apiVersion: "catalog.confighub.com/v1alpha1" kind: "BaseVariantRecord" metadata: name: "prometheus-community-kube-prometheus-stack-85-3-3-no-crds" labels: sourceType: "helm" component: "prometheus-community/kube-prometheus-stack" sourceVersion: "85.3.3" base: "no-crds" spec: source: type: "helm" name: "prometheus-community/kube-prometheus-stack" version: "85.3.3" record: "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml" packageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3" baseVariant: name: "no-crds" revision: "r001" digest: "6566541a9f0bf6dfee41fafac9aef3099a6d6cfe2a2fe4e218ef08d2d754bec0" configuration: format: "kubernetes-yaml" objects: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" inventory: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/object-inventory.yaml" objectCount: 114 inputs: fixedAtBuildTime: - "chart=prometheus-community/kube-prometheus-stack" - "version=85.3.3" - "base=no-crds" - "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values-no-crds.yaml" - "namespace=monitoring" - "releaseName=kube-prometheus-stack" - "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" installTime: - name: "alertmanagerconfigs.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagerconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "alertmanagers.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "podmonitors.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "podmonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "probes.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "probes.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "prometheusagents.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusagents.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "prometheuses.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheuses.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "prometheusrules.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusrules.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "scrapeconfigs.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "scrapeconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "servicemonitors.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "servicemonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "thanosrulers.monitoring.coreos.com" type: "requiredCRDs" required: true details: deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "thanosrulers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - name: "kube-prometheus-stack-admission" type: "requiredSecrets" required: true details: deliveryLanes: - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" keys: - "ca" - "cert" - "key" name: "kube-prometheus-stack-admission" namespace: "monitoring" purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" installTimeStatus: "partly-declared" routing: routes: - routeName: "preflight-or-presync-crd-apply" quirkClass: "crd-install" lifecyclePhase: "pre-apply" actionKind: "install-crd" executionMode: "user-executes" automatic: false whoRuns: "Handled — the generated package script applies the CRDs first" operatingDetails: "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload." command: "kubectl apply --server-side -f # placeholder, not verified" disposition: "observed" delta: "resolved" reason: "the package carries and applies the 10 CRDs before the workload (observed live)" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: true argoCd: "PreSync · sync-wave -2 · ServerSideApply" flux: "HelmRelease .spec.install.crds=Create (or apply CRDs first)" argoCdSnippet: "metadata:\n annotations:\n argocd.argoproj.io/hook: PreSync\n argocd.argoproj.io/hook-delete-policy: HookSucceeded\n argocd.argoproj.io/sync-wave: \"-2\"\n argocd.argoproj.io/sync-options: ServerSideApply=true" runners: direct: implementation: "kubectl apply --server-side -f # placeholder, not verified" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "preserve-cleanup-policy" quirkClass: "hook-delete-policy" lifecyclePhase: "observe" actionKind: "accept-target-policy" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — an explicit, receipted step" operatingDetails: "The run removes both completed Jobs and their temporary RBAC objects." command: "" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: false argoCd: "none — your cluster handles it" flux: "none — your cluster handles it" argoCdSnippet: "" runners: direct: implementation: "Your delivery — an explicit, receipted step" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "The controller paused before upgrade while the two completed hook Jobs were removed, then replaced them during the staged upgrade." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "The controller paused before upgrade while the two completed hook Jobs were removed, then replaced them during the staged upgrade." