# Chart Evidence Router

Generated. Do not edit by hand.

~~~sh
npm run chart:evidence-router
npm run chart:evidence-router:verify
~~~

This is a per-chart routing index for the top-100 catalog corpus. It does not
define chart status. For status, use the linked source rows:

| Question | Source |
| --- | --- |
| Can a Helm user try this chart? | [../chart-use-guide/chart-use-guide.csv](../chart-use-guide/chart-use-guide.csv) |
| What works, what needs prerequisites, what needs operator review, and what is blocked? | [../top100-user-readiness/readiness.csv](../top100-user-readiness/readiness.csv) |
| Which chart/base proof lanes have receipts? | [../outcome-coverage/base-outcomes.csv](../outcome-coverage/base-outcomes.csv) |
| Which hooks or source quirks are routed? | [../hook-coverage/top100-hook-coverage.csv](../hook-coverage/top100-hook-coverage.csv), [../quirk-work-queue/top100-queue.csv](../quirk-work-queue/top100-queue.csv) |
| Which production decisions or live receipts exist? | [../production-support-decisions/decisions.csv](../production-support-decisions/decisions.csv), [../runtime-gitops/receipt-index.csv](../runtime-gitops/receipt-index.csv), [../live-helm-confighub-compare/summary.csv](../live-helm-confighub-compare/summary.csv), [../gitops-health-residue/summary.md](../gitops-health-residue/summary.md) |

Use [router.csv](./router.csv) when you know the chart name and need the
catalog path, base rows, variant revisions, receipts, hook route, quirk route,
and decision files in one place.

## Routes

| Chart | User status | First base | Evidence rows | Hooks and quirks | Decisions and receipts | Next action |
| --- | --- | --- | --- | --- | --- | --- |
| [argo-cd/argo-cd@9.5.15](../../recipes/argo-cd/argo-cd/9.5.15/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;no-crds`<br>[variants 1](../../recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/argo-cd-argo-cd/support-decision.yaml)<br>GitOps `no-crds:Argo CD OCI:blocked`<br>[GitOps receipts](../runtime-gitops/receipts/argo-cd-argo-cd/no-crds/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/argo-cd-argo-cd-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/argo-cd-argo-cd-no-crds/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [bitnami/mongodb@19.0.7](../../recipes/bitnami/mongodb/19.0.7/CATALOG.md) | `ready-to-try` | `existing-secret-replicaset` | coverage `covered`<br>bases `existing-secret-replicaset;static-passwords`<br>[variants 1](../../recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/variant-revision.yaml) | quirks `generated-secrets;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: mongodb/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: mongodb/charts/common/templates/_secrets.tpl`, `quirk evidence 3: mongodb/templates/secrets.yaml`, `quirk evidence 4: mongodb/templates/mcp/ingress-tls-secret.yaml` | production `static-passwords:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-mongodb/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-mongodb-static-passwords/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-mongodb-existing-secret-replicaset/receipt.yaml) | choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first |
| [bitnami/mysql@14.0.3](../../recipes/bitnami/mysql/14.0.3/CATALOG.md) | `ready-to-try` | `existing-secret` | coverage `covered`<br>bases `existing-secret;static-passwords`<br>[variants 1](../../recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: mysql/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: mysql/charts/common/templates/_secrets.tpl`, `quirk evidence 3: mysql/templates/tls-secret.yaml`, `quirk evidence 4: mysql/templates/primary/statefulset.yaml` | production `static-passwords:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-mysql/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-mysql-static-passwords/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-mysql-existing-secret/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [bitnami/nginx@24.0.2](../../recipes/bitnami/nginx/24.0.2/CATALOG.md) | `ready-to-try` | `http-clusterip` | coverage `covered`<br>bases `existing-tls-ingress;http-clusterip`<br>[variants 1](../../recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: nginx/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: nginx/charts/common/templates/_secrets.tpl`, `quirk evidence 3: nginx/templates/ingress-tls-secret.yaml`, `quirk evidence 4: nginx/templates/tls-secret.yaml` | production `http-clusterip:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-nginx/support-decision.yaml)<br>GitOps `http-clusterip:Argo CD OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/bitnami-nginx/http-clusterip/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-nginx-http-clusterip/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-nginx-existing-tls-ingress/receipt.yaml) | choose whether http-clusterip is in production scope; close or document its render-only live-readiness issue first |
| [bitnami/postgresql@18.6.7](../../recipes/bitnami/postgresql/18.6.7/CATALOG.md) | `ready-to-try` | `existing-secret` | coverage `covered`<br>bases `existing-secret;static-passwords`<br>[variants 1](../../recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: postgresql/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: postgresql/charts/common/templates/_secrets.tpl`, `quirk evidence 3: postgresql/templates/secrets.yaml`, `quirk evidence 4: postgresql/templates/tls-secrets.yaml` | production `static-passwords:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-postgresql/support-decision.yaml)<br>GitOps `existing-secret:Flux OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/bitnami-postgresql/existing-secret/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-postgresql-static-passwords/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-postgresql-existing-secret/receipt.yaml) | choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first |
| [bitnami/rabbitmq@16.0.14](../../recipes/bitnami/rabbitmq/16.0.14/CATALOG.md) | `ready-to-try` | `existing-secret` | coverage `covered`<br>bases `existing-secret;static-passwords`<br>[variants 1](../../recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: rabbitmq/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: rabbitmq/templates/svc-headless.yaml`, `quirk evidence 3: rabbitmq/charts/common/templates/_secrets.tpl`, `quirk evidence 4: rabbitmq/templates/ingress-tls-secrets.yaml` | production `static-passwords:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-rabbitmq/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-rabbitmq-static-passwords/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-rabbitmq-existing-secret/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [bitnami/redis@25.5.3](../../recipes/bitnami/redis/25.5.3/CATALOG.md) | `ready-to-try` | `reuse-existing-secret` | coverage `covered`<br>bases `default;reuse-existing-secret`<br>[variants 1](../../recipes/bitnami/redis/25.5.3/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/variant-revision.yaml) | quirks `generated-secrets;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: redis/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: redis/charts/common/templates/_secrets.tpl`, `quirk evidence 3: redis/templates/tls-secret.yaml`, `quirk evidence 4: redis/templates/scripts-configmap.yaml` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/bitnami-redis/support-decision.yaml)<br>GitOps `reuse-existing-secret:Flux OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/bitnami-redis/reuse-existing-secret/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-redis-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-redis-reuse-existing-secret/receipt.yaml) | choose whether default is in production scope; close or document its render-only live-readiness issue first |
