Per-chart fact sheets over 100 catalog charts — support level beside evidence depth, with prerequisites, quirks, the applicable skill, and the cub-scout post-apply check. Generated; do not hand-edit.
ready to try (20)needs prerequisites / better base (48)not ready yet (9)
| Chart | Status | Support (claim) | Evidence depth | Base | You provide/decide | Quirks & disposition | Skill | Post-apply check (cub-scout) |
|---|---|---|---|---|---|---|---|---|
| argo-cd/argo-cd 9.5.15 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/mongodb 19.0.7 |
Ready to try | yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | existing-secret-replicaset |
a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/mysql 14.0.3 |
Ready to try | yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | existing-secret |
an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/nginx 24.0.2 |
Ready to try | yes-public-catalog; production decision: http-clusterip:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | http-clusterip |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/postgresql 18.6.7 |
Ready to try | yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | existing-secret |
an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/rabbitmq 16.0.14 |
Ready to try | yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | existing-secret |
an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/redis 25.5.3 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | reuse-existing-secret |
a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| external-secrets/external-secrets 2.5.0 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/grafana 10.5.15 |
Ready to try | yes-public-catalog; production decision: existing-secret-ingress:superseded:not-production-supported-because-source-chart-is-deprecated | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | existing-secret-ingress |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/loki 7.0.0 |
Ready to try | yes-public-catalog; production decision: single-binary-filesystem:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | single-binary-filesystem |
a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs | crds;generated-secrets;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/tempo 1.24.4 |
Ready to try | yes-public-catalog; production decision: local-persistent:superseded:not-production-supported-because-source-chart-is-deprecated | catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2) | local-persistent |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| hashicorp/consul 2.0.0 |
Ready to try | yes-public-catalog; production decision: default-control-plane:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2) | default-control-plane |
a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs | webhooks;extension-slots;install-vs-upgrade-divergence;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| hashicorp/vault 0.32.0 |
Ready to try | yes-public-catalog; production decision: default:rejected:parity-passed-production-support-rejected | catalog-supported-with-live-evidence (render parity 3/3, local live 2/3, live parity 2/3) | default |
a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs | webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| ingress-nginx/ingress-nginx 4.15.1 |
Ready to try | yes-public-catalog; production decision: internal-clusterip:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 3/3, local live 3/3, live parity 3/3) | internal-clusterip |
webhook/cert readiness at delivery time; mandatory chart inputs | webhooks;required-values;tpl;capabilities;rbac — exact rendered objects with render parity and receipts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| jetstack/cert-manager v1.20.2 |
Ready to try | yes-public-catalog; production decision: crds-enabled:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | crds-enabled |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| longhorn/longhorn 1.11.2 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | default |
target facts at variant time; mandatory chart inputs | required-values;generated-facts;tpl;rbac — exact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| metrics-server/metrics-server 3.13.0 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time | generated-secrets;existing-secret;lookup;generated-facts;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/kube-prometheus-stack 85.3.3 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs | hooks;crds;generated-secrets;existing-secret;webhooks;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus 29.8.0 |
Ready to try | yes-public-catalog; production decision: server-only-ephemeral:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | server-only-ephemeral |
a StorageClass / storage decision; target facts at variant time; mandatory chart inputs | generated-secrets;extension-slots;required-values;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| secrets-store-csi-driver/secrets-store-csi-driver 1.6.0 |
Ready to try | yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed | catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) | default |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| aqua/trivy-operator 0.32.1 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| autoscaler/vertical-pod-autoscaler 0.9.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/opensearch 2.0.10 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 0/3) | legacy |
an existing Secret for some bases (buildable — not yet run) | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| cloudnative-pg/cloudnative-pg 0.28.2 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time | crds;existing-secret;webhooks;extension-slots;generated-facts;tpl;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| elastic/eck-operator 3.4.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3) | default |
an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; mandatory chart inputs | crds;existing-secret;webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| external-dns/external-dns 1.21.1 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); mandatory chart inputs | crds;existing-secret;extension-slots;required-values;tpl;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| gatekeeper/gatekeeper 3.22.2 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time | hooks;crds;existing-secret;webhooks;extension-slots;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| jetstack/trust-manager v0.22.1 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2) | no-crds |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| nats/nack 0.34.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | no-crds |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| nats/nats 2.14.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); mandatory chart inputs | existing-secret;extension-slots;required-values;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| open-telemetry/opentelemetry-operator 0.114.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2) | no-crds |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/kube-state-metrics 7.4.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; target facts at variant time | existing-secret;extension-slots;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus-node-exporter 4.55.0 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); target facts at variant time; mandatory chart inputs | existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| sealed-secrets/sealed-secrets 2.18.6 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| velero/velero 12.0.1 |
Works with prerequisites | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| argo-cd/argocd-image-updater 1.2.2 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists | crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| aws-ebs-csi-driver/aws-ebs-csi-driver 2.60.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
mandatory chart inputs; your wanted install shape, until a reviewed base exists | extension-slots;required-values;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/memcached 8.5.5 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; your wanted install shape, until a reviewed base exists | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| coredns/coredns 1.45.2 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| crossplane-stable/crossplane 2.3.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| descheduler/descheduler 0.36.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
mandatory chart inputs; your wanted install shape, until a reviewed base exists | extension-slots;required-values;tpl;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| dex/dex 0.24.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| elastic/kibana 8.5.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
your wanted install shape, until a reviewed base exists | extension-slots;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| elastic/metricbeat 8.5.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
a StorageClass / storage decision; your wanted install shape, until a reviewed base exists | extension-slots;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| fairwinds-stable/goldilocks 10.3.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; your wanted install shape, until a reviewed base exists | crds;generated-secrets;existing-secret;webhooks;extension-slots;lookup;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| falcosecurity/falco 9.0.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;required-values;lookup;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| falcosecurity/falcosidekick 0.13.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;required-values;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| fluent/fluent-bit 0.57.6 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
