apiVersion: "helm-expt.confighub.com/v1alpha1" kind: "HelmRenderIntent" metadata: name: "gatekeeper-gatekeeper-3-22-2-no-crds" labels: component: "gatekeeper/gatekeeper" chart: "gatekeeper/gatekeeper" version: "3.22.2" base: "no-crds" catalogLayer: "F2b" spec: component: "gatekeeper/gatekeeper" chart: name: "gatekeeper/gatekeeper" version: "3.22.2" sourceRepository: "https://open-policy-agent.github.io/gatekeeper/charts" sourceContent: "" baseVariant: "no-crds" renderInputs: recipe: "recipes/gatekeeper/gatekeeper/3.22.2" variant: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" revision: "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" packageBase: "packages/gatekeeper/gatekeeper/3.22.2/bases/no-crds" installerPackageOciRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2" sourceLock: "recipes/gatekeeper/gatekeeper/3.22.2/source-lock.yaml" namespace: "default" releaseName: "gatekeeper" valuesProfile: "recipes/gatekeeper/gatekeeper/3.22.2/effective-values-no-crds.yaml" capabilityProfile: apiVersions: [] kubeVersion: "1.30.0" hookPolicy: "no-hooks" renderOutput: renderedObjects: "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/release-objects.yaml" objectInventory: "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/object-inventory.yaml" revision: "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" packageBase: "packages/gatekeeper/gatekeeper/3.22.2/bases/no-crds" evidence: renderParity: "yes" confighubScanOps: "yes" localKind: "yes" lifecycleObserved: "todo" gitopsOciLive: "yes" liveDualParity: "yes" twoClusterKind: "yes" variantPromotion: "proven" lifecycle: routeContract: "n/a" routeCount: "0" dispositions: "n/a" executionModes: "n/a" safeAutomatic: "n/a" contractPath: "" jsonPath: "" variantRoutes: [] coverage: state: "actionable-gap" reason: "4 source hooks are recorded, but this base has no attached lifecycle route." evidence: [] nextAction: "Choose how each source hook runs for direct apply, Argo CD, and Flux; attach the route records and version-matched receipts." targetFacts: status: "declared-target-facts" declared: requiredCRDs: - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "assign.mutations.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "assignimage.mutations.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "assignmetadata.mutations.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "configs.config.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "configpodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "connections.connection.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "connectionpodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "constraintpodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "constrainttemplates.templates.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "constrainttemplatepodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "expansiontemplate.expansion.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "expansiontemplatepodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "modifyset.mutations.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "mutatorpodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "providers.externaldata.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "providerpodstatuses.status.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "syncsets.syncset.gatekeeper.sh" purpose: "Gatekeeper CRD managed outside this no-crds base" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" sourceVariant: "default" suggestedSource: "Apply the default base CRDs or install Gatekeeper CRDs before applying this base" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" requirements: - category: "crd" name: "assign.mutations.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "assignimage.mutations.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "assignmetadata.mutations.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "configs.config.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "configpodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "connections.connection.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "connectionpodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "constraintpodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "constrainttemplates.templates.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "constrainttemplatepodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "expansiontemplate.expansion.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "expansiontemplatepodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "modifyset.mutations.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "mutatorpodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "providers.externaldata.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "providerpodstatuses.status.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" - category: "crd" name: "syncsets.syncset.gatekeeper.sh" namespace: "" requiredBefore: "apply" freshness: policy: "recheck-before-apply" maxAge: "one-apply" purpose: "Gatekeeper CRD managed outside this no-crds base" check: "package://prerequisites/target-facts/no-crds-crds.yaml" packageSource: "package://prerequisites/target-facts/no-crds-crds.yaml" packagePath: "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" declarationPath: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" sourceVariant: "default" sourcePath: "revisions/default/r001/rendered/release-objects.yaml" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" evidence: - "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" - "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" actions: [] coverage: state: "attached" reason: "17 target prerequisites declared by this base." declarationSource: "recipes/gatekeeper/gatekeeper/3.22.2/variants/no-crds/variant.yaml" nextAction: "" settingSources: helmValues: status: "recorded" valuesProfile: "recipes/gatekeeper/gatekeeper/3.22.2/effective-values-no-crds.yaml" controls: "base-render" configHubChanges: status: "none-in-catalog-base" controls: "post-render-fields" recordsAfterUpload: - "Unit revisions" - "derived variants" - "promotion receipts" installWork: status: "recorded" controls: "prerequisites-and-lifecycle" targetRequirementCount: 17 lifecycleRouteCount: 0 liveCluster: status: "observation-only" controls: "observed-state" overlapPolicy: "review-required" provenance: matrixRowKind: "base" catalogLayer: "F2b" customizationLayer: "F2b rendered standard fork" rowStatus: "real" githubRecipeUrl: "https://github.com/confighub/helm-expt/tree/main/recipes/gatekeeper/gatekeeper/3.22.2" githubPackageBaseUrl: "https://github.com/confighub/helm-expt/tree/main/packages/gatekeeper/gatekeeper/3.22.2/bases/no-crds" fullModelPath: - "chart/version: gatekeeper/gatekeeper@3.22.2" - "recipe: recipes/gatekeeper/gatekeeper/3.22.2" - "base variant: no-crds" - "render intent: data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" - "rendered revision: recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" - "full rendered YAML: recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/release-objects.yaml" - "installer package OCI: oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2" - "package base: packages/gatekeeper/gatekeeper/3.22.2/bases/no-crds" - "ConfigHub Units: created when the package is uploaded" - "managed variants: created after upload with cub variant create/promote" - "targets and observations: recorded by the live lanes when run" status: disposition: "real-base-render-intent" claim: "This intent describes a committed real base variant and its render inputs. It is not a claim that every live delivery lane is green." limits: - "Candidate and custom-discussion rows are not emitted as runnable render intents." - "Declared target facts are copied from the base variant. Observed action records appear only when committed failure evidence exists; their absence does not erase the declaration." - "Missing lifecycle route data is not treated as proof that no route is needed." - "ConfigHub server objects and managed variants are created after upload. This file records the render intent, not a live server object."