| [external-secrets/external-secrets@2.5.0](../../recipes/external-secrets/external-secrets/2.5.0/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;no-crds`<br>[variants 1](../../recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/external-secrets-external-secrets/support-decision.yaml)<br>GitOps `default:Argo CD OCI:pass;default:Argo CD OCI:pass;default:Argo CD OCI:blocked;no-crds:Argo CD OCI:blocked`<br>[GitOps receipts 1](../runtime-gitops/receipts/external-secrets-external-secrets/default-fake-provider-roundtrip/latest.yaml), [GitOps receipts 2](../runtime-gitops/receipts/external-secrets-external-secrets/default-prestaged-secret/latest.yaml), [GitOps receipts 3](../runtime-gitops/receipts/external-secrets-external-secrets/default/latest.yaml), [GitOps receipts 4](../runtime-gitops/receipts/external-secrets-external-secrets/no-crds/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/external-secrets-external-secrets-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/external-secrets-external-secrets-no-crds/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [grafana/grafana@10.5.15](../../recipes/grafana/grafana/10.5.15/CATALOG.md) | `ready-to-try` | `existing-secret-ingress` | coverage `covered`<br>bases `existing-secret-ingress;static-passwords`<br>[variants 1](../../recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/variant-revision.yaml) | quirks `extension-slots` | production `existing-secret-ingress:superseded:not-production-supported-because-source-chart-is-deprecated`<br>[decision](../production-support-decisions/grafana-grafana/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/grafana-grafana-static-passwords/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-grafana-existing-secret-ingress/receipt.yaml) | resolve image digests for each affected variant before production OCI support |
| [grafana/loki@7.0.0](../../recipes/grafana/loki/7.0.0/CATALOG.md) | `ready-to-try` | `single-binary-filesystem` | coverage `covered`<br>bases `simple-scalable-minio;single-binary-filesystem`<br>[variants 1](../../recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/variant-revision.yaml) | quirks `crds;generated-secrets;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: loki/charts/minio/templates/_helpers.tpl`, `quirk evidence 2: loki/charts/minio/templates/console-ingress.yaml`, `quirk evidence 3: loki/charts/minio/templates/ingress.yaml`, `quirk evidence 4: loki/templates/monitoring/dashboards/configmap-1.yaml` | production `single-binary-filesystem:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/grafana-loki/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/grafana-loki-single-binary-filesystem/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-loki-simple-scalable-minio/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [grafana/tempo@1.24.4](../../recipes/grafana/tempo/1.24.4/CATALOG.md) | `ready-to-try` | `local-persistent` | coverage `covered`<br>bases `local-persistent;s3-query-observability`<br>[variants 1](../../recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/variant-revision.yaml) | quirks `extension-slots` | production `local-persistent:superseded:not-production-supported-because-source-chart-is-deprecated`<br>[decision](../production-support-decisions/grafana-tempo/support-decision.yaml)<br>GitOps health `s3-query-observability:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/grafana-tempo-s3-query-observability/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/grafana-tempo-local-persistent/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-tempo-s3-query-observability/receipt.yaml) | resolve image digests for each affected variant before production OCI support |
| [hashicorp/consul@2.0.0](../../recipes/hashicorp/consul/2.0.0/CATALOG.md) | `ready-to-try` | `default-control-plane` | coverage `covered`<br>bases `default-control-plane;secure-mesh-existing-secrets`<br>[variants 1](../../recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/variant-revision.yaml), [variants 2](../../recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/variant-revision.yaml) | quirks `webhooks;extension-slots;install-vs-upgrade-divergence;required-values;tpl;capabilities;rbac;storage`<br>route `P2: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence: consul/templates/server-statefulset.yaml` | production `default-control-plane:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/hashicorp-consul/support-decision.yaml)<br>GitOps `secure-mesh-existing-secrets:Flux OCI:blocked`<br>[GitOps receipts](../runtime-gitops/receipts/hashicorp-consul/secure-mesh-existing-secrets/latest.yaml)<br>GitOps health `secure-mesh-existing-secrets:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/hashicorp-consul-secure-mesh-existing-secrets/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/hashicorp-consul-default-control-plane/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/hashicorp-consul-secure-mesh-existing-secrets/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [hashicorp/vault@0.32.0](../../recipes/hashicorp/vault/0.32.0/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;dev-mode;ha-raft-ui`<br>[variants 1](../../recipes/hashicorp/vault/0.32.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/variant-revision.yaml), [variants 3](../../recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/variant-revision.yaml) | quirks `webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage`<br>route `P1: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: vault/templates/server-ha-active-service.yaml`, `quirk evidence 2: vault/templates/server-ha-standby-service.yaml`, `quirk evidence 3: vault/templates/server-headless-service.yaml` | production `default:rejected:parity-passed-production-support-rejected`<br>[decision](../production-support-decisions/hashicorp-vault/support-decision.yaml)<br>GitOps health `ha-raft-ui:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/hashicorp-vault-ha-raft-ui/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/hashicorp-vault-dev-mode/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/hashicorp-vault-default/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/hashicorp-vault-ha-raft-ui/receipt.yaml) | resolve image digests for each affected variant before production OCI support |
| [ingress-nginx/ingress-nginx@4.15.1](../../recipes/ingress-nginx/ingress-nginx/4.15.1/CATALOG.md) | `ready-to-try` | `internal-clusterip` | coverage `covered`<br>bases `admission-disabled;default;internal-clusterip`<br>[variants 1](../../recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/variant-revision.yaml), [variants 2](../../recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/variant-revision.yaml), [variants 3](../../recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/variant-revision.yaml) | quirks `webhooks;required-values;tpl;capabilities;rbac`<br>route `P1: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: ingress-nginx/templates/NOTES.txt`, `quirk evidence 2: ingress-nginx/templates/controller-daemonset.yaml`, `quirk evidence 3: ingress-nginx/templates/controller-deployment.yaml` | production `internal-clusterip:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/ingress-nginx-ingress-nginx/support-decision.yaml)<br>GitOps `admission-disabled:Argo CD OCI:watch;internal-clusterip:Argo CD OCI:pass`<br>[GitOps receipts 1](../runtime-gitops/receipts/ingress-nginx-ingress-nginx/admission-disabled/latest.yaml), [GitOps receipts 2](../runtime-gitops/receipts/ingress-nginx-ingress-nginx/internal-clusterip/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/ingress-nginx-ingress-nginx-internal-clusterip/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/ingress-nginx-ingress-nginx-admission-disabled/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/ingress-nginx-ingress-nginx-default/receipt.yaml) | record the target-scoped lifecycle support decision, then refresh live/e2e evidence for that scope |