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "postsync-check-or-observation" quirkClass: "hook-phase" lifecyclePhase: "post-apply" actionKind: "run-check" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — a post-apply check (receipted)" operatingDetails: "The package runs the chart's webhook patch Job after the webhook objects exist." command: "" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: true argoCd: "PostSync" flux: "post-apply Job / follow-on Kustomization" argoCdSnippet: "metadata:\n annotations:\n argocd.argoproj.io/hook: PostSync\n argocd.argoproj.io/hook-delete-policy: HookSucceeded" runners: direct: implementation: "Your delivery — a post-apply check (receipted)" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "preflight-or-presync" quirkClass: "hook-phase" lifecyclePhase: "preflight" actionKind: "run-preflight" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — a preflight step before apply (receipted)" operatingDetails: "The package runs the chart's certificate creation Job before applying the admission webhooks." command: "kubectl apply -f ; kubectl wait --for=condition=complete job/" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: true argoCd: "PreSync · sync-wave -1" flux: "apply before the release (Kustomization dependsOn)" argoCdSnippet: "metadata:\n annotations:\n argocd.argoproj.io/hook: PreSync\n argocd.argoproj.io/hook-delete-policy: HookSucceeded\n argocd.argoproj.io/sync-wave: \"-1\"" runners: direct: implementation: "kubectl apply -f ; kubectl wait --for=condition=complete job/" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "upgrade-action-with-receipt" quirkClass: "hook-phase" lifecyclePhase: "pre-apply" actionKind: "run-job" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — a GitOps PreSync/PostSync or cub action (receipted)" operatingDetails: "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks." command: "kubectl apply -f ; kubectl wait --for=condition=complete job/" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: true argoCd: "PreSync" flux: "apply before the release (Kustomization dependsOn)" argoCdSnippet: "metadata:\n annotations:\n argocd.argoproj.io/hook: PreSync\n argocd.argoproj.io/hook-delete-policy: HookSucceeded" runners: direct: implementation: "kubectl apply -f ; kubectl wait --for=condition=complete job/" status: "not-run" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "Argo CD moved from the 85.3.3 staged digest to 86.1.0 and reran the ordered CRD, preparation, workload, and finish stages." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "Flux moved from the 85.3.3 staged digest to 86.1.0 and reran the four ordered Kustomizations." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "preserve-ordering" quirkClass: "hook-weight-ordering" lifecyclePhase: "pre-apply" actionKind: "preserve-ordering" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — an explicit, receipted step" operatingDetails: "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." command: "" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: false argoCd: "no extra hook — keep CRDs before dependent objects" flux: "no extra hook — make sure CRDs are applied before workloads" argoCdSnippet: "" runners: direct: implementation: "Your delivery — an explicit, receipted step" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "target-facts-or-preflight" quirkClass: "target-facts" lifecyclePhase: "preflight" actionKind: "stage-target-facts" executionMode: "user-executes" automatic: false whoRuns: "Handled — the recorded package script creates or checks this prerequisite" operatingDetails: "The certificate Job creates the required admission Secret with ca, cert, and key." command: "# create the required target facts (Secret/StorageClass/etc.) before apply" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: false argoCd: "none — supply the inputs before sync" flux: "none — supply the inputs before sync" argoCdSnippet: "" runners: direct: implementation: "# create the required target facts (Secret/StorageClass/etc.) before apply" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" - routeName: "webhook-readiness-observation" quirkClass: "webhook-readiness" lifecyclePhase: "observe" actionKind: "observe-webhook" executionMode: "user-executes" automatic: false whoRuns: "Your delivery — an explicit, receipted step" operatingDetails: "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." command: "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations" disposition: "observed" delta: "kept" reason: "" routeSourceVersion: "85.3.3" evidence: - "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml" - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml" - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" - "runs/kps-gitops-lifecycle-proof/receipt.yaml" nextAction: "" evidenceRequired: "already has a live receipt; keep it fresh when chart, base, or cluster version changes" sourceDrift: "" gitOps: emitsControllerStep: false argoCd: "wait for the certificate handoff, then observe webhook and workload health after sync" flux: "wait for the certificate handoff, then run post-apply webhook and workload health checks" argoCdSnippet: "" runners: direct: implementation: "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations" status: "pass" evidence: - "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" argoCd: implementation: "One staged OCI root Kustomization ordered CRDs, preparation, workload, and finish with Argo CD sync waves." