apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ImageDigestResolutionReceipt"
metadata:
  name: "metrics-server-metrics-server-default-image-digest-resolution"
spec:
  chart: "metrics-server/metrics-server"
  version: "3.13.0"
  variant: "default"
  resolvedAt: "2026-06-10T15:48:22.341Z"
  renderedObjectSet:
    path: "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/release-objects.yaml"
    sha256: "97514966a1917b1ae3b597ec3a32216d0a650db7cb56d472f4e722c69c869b51"
  sourceImageReview:
    path: "data/attack-plan-workdown/image-digest-review.csv"
    rows: 1
    uniqueImages: 1
  resolver:
    name: "docker-buildx-imagetools"
    commandTemplate: "docker buildx imagetools inspect <image>"
  images:
    -
      image: "registry.k8s.io/metrics-server/metrics-server:v0.8.0"
      digest: "sha256:89258156d0e9af60403eafd44da9676fd66f600c7934d468ccc17e42b199aee2"
      digestReference: "registry.k8s.io/metrics-server/metrics-server:v0.8.0@sha256:89258156d0e9af60403eafd44da9676fd66f600c7934d468ccc17e42b199aee2"
      mediaType: "application/vnd.docker.distribution.manifest.list.v2+json"
      resolverOutput:
        name: "registry.k8s.io/metrics-server/metrics-server:v0.8.0"
      occurrences:
        -
          object: "apps/v1/Deployment/kube-system/metrics-server"
          fieldPath: "spec.template.spec.containers.0.image"
  productionSupportUse:
    status: "digest-resolution-recorded"
    claim: "The mutable rendered image references for this Metrics Server base were resolved to registry manifest digests at the recorded time."
    limits: "This receipt does not mean the rendered manifests are digest-pinned and does not by itself make the chart production-supported."
    nextRequired: "Choose a digest-pinned base, image override policy, or explicit mutable-image exception before broader production support."