| [jetstack/cert-manager@v1.20.2](../../recipes/jetstack/cert-manager/v1.20.2/CATALOG.md) | `ready-to-try` | `crds-enabled` | coverage `covered`<br>bases `crds-enabled;default`<br>[variants 1](../../recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/variant-revision.yaml), [variants 2](../../recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots` | production `crds-enabled:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/jetstack-cert-manager/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/jetstack-cert-manager-crds-enabled/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/jetstack-cert-manager-default/receipt.yaml) | write or fix the receipt for target fact preflight |
| [longhorn/longhorn@1.11.2](../../recipes/longhorn/longhorn/1.11.2/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;ui-ingress`<br>[variants 1](../../recipes/longhorn/longhorn/1.11.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/variant-revision.yaml) | quirks `required-values;generated-facts;tpl;rbac`<br>route `P2: classify generated values as generated facts, target facts, or existing-secret bases: generated-facts policy plus field reachability row`<br>`quirk evidence 1: longhorn/templates/NOTES.txt`, `quirk evidence 2: longhorn/templates/crds.yaml` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/longhorn-longhorn/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/longhorn-longhorn-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/longhorn-longhorn-ui-ingress/receipt.yaml) | choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support |
| [metrics-server/metrics-server@3.13.0](../../recipes/metrics-server/metrics-server/3.13.0/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;external-tls-ca`<br>[variants 1](../../recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;lookup;generated-facts;capabilities;rbac`<br>route `P0: add an APIService readiness model and runtime observation route: chart facts axis plus lifecycle observation receipt`<br>`quirk evidence 1: metrics-server/templates/_helpers.tpl`, `quirk evidence 2: metrics-server/templates/pdb.yaml`, `quirk evidence 3: metrics-server/templates/psp.yaml`, `quirk evidence 4: metrics-server/templates/apiservice.yaml` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/metrics-server-metrics-server/support-decision.yaml)<br>GitOps `default:Argo CD OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/metrics-server-metrics-server/default/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/metrics-server-metrics-server-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/receipt.yaml) | image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes |
| [prometheus-community/kube-prometheus-stack@85.3.3](../../recipes/prometheus-community/kube-prometheus-stack/85.3.3/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;no-crds`<br>[variants 1](../../recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml) | hooks `maintained-observed: preflight-or-presync;postsync-check-or-observation;upgrade-action-with-receipt;preserve-ordering;preserve-cleanup-policy;webhook-readiness-observation;target-facts-or-preflight`<br>[hook evidence 1](../hook-lifecycle/maintained-hook-queue.csv), [hook evidence 2](../hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml)<br>quirks `hooks;crds;generated-secrets;existing-secret;webhooks;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/ciliumnetworkpolicy-createSecret.yaml`, `quirk evidence 2: kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/ciliumnetworkpolicy-patchWebhook.yaml` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/prometheus-community-kube-prometheus-stack/support-decision.yaml)<br>GitOps `default:Argo CD OCI:pass;no-crds:Argo CD OCI:pass`<br>[GitOps receipts 1](../runtime-gitops/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml), [GitOps receipts 2](../runtime-gitops/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-kube-prometheus-stack-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-kube-prometheus-stack-no-crds/receipt.yaml) | choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support |
| [prometheus-community/prometheus@29.8.0](../../recipes/prometheus-community/prometheus/29.8.0/CATALOG.md) | `ready-to-try` | `server-only-ephemeral` | coverage `covered`<br>bases `default;server-only-ephemeral`<br>[variants 1](../../recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/variant-revision.yaml) | quirks `generated-secrets;extension-slots;required-values;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: prometheus/charts/prometheus-node-exporter/templates/daemonset.yaml`, `quirk evidence 2: prometheus/templates/deploy.yaml`, `quirk evidence 3: prometheus/charts/kube-state-metrics/templates/NOTES.txt`, `quirk evidence 4: prometheus/charts/prometheus-node-exporter/templates/NOTES.txt` | production `server-only-ephemeral:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/prometheus-community-prometheus/support-decision.yaml)<br>GitOps `server-only-ephemeral:Flux OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/prometheus-community-prometheus/server-only-ephemeral/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-server-only-ephemeral/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-default/receipt.yaml) | choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support |
| [secrets-store-csi-driver/secrets-store-csi-driver@1.6.0](../../recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/CATALOG.md) | `ready-to-try` | `default` | coverage `covered`<br>bases `default;sync-secret-rotation`<br>[variants 1](../../recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/variant-revision.yaml) | quirks `extension-slots` | production `default:supported:fresh-target-evidence-passed`<br>[decision](../production-support-decisions/secrets-store-csi-driver-secrets-store-csi-driver/support-decision.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/secrets-store-csi-driver-secrets-store-csi-driver-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/secrets-store-csi-driver-secrets-store-csi-driver-sync-secret-rotation/receipt.yaml) | choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support |
| [traefik/traefik@40.2.0](../../recipes/traefik/traefik/40.2.0/CATALOG.md) | `not-ready-yet` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/traefik/traefik/40.2.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;generated-secrets;existing-secret;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: traefik/templates/NOTES.txt`, `quirk evidence 2: traefik/templates/_helpers.tpl`, `quirk evidence 3: traefik/templates/deployment.yaml` | GitOps health `no-crds:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/traefik-traefik-no-crds/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/traefik-traefik-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/traefik-traefik-no-crds/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [external-dns/external-dns@1.21.1](../../recipes/external-dns/external-dns/1.21.1/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;dry-run-txt-registry;no-crds`<br>[variants 1](../../recipes/external-dns/external-dns/1.21.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/variant-revision.yaml), [variants 3](../../recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots;required-values;tpl;rbac`<br>route `P2: promote required inputs into typed prompts, placeholders, or supported base choices: input contract row` | [live compare 1](../../runs/live-helm-confighub-compare/external-dns-external-dns-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/external-dns-external-dns-dry-run-txt-registry/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/external-dns-external-dns-no-crds/receipt.yaml) | run catalog promotion review |
