Kubara component × cluster matrix — primary current

Kubara v0.13.0, catalogs 1.1.0. Seven platform roles and two applications across four clusters. Live overlay: accepted-current-live; 16 source digests verified. Status is written as text and symbol, with color supplementary.

Scoped ConfigHub/Argo residue audit: ✓ pass. Receipt: kubara-v0-13-0-mini-idp-orphan-audit; observed: 2026-08-06T09:10:55.578Z; SHA-256: c588c4882ed5de66d4dde68cf0f09f94ee9b976bca740e14cec4c6796bebdb23. It proves exact ConfigHub inventory, no Argo-prunable resources, and no unclassified or UID-stale audited durable workloads; it is not a complete inventory of every Kubernetes resource type.

✓ observed! watch◐ rendered-only↔ centralized– disabled

Boundary: rendered-only is desired state, not live sync. Final cells consume the mini-IDP receipt only when its current Kubara version, source digests, and all 36 rows validate. Missing or partial observed fields stay Unknown with their reason. desired-matrix.json is the deterministic, non-live base.

Current components by cluster
Component / selectionhx-app-dev
dev / hub
hx-app-staging
staging / spoke
hx-app-prod-a
prod / spoke
hx-app-prod-b
prod / spoke
argo-cdselected: argo-cd/argo-cd@10.2.1 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: v3.4.6 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: v3.4.6 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: v3.4.6 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: v3.4.6
cert-managerselected: jetstack/cert-manager@v1.21.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: cert-manager-v1.21.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: cert-manager-v1.21.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: cert-manager-v1.21.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: cert-manager-v1.21.0
external-secretsselected: external-secrets/external-secrets@2.8.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: external-secrets-2.8.0 disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown
homer-dashboardselected: kubara/homer-dashboard@0.1.0 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: b4bz/homer:v26.4.2 disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown
kube-prometheus-stackselected: prometheus-community/kube-prometheus-stack@87.19.2 + prometheus-community/prometheus-blackbox-exporter@11.15.1 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: 87.19.2 + grafana-12.8.1 + kube-state-metrics-8.0.0 + prometheus-blackbox-exporter-11.15.1 + prometheus-node-exporter-4.56.1 disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown
metrics-serverselected: metrics-server/metrics-server@3.13.1 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: metrics-server-3.13.1 disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown disabledArgo sync: NotApplicablehealth / ready: NotApplicable / not-applicableobserved: Unknown
traefikselected: traefik/traefik@41.0.2 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: traefik-41.0.2 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: traefik-41.0.2 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: traefik-41.0.2 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: traefik-41.0.2
hx-webselected: nginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7d observedArgo sync: Syncedhealth / ready: Healthy / passobserved: nginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7d observedArgo sync: Syncedhealth / ready: Healthy / passobserved: nginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7d observedArgo sync: Syncedhealth / ready: Healthy / passobserved: nginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7d observedArgo sync: Syncedhealth / ready: Healthy / passobserved: nginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7d
cubbychatselected: commit e9e76a076924d95897c3ede7a0f21cec523c4f6f; 3 digest-pinned images observedArgo sync: Syncedhealth / ready: Healthy / passobserved: ghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: ghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: ghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20 observedArgo sync: Syncedhealth / ready: Healthy / passobserved: ghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20
Current cell details
ComponentCategoryClusterPresenceDesiredObservedArgo syncHealthReadinessStatusDepartureWhy UnknownDeclared overridesEvidence scope
