# Per-Chart Fact Sheets **UNOFFICIAL/EXPERIMENTAL.** Generated by `scripts/generate-chart-fact-sheets.mjs`. Do not hand-edit. Regenerate with `npm run chart-fact-sheets`. The user-facing **"can I use this chart, and how?"** view for every catalog chart, realizing the two-column principle from [per-chart-fact-sheet-spec](../../docs/planning/per-chart-fact-sheet-spec.md): **support level (the claim)** beside **evidence depth (the substantiation)** — never one without the other. Read-only projection over [chart-evidence-router](../chart-evidence-router/router.csv) + [chart-skills](../chart-skills/skills.csv). The browser board is [fact-sheets.html](fact-sheets.html). Covers **100 charts**. By support status: needs-better-base-variant 33 · works-with-operator-review 23 · ready-to-try 20 · works-with-target-prerequisites 15 · not-ready-yet 9. After any apply, the honest check is **cub-scout** — `object-set-matches`, `prerequisites-met`, `workloads-converged` — because "created" is not "working". ## argo-cd/argo-cd@9.5.15 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## bitnami/mongodb@19.0.7 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `existing-secret-replicaset` - **You must provide/decide:** a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first ## bitnami/mysql@14.0.3 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `existing-secret` - **You must provide/decide:** an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## bitnami/nginx@24.0.2 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: http-clusterip:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `http-clusterip` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose whether http-clusterip is in production scope; close or document its render-only live-readiness issue first ## bitnami/postgresql@18.6.7 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `existing-secret` - **You must provide/decide:** an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose whether static-passwords is in production scope; close or document its render-only live-readiness issue first ## bitnami/rabbitmq@16.0.14 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: static-passwords:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `existing-secret` - **You must provide/decide:** an existing Secret for some bases (built); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;existing-secret;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## bitnami/redis@25.5.3 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `reuse-existing-secret` - **You must provide/decide:** a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose whether default is in production scope; close or document its render-only live-readiness issue first ## external-secrets/external-secrets@2.5.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## grafana/grafana@10.5.15 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: existing-secret-ingress:superseded:not-production-supported-because-source-chart-is-deprecated - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `existing-secret-ingress` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** resolve image digests for each affected variant before production OCI support ## grafana/loki@7.0.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: single-binary-filesystem:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `single-binary-filesystem` - **You must provide/decide:** a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** crds;generated-secrets;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## grafana/tempo@1.24.4 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: local-persistent:superseded:not-production-supported-because-source-chart-is-deprecated - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2) - **Recommended base:** `local-persistent` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** resolve image digests for each affected variant before production OCI support ## hashicorp/consul@2.0.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default-control-plane:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 1/2, live parity 1/2) - **Recommended base:** `default-control-plane` - **You must provide/decide:** a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs - **Quirks & disposition:** webhooks;extension-slots;install-vs-upgrade-divergence;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## hashicorp/vault@0.32.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:rejected:parity-passed-production-support-rejected - **Evidence depth:** catalog-supported-with-live-evidence (render parity 3/3, local live 2/3, live parity 2/3) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs - **Quirks & disposition:** webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** resolve image digests for each affected variant before production OCI support ## ingress-nginx/ingress-nginx@4.15.1 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: internal-clusterip:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 3/3, local live 3/3, live parity 3/3) - **Recommended base:** `internal-clusterip` - **You must provide/decide:** webhook/cert readiness at delivery time; mandatory chart inputs - **Quirks & disposition:** webhooks;required-values;tpl;capabilities;rbac — exact rendered objects with render parity and receipts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** record the target-scoped lifecycle support decision, then refresh live/e2e evidence for that scope ## jetstack/cert-manager@v1.20.2 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: crds-enabled:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `crds-enabled` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** write or fix the receipt for target fact preflight ## longhorn/longhorn@1.11.2 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** target facts at variant time; mandatory chart inputs - **Quirks & disposition:** required-values;generated-facts;tpl;rbac — exact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support ## metrics-server/metrics-server@3.13.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time - **Quirks & disposition:** generated-secrets;existing-secret;lookup;generated-facts;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** image policy decision recorded for a target scope; create digest-pinned bases or overrides for stricter scopes ## prometheus-community/kube-prometheus-stack@85.3.3 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** hooks;crds;generated-secrets;existing-secret;webhooks;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support ## prometheus-community/prometheus@29.8.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: server-only-ephemeral:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `server-only-ephemeral` - **You must provide/decide:** a StorageClass / storage decision; target facts at variant time; mandatory chart inputs - **Quirks & disposition:** generated-secrets;extension-slots;required-values;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support ## secrets-store-csi-driver/secrets-store-csi-driver@1.6.0 - **Status:** Ready to try (`ready-to-try`) - **Support (claim):** yes-public-catalog; production decision: default:supported:fresh-target-evidence-passed - **Evidence depth:** catalog-supported-with-live-evidence (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support ## traefik/traefik@40.2.0 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 1/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use - **Quirks & disposition:** crds;generated-secrets;existing-secret;webhooks;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## external-dns/external-dns@1.21.1 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); mandatory chart inputs - **Quirks & disposition:** crds;existing-secret;extension-slots;required-values;tpl;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## gitlab/gitlab-runner@0.89.