| [gitlab/gitlab-runner@0.89.0](../../recipes/gitlab/gitlab-runner/0.89.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;generated-facts;tpl;capabilities`<br>route `P2: classify generated values as generated facts, target facts, or existing-secret bases: generated-facts policy plus field reachability row`<br>`quirk evidence: gitlab-runner/templates/NOTES.txt` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/gitlab-gitlab-runner-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/gitlab-gitlab-runner-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [kyverno/kyverno@3.8.1](../../recipes/kyverno/kyverno/3.8.1/CATALOG.md) | `not-ready-yet` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/kyverno/kyverno/3.8.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/variant-revision.yaml) | hooks `maintained-observed: upgrade-action-with-receipt;delete-cleanup-policy;explicit-test-check;preserve-ordering;preserve-cleanup-policy;target-facts-or-preflight`<br>[hook evidence 1](../hook-lifecycle/maintained-hook-queue.csv), [hook evidence 2](../hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml)<br>quirks `hooks;crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: kyverno/charts/reports-server/templates/hooks/pre-delete-api-service-cleanup.yaml`, `quirk evidence 2: kyverno/templates/hooks/post-upgrade-migrate-resources.yaml`, `quirk evidence 3: kyverno/templates/hooks/pre-delete-remove-webhooks.yaml` | [live compare 1](../../runs/live-helm-confighub-compare/kyverno-kyverno-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/kyverno-kyverno-no-crds/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [cloudnative-pg/cloudnative-pg@0.28.2](../../recipes/cloudnative-pg/cloudnative-pg/0.28.2/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;webhooks;extension-slots;generated-facts;tpl;rbac`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: cloudnative-pg/charts/cluster/templates/sidecar-configmap.yaml`, `quirk evidence 2: cloudnative-pg/templates/NOTES.txt` | [live compare 1](../../runs/live-helm-confighub-compare/cloudnative-pg-cloudnative-pg-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/cloudnative-pg-cloudnative-pg-no-crds/receipt.yaml) | run catalog promotion review |
| [fluent/fluent-bit@0.57.6](../../recipes/fluent/fluent-bit/0.57.6/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/variant-revision.yaml) | hooks `maintained-observed: explicit-test-check;preserve-cleanup-policy`<br>[hook evidence 1](../hook-lifecycle/maintained-hook-queue.csv), [hook evidence 2](../hook-lifecycle/receipts/fluent-fluent-bit/default/latest.yaml)<br>quirks `hooks;extension-slots;tpl;capabilities;rbac`<br>route `P0: choose a lifecycle route and commit a route or observation receipt: hook lifecycle route receipt`<br>`quirk evidence 1: fluent-bit/templates/tests/test-connection.yaml`, `quirk evidence 2: fluent-bit/templates/_helpers.tpl`, `quirk evidence 3: fluent-bit/templates/clusterrole.yaml`, `quirk evidence 4: fluent-bit/templates/psp.yaml` | [live compare](../../runs/live-helm-confighub-compare/fluent-fluent-bit-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [runix/pgadmin4@1.62.0](../../recipes/runix/pgadmin4/1.62.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/runix/pgadmin4/1.62.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;tpl;capabilities;storage`<br>route `P2: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: pgadmin4/templates/_helpers.tpl`, `quirk evidence 2: pgadmin4/templates/hpa.yaml` | [live compare](../../runs/live-helm-confighub-compare/runix-pgadmin4-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18](../../recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/variant-revision.yaml) | quirks `capabilities;rbac;storage`<br>route `P2: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: nfs-subdir-external-provisioner/templates/_helpers.tpl`, `quirk evidence 2: nfs-subdir-external-provisioner/templates/deployment.yaml` | [live compare](../../runs/live-helm-confighub-compare/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [kedacore/keda@2.19.0](../../recipes/kedacore/keda/2.19.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/kedacore/keda/2.19.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;webhooks;extension-slots;tpl;capabilities;rbac`<br>route `P0: add an APIService readiness model and runtime observation route: chart facts axis plus lifecycle observation receipt` | GitOps `default:Argo CD OCI:pass`<br>[GitOps receipts](../runtime-gitops/receipts/kedacore-keda/default/latest.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/kedacore-keda-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/kedacore-keda-no-crds/receipt.yaml) | run APIService promotion review: choose supported base, target scope, CRD ownership path, and evidence refresh rule using the committed aggregation receipt |
| [prometheus-community/kube-state-metrics@7.4.0](../../recipes/prometheus-community/kube-state-metrics/7.4.0/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `cluster-metrics-readonly;default`<br>[variants 1](../../recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;generated-facts;tpl;capabilities;rbac;storage`<br>route `P2: classify generated values as generated facts, target facts, or existing-secret bases: generated-facts policy plus field reachability row`<br>`quirk evidence: kube-state-metrics/templates/NOTES.txt` | [live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-kube-state-metrics-cluster-metrics-readonly/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-kube-state-metrics-default/receipt.yaml) | run catalog promotion review |
| [elastic/eck-operator@3.4.0](../../recipes/elastic/eck-operator/3.4.0/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;ha;no-crds`<br>[variants 1](../../recipes/elastic/eck-operator/3.4.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage`<br>route `P2: bind the render to named capability profiles and test the important alternate profile: capability profile matrix row` | [live compare 1](../../runs/live-helm-confighub-compare/elastic-eck-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/elastic-eck-operator-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/elastic-eck-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [elastic/kibana@8.5.1](../../recipes/elastic/kibana/8.5.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/elastic/kibana/8.5.1/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/elastic-kibana-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/elastic-kibana-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [descheduler/descheduler@0.36.0](../../recipes/descheduler/descheduler/0.36.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/descheduler/descheduler/0.36.0/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;required-values;tpl;rbac`<br>route `P2: promote required inputs into typed prompts, placeholders, or supported base choices: input contract row` | [live compare](../../runs/live-helm-confighub-compare/descheduler-descheduler-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [prometheus-community/prometheus-blackbox-exporter@11.10.0](../../recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `cluster-metrics-readonly;default`<br>[variants 1](../../recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities`<br>route `P2: bind the render to named capability profiles and test the important alternate profile: capability profile matrix row` | [live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-blackbox-exporter-cluster-metrics-readonly/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-blackbox-exporter-default/receipt.yaml) | run catalog promotion review |