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" flux: implementation: "One OCIRepository fed four Flux Kustomizations ordered with dependsOn." status: "pass" evidence: - "runs/kps-gitops-lifecycle-proof/receipt.yaml" targetFacts: status: "declared-target-facts" declared: requiredCRDs: - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagerconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "podmonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "probes.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusagents.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheuses.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusrules.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "scrapeconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "servicemonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "thanosrulers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" requiredSecrets: - deliveryLanes: - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" keys: - "ca" - "cert" - "key" name: "kube-prometheus-stack-admission" namespace: "monitoring" purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" requirements: - category: "crd" name: "alertmanagerconfigs.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "alertmanagers.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "podmonitors.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "probes.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "prometheusagents.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "prometheuses.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "prometheusrules.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "scrapeconfigs.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "servicemonitors.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "crd" name: "thanosrulers.monitoring.coreos.com" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator CRD managed outside this no-crds preset" check: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packageSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" packagePath: "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" - "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - category: "secret" name: "monitoring/kube-prometheus-stack-admission" namespace: "monitoring" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" check: "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" declarationPath: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" sourceVariant: "" sourcePath: "" deliveryLanes: - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" actions: [] coverage: state: "attached" reason: "11 target prerequisites declared by this base." declarationSource: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" nextAction: "" sourceRecord: "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml" delivery: literalConfigOci: status: "not-published-in-this-record" note: "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." configHubReleaseOci: status: "not-recorded-for-this-base" note: "No current ConfigHub Space release OCI receipt is recorded for this exact base." argoCd: "not-recorded-for-this-base" flux: "not-recorded-for-this-base" direct: "not-recorded-for-this-base" historicalGitopsOciStatus: "yes" policy: profile: "catalog-standard" productionAdds: - "human-approval" normalSet: "baseline" evidence: renderParity: "yes" confighubScanOps: "yes" localKind: "yes" lifecycleObserved: "yes" gitopsOciLive: "yes" liveDualParity: "yes" twoClusterKind: "todo" variantPromotion: "proven" lifecycleDirectFreshInstall: "yes" lifecycleDirectFreshInstallReceipt: "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" lifecycleArgoCd: "fresh-install-and-upgrade-pass" lifecycleFlux: "fresh-install-and-upgrade-pass" lifecycleGitOpsReceipt: "runs/kps-gitops-lifecycle-proof/receipt.yaml" lifecycleGitOpsInstallArtifactDigest: "sha256:0e37d8b94457ff9f13b77fd5898a18981cfbc4c8f879fc45e07bf2e306ad9e59" lifecycleGitOpsUpgradeArtifactDigest: "sha256:f1213d6e8ce657b672bd341eb266d89ac95908d674df1375f9e0eef4dd787513" lifecycleUpgrade: "85.3.3-to-86.1.0-pass" lifecycleUpgradeFromVersion: "85.3.3" lifecycleUpgradeToVersion: "86.1.0" operations: changeCadence: "planned-service-release" ownerClass: "platform-service-team" resourceClass: "system-service" classificationSource: "config-catalog/operational-class-examples.yaml" classificationReason: "Monitoring is shared by many workloads, so a platform service team owns it and introduces changes more deliberately." liveSpace: "prometheus-community-kube-prometheus-stack-85-3-3-no-crds" target: ownerClass: "platform-service-team" scope: "shared-service-namespace" selection: "Install on one non-production cluster first, then move the reviewed service release to the remaining clusters." gates: normalSet: "baseline" productionSet: "approvalRequired" rollout: limit: "Fresh install passed on one kind cluster; the chart upgrade and multi-cluster wave have not run." method: "pilot-cluster-then-service-wave" sequence: - "non-production pilot" - "production service wave" status: "fresh-install-observed" status: level: "available" claim: "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here." limits: - "This record does not claim that the base has been uploaded to a live ConfigHub Space." - "The small typed install-time surface is not yet complete for every Helm base." - "A multi-preset installer package OCI is not the same as a single literal configuration OCI."