apiVersion: "catalog.confighub.com/v1alpha1"
kind: "BaseVariantRecord"
metadata:
  name: "kyverno-kyverno-3-8-1-no-crds"
  labels:
    sourceType: "helm"
    component: "kyverno/kyverno"
    sourceVersion: "3.8.1"
    base: "no-crds"
spec:
  source:
    type: "helm"
    name: "kyverno/kyverno"
    version: "3.8.1"
    record: "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml"
    packageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.1"
  baseVariant:
    name: "no-crds"
    revision: "r001"
    digest: ""
  configuration:
    format: "kubernetes-yaml"
    objects: "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/release-objects.yaml"
    inventory: "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/object-inventory.yaml"
    objectCount: 0
  inputs:
    fixedAtBuildTime:
      - "chart=kyverno/kyverno"
      - "version=3.8.1"
      - "base=no-crds"
      - "valuesProfile=recipes/kyverno/kyverno/3.8.1/effective-values-no-crds.yaml"
      - "namespace=default"
      - "releaseName=kyverno"
      - "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}"
    installTime:
      -
        name: "cleanuppolicies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "cleanuppolicies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "clustercleanuppolicies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "clustercleanuppolicies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "clusterpolicies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "clusterpolicies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "globalcontextentries.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "globalcontextentries.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "policyexceptions.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "policyexceptions.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "updaterequests.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "updaterequests.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "clusterephemeralreports.reports.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "clusterephemeralreports.reports.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "ephemeralreports.reports.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "ephemeralreports.reports.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "clusterpolicyreports.wgpolicyk8s.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "clusterpolicyreports.wgpolicyk8s.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "policyreports.wgpolicyk8s.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "policyreports.wgpolicyk8s.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "deletingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "deletingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "generatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "generatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "imagevalidatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "imagevalidatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "mutatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "mutatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "namespaceddeletingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "namespaceddeletingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "namespacedgeneratingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "namespacedgeneratingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "namespacedimagevalidatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "namespacedimagevalidatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "namespacedmutatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "namespacedmutatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "namespacedvalidatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "namespacedvalidatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "policyexceptions.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "policyexceptions.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      -
        name: "validatingpolicies.policies.kyverno.io"
        type: "requiredCRDs"
        required: true
        details:
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          name: "validatingpolicies.policies.kyverno.io"
          purpose: "Kyverno CRD managed outside this no-crds base"
          sourceVariant: "default"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
    installTimeStatus: "partly-declared"
  routing:
    routes:
      -
        routeName: "delete-cleanup-policy"
        quirkClass: "hook-delete-policy"
        lifecyclePhase: "observe"
        actionKind: "accept-target-policy"
        executionMode: "target-owned"
        automatic: false
        whoRuns: "Your cluster — at uninstall, automatically"
        operatingDetails: ""
        command: ""
        disposition: "observed"
        delta: "kept"
        reason: ""
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: false
          argoCd: "none — your cluster handles it"
          flux: "none — your cluster handles it"
          argoCdSnippet: ""
        runners:
          direct:
            implementation: "Your cluster — at uninstall, automatically"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "none — your cluster handles it"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "none — your cluster handles it"
            status: "mapping-only"
            evidence:
              []
      -
        routeName: "preserve-cleanup-policy"
        quirkClass: "hook-delete-policy"
        lifecyclePhase: "observe"
        actionKind: "accept-target-policy"
        executionMode: "target-owned"
        automatic: false
        whoRuns: "Your cluster — at uninstall, automatically"
        operatingDetails: ""
        command: ""
        disposition: "observed"
        delta: "kept"
        reason: ""
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: false
          argoCd: "none — your cluster handles it"
          flux: "none — your cluster handles it"
          argoCdSnippet: ""
        runners:
          direct:
            implementation: "Your cluster — at uninstall, automatically"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "none — your cluster handles it"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "none — your cluster handles it"
            status: "mapping-only"
            evidence:
              []
      -
        routeName: "upgrade-action-with-receipt"
        quirkClass: "hook-phase"
        lifecyclePhase: "pre-apply"
        actionKind: "run-job"
        executionMode: "user-executes"
        automatic: false
        whoRuns: "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)"
        operatingDetails: ""
        command: "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>"
        disposition: "observed"
        delta: "kept"
        reason: ""
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: true
          argoCd: "PreSync"
          flux: "apply before the release (Kustomization dependsOn)"
          argoCdSnippet: "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PreSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
        runners:
          direct:
            implementation: "kubectl apply -f <action-job>; kubectl wait --for=condition=complete job/<name>"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "PreSync"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "apply before the release (Kustomization dependsOn)"
            status: "mapping-only"
            evidence:
              []
      -
        routeName: "explicit-test-check"
        quirkClass: "hook-test"
        lifecyclePhase: "observe"
        actionKind: "run-test"
        executionMode: "user-executes"
        automatic: false
        whoRuns: "Opt-in check — run from CI or on demand (tests are explicit by design)"
        operatingDetails: ""
        command: "# run the chart's test/check (helm test equivalent)"
        disposition: "observed"
        delta: "kept"
        reason: ""
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: true
          argoCd: "PostSync test Job (Argo has no native helm test)"
          flux: "HelmRelease .spec.test.enable=true"
          argoCdSnippet: "metadata:\n  annotations:\n    argocd.argoproj.io/hook: PostSync\n    argocd.argoproj.io/hook-delete-policy: HookSucceeded"
        runners:
          direct:
            implementation: "# run the chart's test/check (helm test equivalent)"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "PostSync test Job (Argo has no native helm test)"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "HelmRelease .spec.test.enable=true"
            status: "mapping-only"