| [bitnami/elasticsearch@22.1.6](../../recipes/bitnami/elasticsearch/22.1.6/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;ha;legacy`<br>[variants 1](../../recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: elasticsearch/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: elasticsearch/charts/kibana/charts/common/templates/_capabilities.tpl`, `quirk evidence 3: elasticsearch/charts/common/templates/_secrets.tpl`, `quirk evidence 4: elasticsearch/charts/kibana/charts/common/templates/_secrets.tpl` | GitOps health `default:resource-or-condition-residue;ha:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-elasticsearch-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-elasticsearch-ha/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-elasticsearch-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-elasticsearch-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/bitnami-elasticsearch-legacy/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [stakater/reloader@2.2.12](../../recipes/stakater/reloader/2.2.12/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `controller-default-reviewed;default`<br>[variants 1](../../recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/variant-revision.yaml), [variants 2](../../recipes/stakater/reloader/2.2.12/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities;rbac`<br>route `P2: bind the render to named capability profiles and test the important alternate profile: capability profile matrix row` | [live compare 1](../../runs/live-helm-confighub-compare/stakater-reloader-controller-default-reviewed/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/stakater-reloader-default/receipt.yaml) | run catalog promotion review |
| [jaegertracing/jaeger@4.8.0](../../recipes/jaegertracing/jaeger/4.8.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: jaeger/charts/common/templates/_capabilities.tpl`, `quirk evidence 2: jaeger/charts/common/templates/_secrets.tpl` | [live compare](../../runs/live-helm-confighub-compare/jaegertracing-jaeger-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [grafana/alloy@1.8.2](../../recipes/grafana/alloy/1.8.2/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/grafana/alloy/1.8.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots;required-values;tpl;capabilities;rbac;storage`<br>route `P1: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: alloy/templates/_helpers.tpl`, `quirk evidence 2: alloy/templates/controllers/statefulset.yaml`, `quirk evidence 3: alloy/templates/service.yaml`, `quirk evidence 4: alloy/templates/configmap.yaml` | [live compare 1](../../runs/live-helm-confighub-compare/grafana-alloy-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-alloy-no-crds/receipt.yaml) | run catalog promotion review |
| [nats/nats@2.14.0](../../recipes/nats/nats/2.14.0/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;ha`<br>[variants 1](../../recipes/nats/nats/2.14.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/nats/nats/2.14.0/revisions/ha/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;tpl`<br>route `P2: add bundled-file inventory to the source lock and value/provenance map: source-lock bundled file index`<br>`quirk evidence: nats/templates/_helpers.tpl` | [live compare 1](../../runs/live-helm-confighub-compare/nats-nats-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/nats-nats-ha/receipt.yaml) | run catalog promotion review |
| [dex/dex@0.24.0](../../recipes/dex/dex/0.24.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/dex/dex/0.24.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;tpl;capabilities;rbac`<br>route `P2: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: dex/templates/hpa.yaml`, `quirk evidence 2: dex/templates/ingress.yaml`, `quirk evidence 3: dex/templates/networkpolicy.yaml` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/dex-dex-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/dex-dex-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [prometheus-community/alertmanager@1.37.0](../../recipes/prometheus-community/alertmanager/1.37.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;ha`<br>[variants 1](../../recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/variant-revision.yaml) | quirks `extension-slots;tpl;storage`<br>route `P2: record storage prerequisite, retention, and runtime binding checks for supported targets: target-scoped storage support decision` | [live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-alertmanager-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-alertmanager-ha/receipt.yaml) | run catalog promotion review |
| [falcosecurity/falco@9.0.0](../../recipes/falcosecurity/falco/9.0.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/falcosecurity/falco/9.0.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;lookup;tpl;capabilities;rbac;storage`<br>route `P0: model remote dependency closure in chart facts and source/dependency lock evidence: dependency closure facts plus refresh-survival check`<br>`quirk evidence 1: falco/charts/falco-talon/templates/_helpers.tpl`, `quirk evidence 2: falco/charts/falcosidekick/templates/_helpers.tpl`, `quirk evidence 3: falco/charts/falco-talon/templates/configmap-grafana-dashboard.yaml`, `quirk evidence 4: falco/charts/falco-talon/templates/configmap.yaml` | [live compare](../../runs/live-helm-confighub-compare/falcosecurity-falco-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [prometheus-community/prometheus-node-exporter@4.55.0](../../recipes/prometheus-community/prometheus-node-exporter/4.55.0/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `cluster-metrics-readonly;default`<br>[variants 1](../../recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac`<br>route `P2: promote version-conditional rendering into chart facts and variant-path coverage: chart facts axis plus capability/version matrix row`<br>`quirk evidence 1: prometheus-node-exporter/templates/daemonset.yaml`, `quirk evidence 2: prometheus-node-exporter/templates/NOTES.txt` | [live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-node-exporter-cluster-metrics-readonly/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-node-exporter-default/receipt.yaml) | run catalog promotion review |
| [bitnami/spark@10.0.3](../../recipes/bitnami/spark/10.0.3/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;ha;legacy`<br>[variants 1](../../recipes/bitnami/spark/10.0.3/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/spark/10.0.3/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/bitnami/spark/10.0.3/revisions/legacy/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage` | GitOps health `default:resource-or-condition-residue;ha:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-spark-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-spark-ha/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-spark-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-spark-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/bitnami-spark-legacy/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [elastic/logstash@8.5.1](../../recipes/elastic/logstash/8.5.1/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;ha`<br>[variants 1](../../recipes/elastic/logstash/8.5.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/elastic/logstash/8.5.1/revisions/ha/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities;storage` | [live compare 1](../../runs/live-helm-confighub-compare/elastic-logstash-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/elastic-logstash-ha/receipt.yaml) | run catalog promotion review |
| [prometheus-community/prometheus-adapter@5.3.0](../../recipes/prometheus-community/prometheus-adapter/5.3.0/CATALOG.md) | `works-with-operator-review` | `apiservice-v1-capability` | coverage `partial`<br>bases `apiservice-v1-capability;cluster-metrics-readonly;default`<br>[variants 1](../../recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/variant-revision.yaml), [variants 2](../../recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml), [variants 3](../../recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities;rbac` | [live compare 1](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-adapter-apiservice-v1-capability/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-adapter-cluster-metrics-readonly/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-adapter-default/receipt.yaml) | Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and the APIService runtime contract for the maintained apiservice-v1-capability base before catalog promotion. |