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); target facts at variant time; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## kyverno/kyverno@3.8.1 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use - **Quirks & disposition:** hooks;crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## cloudnative-pg/cloudnative-pg@0.28.2 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time - **Quirks & disposition:** crds;existing-secret;webhooks;extension-slots;generated-facts;tpl;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## fluent/fluent-bit@0.57.6 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** your wanted install shape, until a reviewed base exists - **Quirks & disposition:** hooks;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); extension slots routed to reviewed bases - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## runix/pgadmin4@1.62.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;required-values;tpl;capabilities;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** capabilities;rbac;storage — exact rendered objects with render parity and receipts - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## kedacore/keda@2.19.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time - **Quirks & disposition:** crds;webhooks;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run APIService promotion review: choose supported base, target scope, CRD ownership path, and evidence refresh rule using the committed aggregation receipt ## prometheus-community/kube-state-metrics@7.4.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; target facts at variant time - **Quirks & disposition:** existing-secret;extension-slots;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## elastic/eck-operator@3.4.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 3/3, local live 3/3, live parity 3/3) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; mandatory chart inputs - **Quirks & disposition:** crds;existing-secret;webhooks;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## elastic/kibana@8.5.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## descheduler/descheduler@0.36.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;required-values;tpl;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## prometheus-community/prometheus-blackbox-exporter@11.10.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots;tpl;capabilities — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/elasticsearch@22.1.6 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## stakater/reloader@2.2.12 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## jaegertracing/jaeger@4.8.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## grafana/alloy@1.8.2 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); mandatory chart inputs - **Quirks & disposition:** crds;extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## nats/nats@2.14.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); mandatory chart inputs - **Quirks & disposition:** existing-secret;extension-slots;required-values;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## dex/dex@0.24.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## prometheus-community/alertmanager@1.37.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision - **Quirks & disposition:** extension-slots;tpl;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## falcosecurity/falco@9.0.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;required-values;lookup;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## prometheus-community/prometheus-node-exporter@4.55.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); target facts at variant time; mandatory chart inputs - **Quirks & disposition:** existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/spark@10.0.3 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## elastic/logstash@8.5.1 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision - **Quirks & disposition:** extension-slots;tpl;capabilities;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## prometheus-community/prometheus-adapter@5.3.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** review-needed - **Evidence depth:** proof-grade-compatible-base-needs-standard-lanes (render parity 3/3, local live 1/3, live parity 1/3) - **Recommended base:** `apiservice-v1-capability` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and the APIService runtime contract for the maintained apiservice-v1-capability base before catalog promotion. ## projectcalico/tigera-operator@v3.32.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** hooks;required-values;lookup;rbac — exact rendered objects with render parity and receipts; hooks classified and routed (not silently executed); cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## fairwinds-stable/goldilocks@10.3.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds;generated-secrets;existing-secret;webhooks;extension-slots;lookup;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## prometheus-community/prometheus-operator-crds@29.0.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); target facts at variant time; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds;existing-secret;generated-facts — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## bitnami/zookeeper@13.8.7 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 3/3, local live 1/3, live parity 0/3) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; a decision on the named limitation before use - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## elastic/filebeat@8.5.1 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots;tpl;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## hashicorp/terraform@1.1.2 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); mandatory chart inputs - **Quirks & disposition:** crds;required-values — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## coredns/coredns@1.45.2 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;required-values;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## fairwinds-stable/vpa@4.11.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time - **Quirks & disposition:** crds;webhooks;extension-slots;lookup;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review APIService render-path notes: current maintained bases do not render APIService objects; create a separate APIService-enabled base only if product chooses that path ## bitnami/phpmyadmin@20.0.0 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; mandatory chart inputs; a decision on the named limitation before use - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## prometheus-community/prometheus-pushgateway@3.6.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** generated-secrets;extension-slots;required-values;tpl;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## fluent/fluentd@0.5.3 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## jaegertracing/jaeger-operator@2.57.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 1/2) - **Recommended base:** `no-crds` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time - **Quirks & disposition:** crds;webhooks;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/memcached@8.5.5 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; target facts at variant time; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## strimzi/strimzi-kafka-operator@1.0.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;extension-slots;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## opencost/opencost@2.5.21 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;required-values;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## gatekeeper/gatekeeper@3.22.2 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time - **Quirks & disposition:** hooks;crds;existing-secret;webhooks;extension-slots;capabilities;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases - **Skill:** serious-chart-playbooks (docs/skills/serious-chart-playbooks.md; docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/contour@21.1.4 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 3/3, local live 0/3, live parity 0/3) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a CRD ownership choice (crds vs no-crds base); target facts at variant time; a decision on the named limitation before use - **Quirks & disposition:** crds;generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## kyverno/kyverno-policies@3.8.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** target facts at variant time; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;required-values;lookup;tpl — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## elastic/metricbeat@8.5.