apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "CapabilityProfileWitnessReceipt"
metadata:
  name: "external-secrets-external-secrets-default-selectablefields-kind-v1-35"
spec:
  chart: "external-secrets/external-secrets"
  version: "2.5.0"
  base: "default"
  observedAt: "2026-06-11T07:51:39Z"
  result: "pass"
  capabilityProfile:
    name: "kind-kubernetes-1.35"
    kindNodeImage: "kindest/node:v1.35.0"
    serverVersion: "v1.35.0"
  olderWatchlistProfile: "kind-kubernetes-1.30"
  olderWatchlistIssue: "Kubernetes 1.30 omitted spec.versions[0].selectableFields on the rendered ExternalSecret CRD after apply."
  renderedObjectSet:
    path: "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/release-objects.yaml"
    sha256: "f1c832a9af788c9d2a7a0b066d76a7d8af253d83f5b0fa39c1aa91271230d3db"
  run:
    mode: "single-kind-cluster-crd-server-apply-witness"
    cluster: "hx-select-external-sec-78gra"
    kubeContext: "kind-hx-select-external-sec-78gra"
    cleanup:
      result: "pass"
      detail: "Deleting cluster \"hx-select-external-sec-78gra\" ...\nDeleted nodes: [\"hx-select-external-sec-78gra-control-plane\"]"
  renderedSelectableFields:
    -
      name: "externalsecrets.external-secrets.io"
      versions:
        -
          name: "v1"
          selectableFields:
            - ".spec.refreshInterval"
            - ".spec.secretStoreRef.kind"
            - ".spec.secretStoreRef.name"
            - ".spec.target.name"
        -
          name: "v1beta1"
          selectableFields:
            []
  liveSelectableFields:
    -
      name: "externalsecrets.external-secrets.io"
      versions:
        -
          name: "v1"
          selectableFields:
            - ".spec.refreshInterval"
            - ".spec.secretStoreRef.kind"
            - ".spec.secretStoreRef.name"
            - ".spec.target.name"
        -
          name: "v1beta1"
          selectableFields:
            []
  comparison:
    -
      crd: "externalsecrets.external-secrets.io"
      version: "v1"
      result: "pass"
      renderedSelectableFields:
        - ".spec.refreshInterval"
        - ".spec.secretStoreRef.kind"
        - ".spec.secretStoreRef.name"
        - ".spec.target.name"
      liveSelectableFields:
        - ".spec.refreshInterval"
        - ".spec.secretStoreRef.kind"
        - ".spec.secretStoreRef.name"
        - ".spec.target.name"
    -
      crd: "externalsecrets.external-secrets.io"
      version: "v1beta1"
      result: "pass"
      renderedSelectableFields:
        []
      liveSelectableFields:
        []
  checks:
    -
      name: "kind-create"
      result: "pass"
      detail: "created hx-select-external-sec-78gra with v1.35.0"
    -
      name: "apply-selectablefields-crds"
      result: "pass"
      detail: "applied and established 1 selectableFields CRD(s)"
    -
      name: "compare-live-selectablefields"
      result: "pass"
      detail: "2 CRD version selectableFields comparison(s) passed"
  notClaimed:
    - "strict rendered/live parity on Kubernetes 1.30"
    - "all Kubernetes distributions preserve selectableFields"
    - "workload runtime health; this witness only checks the CRD capability/profile behavior"