| [projectcalico/tigera-operator@v3.32.0](../../recipes/projectcalico/tigera-operator/v3.32.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/variant-revision.yaml) | quirks `hooks;required-values;lookup;rbac` | [live compare](../../runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [fairwinds-stable/goldilocks@10.3.0](../../recipes/fairwinds-stable/goldilocks/10.3.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/variant-revision.yaml) | quirks `crds;generated-secrets;existing-secret;webhooks;extension-slots;lookup;generated-facts;tpl;capabilities;rbac` | [live compare](../../runs/live-helm-confighub-compare/fairwinds-stable-goldilocks-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [prometheus-community/prometheus-operator-crds@29.0.0](../../recipes/prometheus-community/prometheus-operator-crds/29.0.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/variant-revision.yaml) | quirks `crds;existing-secret;generated-facts` | [live compare](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-operator-crds-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [bitnami/zookeeper@13.8.7](../../recipes/bitnami/zookeeper/13.8.7/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;ha;legacy`<br>[variants 1](../../recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage` | GitOps health `default:resource-or-condition-residue;ha:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-zookeeper-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-zookeeper-ha/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-zookeeper-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-zookeeper-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/bitnami-zookeeper-legacy/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [elastic/filebeat@8.5.1](../../recipes/elastic/filebeat/8.5.1/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;node-or-cluster-collector`<br>[variants 1](../../recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/variant-revision.yaml) | quirks `extension-slots;tpl;rbac` | GitOps health `default:resource-or-condition-residue;node-or-cluster-collector:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml) | run catalog promotion review |
| [hashicorp/terraform@1.1.2](../../recipes/hashicorp/terraform/1.1.2/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;required-values` | GitOps health `default:resource-or-condition-residue;no-crds:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml) | run catalog promotion review |
| [coredns/coredns@1.45.2](../../recipes/coredns/coredns/1.45.2/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/coredns/coredns/1.45.2/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac` | [live compare](../../runs/live-helm-confighub-compare/coredns-coredns-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [fairwinds-stable/vpa@4.11.0](../../recipes/fairwinds-stable/vpa/4.11.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;webhooks;extension-slots;lookup;tpl;capabilities;rbac` | [live compare 1](../../runs/live-helm-confighub-compare/fairwinds-stable-vpa-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/fairwinds-stable-vpa-no-crds/receipt.yaml) | review APIService render-path notes: current maintained bases do not render APIService objects; create a separate APIService-enabled base only if product chooses that path |
| [bitnami/phpmyadmin@20.0.0](../../recipes/bitnami/phpmyadmin/20.0.0/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;legacy`<br>[variants 1](../../recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-phpmyadmin-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-phpmyadmin-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-phpmyadmin-legacy/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [prometheus-community/prometheus-pushgateway@3.6.0](../../recipes/prometheus-community/prometheus-pushgateway/3.6.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/variant-revision.yaml) | quirks `generated-secrets;extension-slots;required-values;tpl;storage` | [live compare](../../runs/live-helm-confighub-compare/prometheus-community-prometheus-pushgateway-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [fluent/fluentd@0.5.3](../../recipes/fluent/fluentd/0.5.3/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/fluent/fluentd/0.5.3/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities;rbac;storage` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/fluent-fluentd-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/fluent-fluentd-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [jaegertracing/jaeger-operator@2.57.0](../../recipes/jaegertracing/jaeger-operator/2.57.0/CATALOG.md) | `works-with-operator-review` | `no-crds` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;webhooks;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [bitnami/memcached@8.5.5](../../recipes/bitnami/memcached/8.5.5/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/bitnami/memcached/8.5.5/revisions/default/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage` | [live compare](../../runs/live-helm-confighub-compare/bitnami-memcached-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [strimzi/strimzi-kafka-operator@1.0.0](../../recipes/strimzi/strimzi-kafka-operator/1.0.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots;tpl;capabilities;rbac` | [live compare 1](../../runs/live-helm-confighub-compare/strimzi-strimzi-kafka-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/strimzi-strimzi-kafka-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [opencost/opencost@2.5.21](../../recipes/opencost/opencost/2.5.21/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/opencost/opencost/2.5.21/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;required-values;tpl;capabilities;rbac;storage` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/opencost-opencost-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/opencost-opencost-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [gatekeeper/gatekeeper@3.22.2](../../recipes/gatekeeper/gatekeeper/3.22.2/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml) | quirks `hooks;crds;existing-secret;webhooks;extension-slots;capabilities;rbac` | [live compare 1](../../runs/live-helm-confighub-compare/gatekeeper-gatekeeper-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/gatekeeper-gatekeeper-no-crds/receipt.yaml) | run catalog promotion review |
| [bitnami/contour@21.1.4](../../recipes/bitnami/contour/21.1.4/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;legacy;no-crds`<br>[variants 1](../../recipes/bitnami/contour/21.1.4/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/contour/21.1.4/revisions/legacy/r001/variant-revision.yaml), [variants 3](../../recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;rbac` | GitOps health `default:sync-not-complete;legacy:sync-not-complete;no-crds:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-contour-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml), [health residue 4](../../runs/live-helm-confighub-compare/bitnami-contour-no-crds/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-contour-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/bitnami-contour-no-crds/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [kyverno/kyverno-policies@3.8.0](../../recipes/kyverno/kyverno-policies/3.8.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;required-values;lookup;tpl` | GitOps health `default:sync-not-complete`<br>[health residue 1](../../runs/live-helm-confighub-compare/kyverno-kyverno-policies-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/kyverno-kyverno-policies-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [elastic/metricbeat@8.5.1](../../recipes/elastic/metricbeat/8.5.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/elastic/metricbeat/8.5.1/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;tpl;capabilities;rbac;storage` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [minio-operator/operator@7.1.1](../../recipes/minio-operator/operator/7.1.