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** a StorageClass / storage decision; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## minio-operator/operator@7.1.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## percona/pxc-operator@1.19.1 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); target facts at variant time - **Quirks & disposition:** crds;extension-slots;install-vs-upgrade-divergence;lookup;rbac — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/apache@11.4.29 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 2/2, local live 1/2, live parity 0/2) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); target facts at variant time; a decision on the named limitation before use - **Quirks & disposition:** generated-secrets;existing-secret;extension-slots;install-vs-upgrade-divergence;lookup;generated-facts;tpl;capabilities — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## grafana/pyroscope@2.0.2 - **Status:** Not ready yet (`not-ready-yet`) - **Support (claim):** decision-needed-first - **Evidence depth:** proof-grade-with-named-limitation (render parity 3/3, local live 2/3, live parity 0/3) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); target facts at variant time; mandatory chart inputs; a decision on the named limitation before use - **Quirks & disposition:** crds;generated-secrets;existing-secret;extension-slots;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage — exact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; extension slots routed to reviewed bases; cluster lookups lifted into declared target facts - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/target-facts-and-lifecycle.md; docs/skills/large-app-evidence-funnel.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** review limitation before promotion: existing-secret (chart ships no Secret toggle) ## aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** extension-slots;required-values;tpl;capabilities;rbac — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## falcosecurity/falcosidekick@0.13.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a StorageClass / storage decision; mandatory chart inputs; your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots;required-values;capabilities;rbac;storage — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** target-facts-and-lifecycle (docs/skills/target-facts-and-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## aqua/trivy-operator@0.32.1 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## argo-cd/argo-events@2.4.21 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## argo-cd/argo-rollouts@2.40.9 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## argo-cd/argo-workflows@1.0.14 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 3/3) - **Recommended base:** `minimal-crds` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** hook-and-secret-lifecycle (docs/skills/hook-and-secret-lifecycle.md; docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## argo-cd/argocd-image-updater@1.2.2 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## autoscaler/cluster-autoscaler@9.57.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## autoscaler/vertical-pod-autoscaler@0.9.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## bitnami/opensearch@2.0.10 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 3/3, local live 1/3, live parity 0/3) - **Recommended base:** `legacy` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run) - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## crossplane-stable/crossplane@2.3.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## grafana/promtail@6.17.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## grafana/rollout-operator@0.49.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 1/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## haproxytech/kubernetes-ingress@1.52.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## istio/gateway@1.30.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** none-flagged — exact rendered objects with render parity and receipts - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## istio/istiod@1.30.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 0/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## jetstack/cert-manager-csi-driver@v0.14.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** your wanted install shape, until a reviewed base exists - **Quirks & disposition:** none-flagged — exact rendered objects with render parity and receipts - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## jetstack/trust-manager@v0.22.1 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2) - **Recommended base:** `no-crds` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## linkerd/linkerd-crds@1.8.0 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds;existing-secret — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## minio-operator/tenant@7.1.1 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## nats/nack@0.34.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `no-crds` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## nats/surveyor@0.20.9 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## open-telemetry/opentelemetry-operator@0.114.0 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 1/2) - **Recommended base:** `no-crds` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## percona/pg-operator@3.0.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## percona/psmdb-operator@1.22.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## rook-release/rook-ceph@v1.19.5 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** a CRD ownership choice (crds vs no-crds base); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** crds — exact rendered objects with render parity and receipts; CRD handling split into explicit bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## rook-release/rook-ceph-cluster@v1.19.5 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 0/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## sealed-secrets/sealed-secrets@2.18.6 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## velero/velero@12.0.1 - **Status:** Works with prerequisites (`works-with-target-prerequisites`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 0/2, live parity 0/2) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); a CRD ownership choice (crds vs no-crds base) - **Quirks & disposition:** crds;existing-secret;extension-slots — exact rendered objects with render parity and receipts; CRD handling split into explicit bases; extension slots routed to reviewed bases - **Skill:** none () - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review ## vm/victoria-logs-single@0.12.5 - **Status:** Needs a better base (`needs-better-base-variant`) - **Support (claim):** not-yet-user-ready - **Evidence depth:** proof-grade-needs-user-shaped-variant (render parity 1/1, local live 1/1, live parity 1/1) - **Recommended base:** `default` - **You must provide/decide:** an existing Secret for some bases (buildable — not yet run); your wanted install shape, until a reviewed base exists - **Quirks & disposition:** existing-secret;extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** add at least one user-shaped variant before catalog promotion ## vm/victoria-metrics-single@0.39.0 - **Status:** works-with-operator-review (`works-with-operator-review`) - **Support (claim):** not-yet-public-catalog-proof-ready - **Evidence depth:** proof-grade-ready-for-promotion-review (render parity 2/2, local live 2/2, live parity 2/2) - **Recommended base:** `default` - **You must provide/decide:** nothing beyond a cluster and namespace - **Quirks & disposition:** extension-slots — exact rendered objects with render parity and receipts; extension slots routed to reviewed bases - **Skill:** live-parity (docs/skills/live-parity.md) - **Post-apply check:** After apply, confirm convergence with cub-scout (`object-set-matches`, `prerequisites-met`, `workloads-converged`) — "created" is not "working". `prerequisites-met` will flag the missing prerequisite before you debug pods. - **Next action:** run catalog promotion review