your wanted install shape, until a reviewed base exists | hooks;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); extension slots routed to reviewed bases | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| fluent/fluentd 0.5.3 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) | default |
a StorageClass / storage decision; your wanted install shape, until a reviewed base exists | extension-slots;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| gitlab/gitlab-runner 0.89.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); target facts at variant time; your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/promtail 6.17.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| haproxytech/kubernetes-ingress 1.52.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| istio/istiod 1.30.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| jaegertracing/jaeger 4.8.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; your wanted install shape, until a reviewed base exists | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| jetstack/cert-manager-csi-driver v0.14.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
your wanted install shape, until a reviewed base exists | none-flagged — exact rendered objects with render parity and receipts | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| kyverno/kyverno-policies 3.8.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) | default |
target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists | extension-slots;required-values;lookup;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| linkerd/linkerd-crds 1.8.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists | crds;existing-secret — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| minio-operator/operator 7.1.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists | crds;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| minio-operator/tenant 7.1.1 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| nfs-subdir-external-provisioner/nfs-subdir-external-provisioner 4.0.18 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
a StorageClass / storage decision; your wanted install shape, until a reviewed base exists | capabilities;rbac;storage — exact rendered objects with render parity and receipts | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| opencost/opencost 2.5.21 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) | default |
a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists | extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| projectcalico/tigera-operator v3.32.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 1/1) | default |
target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists | hooks;required-values;lookup;rbac — exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus-operator-crds 29.0.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); target facts at variant time; your wanted install shape, until a reviewed base exists | crds;existing-secret;generated-facts — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus-pushgateway 3.6.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists | generated-secrets;extension-slots;required-values;tpl;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| rook-release/rook-ceph v1.19.5 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists | crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| rook-release/rook-ceph-cluster v1.19.5 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| runix/pgadmin4 1.62.0 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists | existing-secret;extension-slots;required-values;tpl;capabilities;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| vm/victoria-logs-single 0.12.5 |
Needs a better base | not-yet-user-ready | proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) | default |
an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists | existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/apache 11.4.29 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; a decision on the named limitation before use | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/contour 21.1.4 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 3/3, local live 0/3, live parity 0/3) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); target facts at variant time; a decision on the named limitation before use | crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/elasticsearch 22.1.6 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/phpmyadmin 20.0.0 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/spark 10.0.3 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| bitnami/zookeeper 13.8.7 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) | legacy |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use | generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/pyroscope 2.0.2 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 3/3, local live 2/3, live parity 0/3) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use | crds;generated-secrets;existing-secret;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| kyverno/kyverno 3.8.1 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 2/2) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use | hooks;crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| traefik/traefik 40.2.0 |
Not ready yet | decision-needed-first | proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 1/2) | default |
an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use | crds;generated-secrets;existing-secret;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| argo-cd/argo-events 2.4.21 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| argo-cd/argo-rollouts 2.40.9 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| argo-cd/argo-workflows 1.0.14 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 3/3) | minimal-crds |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| autoscaler/cluster-autoscaler 9.57.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| elastic/filebeat 8.5.1 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) | default |
nothing beyond a cluster and namespace | extension-slots;tpl;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| elastic/logstash 8.5.1 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) | default |
a StorageClass / storage decision | extension-slots;tpl;capabilities;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| fairwinds-stable/vpa 4.11.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time | crds;webhooks;extension-slots;lookup;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/alloy 1.8.2 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); mandatory chart inputs | crds;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| grafana/rollout-operator 0.49.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| hashicorp/terraform 1.1.2 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) | default |
a CRD ownership choice (crds vs no-crds base); mandatory chart inputs | crds;required-values — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| istio/gateway 1.30.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) | default |
nothing beyond a cluster and namespace | none-flagged — exact rendered objects with render parity and receipts | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| jaegertracing/jaeger-operator 2.57.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 1/2) | no-crds |
a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time | crds;webhooks;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| kedacore/keda 2.19.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time | crds;webhooks;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| nats/surveyor 0.20.9 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) | default |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | none () | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| percona/pg-operator 3.0.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| percona/psmdb-operator 1.22.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| percona/pxc-operator 1.19.1 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base); target facts at variant time | crds;extension-slots;install-vs-upgrade-divergence;lookup;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/alertmanager 1.37.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
a StorageClass / storage decision | extension-slots;tpl;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus-adapter 5.3.0 |
works-with-operator-review | review-needed | proof-grade-compatible-base-needs-standard-lanes (render parity 3/3, local live 1/3, live parity 1/3) | apiservice-v1-capability |
nothing beyond a cluster and namespace | extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| prometheus-community/prometheus-blackbox-exporter 11.10.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
nothing beyond a cluster and namespace | extension-slots;tpl;capabilities — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| stakater/reloader 2.2.12 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
nothing beyond a cluster and namespace | extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| strimzi/strimzi-kafka-operator 1.0.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) | default |
a CRD ownership choice (crds vs no-crds base) | crds;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases | target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |
| vm/victoria-metrics-single 0.39.0 |
works-with-operator-review | not-yet-public-catalog-proof-ready | proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) | default |
nothing beyond a cluster and namespace | extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases | live-parity (docs/skills/live-parity.md) | After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. |