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/minio-operator/operator/7.1.1/revisions/default/r001/variant-revision.yaml) | quirks `crds;rbac` | [live compare](../../runs/live-helm-confighub-compare/minio-operator-operator-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [percona/pxc-operator@1.19.1](../../recipes/percona/pxc-operator/1.19.1/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/percona/pxc-operator/1.19.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots;install-vs-upgrade-divergence;lookup;rbac` | [live compare 1](../../runs/live-helm-confighub-compare/percona-pxc-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/percona-pxc-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [bitnami/apache@11.4.29](../../recipes/bitnami/apache/11.4.29/CATALOG.md) | `not-ready-yet` | `legacy` | coverage `partial`<br>bases `default;legacy`<br>[variants 1](../../recipes/bitnami/apache/11.4.29/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/apache/11.4.29/revisions/legacy/r001/variant-revision.yaml) | quirks `generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities` | GitOps health `default:resource-or-condition-residue;legacy:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-apache-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-apache-legacy/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-apache-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-apache-legacy/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [grafana/pyroscope@2.0.2](../../recipes/grafana/pyroscope/2.0.2/CATALOG.md) | `not-ready-yet` | `default` | coverage `partial`<br>bases `default;ha;no-crds`<br>[variants 1](../../recipes/grafana/pyroscope/2.0.2/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;generated-secrets;existing-secret;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage` | GitOps health `default:resource-or-condition-residue;ha:resource-or-condition-residue;no-crds:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/grafana-pyroscope-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/grafana-pyroscope-ha/receipt.yaml), [health residue 4](../../runs/live-helm-confighub-compare/grafana-pyroscope-no-crds/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/grafana-pyroscope-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-pyroscope-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/grafana-pyroscope-no-crds/receipt.yaml) | review limitation before promotion: existing-secret (chart ships no Secret toggle) |
| [aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1](../../recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots;required-values;tpl;capabilities;rbac` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/aws-ebs-csi-driver-aws-ebs-csi-driver-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/aws-ebs-csi-driver-aws-ebs-csi-driver-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [falcosecurity/falcosidekick@0.13.1](../../recipes/falcosecurity/falcosidekick/0.13.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots;required-values;capabilities;rbac;storage` | [live compare](../../runs/live-helm-confighub-compare/falcosecurity-falcosidekick-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [aqua/trivy-operator@0.32.1](../../recipes/aqua/trivy-operator/0.32.1/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/aqua-trivy-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/aqua-trivy-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [argo-cd/argo-events@2.4.21](../../recipes/argo-cd/argo-events/2.4.21/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/argo-cd-argo-events-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/argo-cd-argo-events-no-crds/receipt.yaml) | run catalog promotion review |
| [argo-cd/argo-rollouts@2.40.9](../../recipes/argo-cd/argo-rollouts/2.40.9/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/argo-cd-argo-rollouts-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/argo-cd-argo-rollouts-no-crds/receipt.yaml) | run catalog promotion review |
| [argo-cd/argo-workflows@1.0.14](../../recipes/argo-cd/argo-workflows/1.0.14/CATALOG.md) | `works-with-operator-review` | `minimal-crds` | coverage `partial`<br>bases `controller-default-reviewed;default;minimal-crds`<br>[variants 1](../../recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/variant-revision.yaml), [variants 2](../../recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/variant-revision.yaml), [variants 3](../../recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/variant-revision.yaml) | quirks `extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/argo-cd-argo-workflows-controller-default-reviewed/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/argo-cd-argo-workflows-default/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/argo-cd-argo-workflows-minimal-crds/receipt.yaml) | run catalog promotion review |
| [argo-cd/argocd-image-updater@1.2.2](../../recipes/argo-cd/argocd-image-updater/1.2.2/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare](../../runs/live-helm-confighub-compare/argo-cd-argocd-image-updater-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [autoscaler/cluster-autoscaler@9.57.0](../../recipes/autoscaler/cluster-autoscaler/9.57.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `controller-default-reviewed;default`<br>[variants 1](../../recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/variant-revision.yaml), [variants 2](../../recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/variant-revision.yaml) | quirks `extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/autoscaler-cluster-autoscaler-controller-default-reviewed/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/autoscaler-cluster-autoscaler-default/receipt.yaml) | run catalog promotion review |
| [autoscaler/vertical-pod-autoscaler@0.9.0](../../recipes/autoscaler/vertical-pod-autoscaler/0.9.0/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/autoscaler-vertical-pod-autoscaler-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/autoscaler-vertical-pod-autoscaler-no-crds/receipt.yaml) | run catalog promotion review |
| [bitnami/opensearch@2.0.10](../../recipes/bitnami/opensearch/2.0.10/CATALOG.md) | `works-with-target-prerequisites` | `legacy` | coverage `partial`<br>bases `default;ha;legacy`<br>[variants 1](../../recipes/bitnami/opensearch/2.0.10/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/variant-revision.yaml), [variants 3](../../recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue;ha:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/bitnami-opensearch-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/bitnami-opensearch-ha/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/bitnami-opensearch-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/bitnami-opensearch-ha/receipt.yaml), [live compare 3](../../runs/live-helm-confighub-compare/bitnami-opensearch-legacy/receipt.yaml) | run catalog promotion review |
| [crossplane-stable/crossplane@2.3.1](../../recipes/crossplane-stable/crossplane/2.3.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | [live compare](../../runs/live-helm-confighub-compare/crossplane-stable-crossplane-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [grafana/promtail@6.17.1](../../recipes/grafana/promtail/6.17.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/grafana/promtail/6.17.1/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | [live compare](../../runs/live-helm-confighub-compare/grafana-promtail-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [grafana/rollout-operator@0.49.0](../../recipes/grafana/rollout-operator/0.49.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/grafana-rollout-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/grafana-rollout-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [haproxytech/kubernetes-ingress@1.52.0](../../recipes/haproxytech/kubernetes-ingress/1.52.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | [live compare](../../runs/live-helm-confighub-compare/haproxytech-kubernetes-ingress-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [istio/gateway@1.30.0](../../recipes/istio/gateway/1.30.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `controller-default-reviewed;default`<br>[variants 1](../../recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/variant-revision.yaml), [variants 2](../../recipes/istio/gateway/1.30.0/revisions/default/r001/variant-revision.yaml) | quirks `none-flagged` | GitOps health `controller-default-reviewed:resource-or-condition-residue;default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/istio-gateway-controller-default-reviewed/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/istio-gateway-default/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/istio-gateway-controller-default-reviewed/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/istio-gateway-default/receipt.yaml) | run catalog promotion review |