            evidence:
              []
      -
        routeName: "preserve-ordering"
        quirkClass: "hook-weight-ordering"
        lifecyclePhase: "pre-apply"
        actionKind: "preserve-ordering"
        executionMode: "target-owned"
        automatic: false
        whoRuns: "Your applier — must apply CRDs before dependent objects"
        operatingDetails: ""
        command: ""
        disposition: "observed"
        delta: "reduced"
        reason: "CRD-first ordering is not needed in a base that installs no CRDs"
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: false
          argoCd: "no extra hook — keep CRDs before dependent objects"
          flux: "no extra hook — make sure CRDs are applied before workloads"
          argoCdSnippet: ""
        runners:
          direct:
            implementation: "Your applier — must apply CRDs before dependent objects"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "no extra hook — keep CRDs before dependent objects"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "no extra hook — make sure CRDs are applied before workloads"
            status: "mapping-only"
            evidence:
              []
      -
        routeName: "target-facts-or-preflight"
        quirkClass: "target-facts"
        lifecyclePhase: "preflight"
        actionKind: "stage-target-facts"
        executionMode: "user-executes"
        automatic: false
        whoRuns: "Prerequisite — supply once (Secret / CRD / storage), like values"
        operatingDetails: ""
        command: "# create the required target facts (Secret/StorageClass/etc.) before apply"
        disposition: "observed"
        delta: "strengthened"
        reason: "this base needs 22 CRDs supplied before deploy (the default base installs them for you)"
        routeSourceVersion: "3.8.1"
        evidence:
          - "data/hook-lifecycle/receipt-index.csv"
          - "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml"
        nextAction: ""
        evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes"
        sourceDrift: ""
        gitOps:
          emitsControllerStep: false
          argoCd: "none — supply the inputs before sync"
          flux: "none — supply the inputs before sync"
          argoCdSnippet: ""
        runners:
          direct:
            implementation: "# create the required target facts (Secret/StorageClass/etc.) before apply"
            status: "not-run"
            evidence:
              []
          argoCd:
            implementation: "none — supply the inputs before sync"
            status: "mapping-only"
            evidence:
              []
          flux:
            implementation: "none — supply the inputs before sync"
            status: "mapping-only"
            evidence:
              []
    targetFacts:
      status: "declared-target-facts"
      declared:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "cleanuppolicies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "clustercleanuppolicies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "clusterpolicies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "globalcontextentries.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "policyexceptions.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "updaterequests.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "clusterephemeralreports.reports.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "ephemeralreports.reports.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "clusterpolicyreports.wgpolicyk8s.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "policyreports.wgpolicyk8s.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "deletingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "generatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "imagevalidatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "mutatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "namespaceddeletingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "namespacedgeneratingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "namespacedimagevalidatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "namespacedmutatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "namespacedvalidatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "policyexceptions.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "validatingpolicies.policies.kyverno.io"
            purpose: "Kyverno CRD managed outside this no-crds base"
            sourceVariant: "default"
            packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
            packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      requirements:
        -
          category: "crd"
          name: "cleanuppolicies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "clustercleanuppolicies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "clusterpolicies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "globalcontextentries.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "policyexceptions.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "updaterequests.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "clusterephemeralreports.reports.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "ephemeralreports.reports.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "clusterpolicyreports.wgpolicyk8s.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "policyreports.wgpolicyk8s.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "deletingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "generatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "imagevalidatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "mutatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "namespaceddeletingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "namespacedgeneratingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "namespacedimagevalidatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "namespacedmutatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "namespacedvalidatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "policyexceptions.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
        -
          category: "crd"
          name: "validatingpolicies.policies.kyverno.io"
          namespace: ""
          requiredBefore: "apply"
          freshness:
            policy: "recheck-before-apply"
            maxAge: "one-apply"
          purpose: "Kyverno CRD managed outside this no-crds base"
          check: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml"
          packagePath: "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
          declarationPath: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
          sourceVariant: "default"
          sourcePath: ""
          deliveryLanes:
            - "regularHelm"
            - "cubInstallerApply"
            - "configHubKubectlApply"
            - "configHubOciArgo"
          evidence:
            - "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
            - "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml"
      actions:
        []
      coverage:
        state: "attached"
        reason: "22 target prerequisites declared by this base."
        declarationSource: "recipes/kyverno/kyverno/3.8.1/variants/no-crds/variant.yaml"
        nextAction: ""
    sourceRecord: "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml"
  delivery:
    literalConfigOci:
      status: "not-published-in-this-record"
      note: "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt."
    configHubReleaseOci:
      status: "not-recorded-for-this-base"
      note: "No current ConfigHub Space release OCI receipt is recorded for this exact base."
    argoCd: "not-recorded-for-this-base"
    flux: "not-recorded-for-this-base"
    direct: "not-recorded-for-this-base"
    historicalGitopsOciStatus: "yes"
  policy:
    profile: "catalog-standard"
    productionAdds:
      - "human-approval"
  evidence:
    renderParity: "yes"
    confighubScanOps: "yes"
    localKind: "yes"
    lifecycleObserved: "todo"
    gitopsOciLive: "yes"
    liveDualParity: "yes"
    twoClusterKind: "yes"
    variantPromotion: "proven"
  operations:
    resourceClass: "not-yet-classified"
    ownerClass: "not-yet-classified"
    changeCadence: "not-yet-classified"
status:
  level: "available"
  claim: "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here."
  limits:
    - "This record does not claim that the base has been uploaded to a live ConfigHub Space."
    - "The small typed install-time surface is not yet complete for every Helm base."
    - "A multi-preset installer package OCI is not the same as a single literal configuration OCI."
