-manager-v0-22-1-default"
  labels:
    sourceType: "helm"
    component: "jetstack/trust-manager"
    sourceVersion: "v0.22.1"
    base: "default"
spec:
  source:
    type: "helm"
    name: "jetstack/trust-manager"
    version: "v0.22.1"
    record: "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml"
    packageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1"
  baseVariant:
    name: "default"
    revision: "r001"
    digest: "b2230146b96c81c8d8d8f7f031d90a72915b599d62d8dcf4ef304a08b290cb57"
  configuration:
    format: "kubernetes-yaml"
    objects: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/release-objects.yaml"
    inventory: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/object-inventory.yaml"
    objectCount: 14
  inputs:
    fixedAtBuildTime:
      - "chart=jetstack/trust-manager"
      - "version=v0.22.1"
      - "base=default"
      - "valuesProfile=recipes/jetstack/trust-manager/v0.22.1/effective-values.yaml"
      - "namespace=default"
      - "releaseName=trust-manager"
      - "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
    installTime:
      -
        name: "certificates.cert-manager.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "certificates.cert-manager.io"
          purpose: "cert-manager Certificate CRD required by trust-manager certificate.yaml"
          sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
          sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          packageSource: "package://prerequisites/target-facts/default-crds.yaml"
          packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
      -
        name: "issuers.cert-manager.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "issuers.cert-manager.io"
          purpose: "cert-manager Issuer CRD required by trust-manager certificate.yaml"
          sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
          sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          packageSource: "package://prerequisites/target-facts/default-crds.yaml"
          packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
      -
        name: "cert-manager"
        type: "requiredNamespaces"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "cert-manager"
          purpose: "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
      -
        name: "trust-manager-tls"
        type: "requiredSecrets"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          keys:
            - "tls.crt"
            - "tls.key"
          name: "trust-manager-tls"
          namespace: "default"
          purpose: "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
    installTimeStatus: "partly-declared"
  routing:
    routes:
      []
    targetFacts:
      status: "declared-target-facts"
      declared:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "certificates.cert-manager.io"
            purpose: "cert-manager Certificate CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
            packageSource: "package://prerequisites/target-facts/default-crds.yaml"
            packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "issuers.cert-manager.io"
            purpose: "cert-manager Issuer CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
            packageSource: "package://prerequisites/target-facts/default-crds.yaml"
            packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
        requiredNamespaces:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "cert-manager"
            purpose: "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            keys:
              - "tls.crt"
              - "tls.key"
            name: "trust-manager-tls"
            namespace: "default"
            purpose: "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
      requirements:
        -
          category: "crd"
          name: "certificates.cert-manager.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "cert-manager Certificate CRD required by trust-manager certificate.yaml"
          check: "package://prerequisites/target-facts/default-crds.yaml"
          packageSource: "package://prerequisites/target-facts/default-crds.yaml"
          packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
          declarationPath: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
          sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
            - "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
        -
          category: "crd"
          name: "issuers.cert-manager.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "cert-manager Issuer CRD required by trust-manager certificate.yaml"
          check: "package://prerequisites/target-facts/default-crds.yaml"
          packageSource: "package://prerequisites/target-facts/default-crds.yaml"
          packagePath: "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
          declarationPath: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
          sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
            - "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml"
        -
          category: "namespace"
          name: "cert-manager"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
          check: ""
          declarationPath: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
          sourceVariant: ""
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
        -
          category: "secret"
          name: "default/trust-manager-tls"
          namespace: "default"
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
          check: ""
          declarationPath: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
          sourceVariant: ""
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
      actions:
        []
      coverage:
        state: "attached"
        reason: "4 target prerequisites declared by this base."
        declarationSource: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
        nextAction: ""
    sourceRecord: "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml"
  delivery:
    literalConfigOci:
      status: "not-published-in-this-record"
      note: "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
    configHubReleaseOci:
      status: "not-recorded-for-this-base"
      note: "No current ConfigHub Space release OCI receipt is recorded for this exact base."
    argoCd: "not-recorded-for-this-base"
    flux: "not-recorded-for-this-base"
    direct: "not-recorded-for-this-base"
    historicalGitopsOciStatus: "watch"
  policy:
    profile: "catalog-standard"
    productionAdds:
      - "human-approval"
  evidence:
    renderParity: "yes"
    confighubScanOps: "yes"
    localKind: "no"
    lifecycleObserved: "n/a"
    gitopsOciLive: "watch"
    liveDualParity: "watch"
    twoClusterKind: "yes"
    variantPromotion: "proven"
  operations:
    resourceClass: "not-yet-classified"
    ownerClass: "not-yet-classified"
    changeCadence: "not-yet-classified"
status:
  level: "available"
  claim: "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here."
  limits:
    - "This record does not claim that the base has been uploaded to a live ConfigHub Space."
    - "The small typed install-time surface is not yet complete for every Helm base."
    - "A multi-preset installer package OCI is not the same as a single literal configuration OCI."