| [istio/istiod@1.30.0](../../recipes/istio/istiod/1.30.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/istio/istiod/1.30.0/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [jetstack/cert-manager-csi-driver@v0.14.0](../../recipes/jetstack/cert-manager-csi-driver/v0.14.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/variant-revision.yaml) | quirks `none-flagged` | [live compare](../../runs/live-helm-confighub-compare/jetstack-cert-manager-csi-driver-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [jetstack/trust-manager@v0.22.1](../../recipes/jetstack/trust-manager/v0.22.1/CATALOG.md) | `works-with-target-prerequisites` | `no-crds` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/jetstack-trust-manager-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/jetstack-trust-manager-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/jetstack-trust-manager-no-crds/receipt.yaml) | run catalog promotion review |
| [linkerd/linkerd-crds@1.8.0](../../recipes/linkerd/linkerd-crds/1.8.0/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/variant-revision.yaml) | quirks `crds;existing-secret` | GitOps health `default:sync-not-complete`<br>[health residue 1](../../runs/live-helm-confighub-compare/linkerd-linkerd-crds-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/linkerd-linkerd-crds-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [minio-operator/tenant@7.1.1](../../recipes/minio-operator/tenant/7.1.1/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/minio-operator/tenant/7.1.1/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/minio-operator-tenant-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/minio-operator-tenant-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [nats/nack@0.34.0](../../recipes/nats/nack/0.34.0/CATALOG.md) | `works-with-target-prerequisites` | `no-crds` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/nats/nack/0.34.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/nats/nack/0.34.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/nats-nack-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/nats-nack-no-crds/receipt.yaml) | run catalog promotion review |
| [nats/surveyor@0.20.9](../../recipes/nats/surveyor/0.20.9/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;default-reviewed`<br>[variants 1](../../recipes/nats/surveyor/0.20.9/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/variant-revision.yaml) | quirks `extension-slots` | GitOps health `default-reviewed:resource-or-condition-residue;default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/nats-surveyor-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md), [health residue 3](../../runs/live-helm-confighub-compare/nats-surveyor-default-reviewed/receipt.yaml)<br>[live compare 1](../../runs/live-helm-confighub-compare/nats-surveyor-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/nats-surveyor-default-reviewed/receipt.yaml) | run catalog promotion review |
| [open-telemetry/opentelemetry-operator@0.114.0](../../recipes/open-telemetry/opentelemetry-operator/0.114.0/CATALOG.md) | `works-with-target-prerequisites` | `no-crds` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/open-telemetry-opentelemetry-operator-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare 1](../../runs/live-helm-confighub-compare/open-telemetry-opentelemetry-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/open-telemetry-opentelemetry-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [percona/pg-operator@3.0.0](../../recipes/percona/pg-operator/3.0.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/percona/pg-operator/3.0.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds` | [live compare 1](../../runs/live-helm-confighub-compare/percona-pg-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/percona-pg-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [percona/psmdb-operator@1.22.0](../../recipes/percona/psmdb-operator/1.22.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds` | [live compare 1](../../runs/live-helm-confighub-compare/percona-psmdb-operator-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/percona-psmdb-operator-no-crds/receipt.yaml) | run catalog promotion review |
| [rook-release/rook-ceph@v1.19.5](../../recipes/rook-release/rook-ceph/v1.19.5/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/variant-revision.yaml) | quirks `crds` | [live compare](../../runs/live-helm-confighub-compare/rook-release-rook-ceph-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [rook-release/rook-ceph-cluster@v1.19.5](../../recipes/rook-release/rook-ceph-cluster/v1.19.5/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | GitOps health `default:resource-or-condition-residue`<br>[health residue 1](../../runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml), [health residue 2](../gitops-health-residue/summary.md)<br>[live compare](../../runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [sealed-secrets/sealed-secrets@2.18.6](../../recipes/sealed-secrets/sealed-secrets/2.18.6/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/sealed-secrets-sealed-secrets-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/sealed-secrets-sealed-secrets-no-crds/receipt.yaml) | run catalog promotion review |
| [velero/velero@12.0.1](../../recipes/velero/velero/12.0.1/CATALOG.md) | `works-with-target-prerequisites` | `default` | coverage `partial`<br>bases `default;no-crds`<br>[variants 1](../../recipes/velero/velero/12.0.1/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/velero/velero/12.0.1/revisions/no-crds/r001/variant-revision.yaml) | quirks `crds;existing-secret;extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/velero-velero-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/velero-velero-no-crds/receipt.yaml) | run catalog promotion review |
| [vm/victoria-logs-single@0.12.5](../../recipes/vm/victoria-logs-single/0.12.5/CATALOG.md) | `needs-better-base-variant` | `default` | coverage `partial`<br>bases `default`<br>[variants](../../recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/variant-revision.yaml) | quirks `existing-secret;extension-slots` | [live compare](../../runs/live-helm-confighub-compare/vm-victoria-logs-single-default/receipt.yaml) | add at least one user-shaped variant before catalog promotion |
| [vm/victoria-metrics-single@0.39.0](../../recipes/vm/victoria-metrics-single/0.39.0/CATALOG.md) | `works-with-operator-review` | `default` | coverage `partial`<br>bases `default;default-reviewed`<br>[variants 1](../../recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/variant-revision.yaml), [variants 2](../../recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/variant-revision.yaml) | quirks `extension-slots` | [live compare 1](../../runs/live-helm-confighub-compare/vm-victoria-metrics-single-default/receipt.yaml), [live compare 2](../../runs/live-helm-confighub-compare/vm-victoria-metrics-single-default-reviewed/receipt.yaml) | run catalog promotion review |