argo-cdplatform-componenthx-app-devrendered-intent10.2.1v3.4.6SyncedHealthypass (7/7 ready)✓ observedconfigHub-owned-argo-substitutes-kubara-wrapper: ConfigHub takes the hub role; each cluster keeps its local bootstrap Argo v3.4.6, explicitly separate from Kubara chart 10.2.1 and its v3.4.5 render.examples/kubara/current-platform/source/overrides/hx-app-dev/helm/argo-cd/values-repository-paths.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
argo-cdplatform-componenthx-app-staginghub-managed10.2.1v3.4.6SyncedHealthypass (7/7 ready)✓ observedconfigHub-owned-argo-substitutes-kubara-wrapper: ConfigHub takes the hub role; each cluster keeps its local bootstrap Argo v3.4.6, explicitly separate from Kubara chart 10.2.1 and its v3.4.5 render.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
argo-cdplatform-componenthx-app-prod-ahub-managed10.2.1v3.4.6SyncedHealthypass (7/7 ready)✓ observedconfigHub-owned-argo-substitutes-kubara-wrapper: ConfigHub takes the hub role; each cluster keeps its local bootstrap Argo v3.4.6, explicitly separate from Kubara chart 10.2.1 and its v3.4.5 render.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
argo-cdplatform-componenthx-app-prod-bhub-managed10.2.1v3.4.6SyncedHealthypass (7/7 ready)✓ observedconfigHub-owned-argo-substitutes-kubara-wrapper: ConfigHub takes the hub role; each cluster keeps its local bootstrap Argo v3.4.6, explicitly separate from Kubara chart 10.2.1 and its v3.4.5 render.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cert-managerplatform-componenthx-app-devrendered-intentv1.21.0cert-manager-v1.21.0SyncedHealthypass (3/3 ready)✓ observedkind-self-signed-cluster-issuer: The reproducible kind lane uses a self-signed ClusterIssuer instead of public ACME.examples/kubara/current-platform/source/overrides/hx-app-dev/helm/cert-manager/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cert-managerplatform-componenthx-app-stagingrendered-intentv1.21.0cert-manager-v1.21.0SyncedHealthypass (3/3 ready)✓ observedkind-self-signed-cluster-issuer: The reproducible kind lane uses a self-signed ClusterIssuer instead of public ACME.examples/kubara/current-platform/source/overrides/hx-app-staging/helm/cert-manager/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cert-managerplatform-componenthx-app-prod-arendered-intentv1.21.0cert-manager-v1.21.0SyncedHealthypass (3/3 ready)✓ observedkind-self-signed-cluster-issuer: The reproducible kind lane uses a self-signed ClusterIssuer instead of public ACME.examples/kubara/current-platform/source/overrides/hx-app-prod-a/helm/cert-manager/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cert-managerplatform-componenthx-app-prod-brendered-intentv1.21.0cert-manager-v1.21.0SyncedHealthypass (3/3 ready)✓ observedkind-self-signed-cluster-issuer: The reproducible kind lane uses a self-signed ClusterIssuer instead of public ACME.examples/kubara/current-platform/source/overrides/hx-app-prod-b/helm/cert-manager/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
external-secretsplatform-componenthx-app-devrendered-intent2.8.0external-secrets-2.8.0SyncedHealthypass (3/3 ready)✓ observedkind-fake-provider-target-fact: The demo uses ESO's fake provider; production must select a real backend without changing the wiring contract.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
external-secretsplatform-componenthx-app-stagingdisabled-by-config2.8.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
external-secretsplatform-componenthx-app-prod-adisabled-by-config2.8.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
external-secretsplatform-componenthx-app-prod-bdisabled-by-config2.8.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
homer-dashboardplatform-componenthx-app-devrendered-intent0.1.0b4bz/homer:v26.4.2SyncedHealthypass (1/1 ready)✓ observednone recordedexamples/kubara/current-platform/source/overrides/hx-app-dev/helm/homer-dashboard/values-project-links.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
homer-dashboardplatform-componenthx-app-stagingdisabled-by-config0.1.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
homer-dashboardplatform-componenthx-app-prod-adisabled-by-config0.1.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
homer-dashboardplatform-componenthx-app-prod-bdisabled-by-config0.1.0UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
kube-prometheus-stackplatform-componenthx-app-devrendered-intent87.19.2 + blackbox 11.15.187.19.2 + grafana-12.8.1 + kube-state-metrics-8.0.0 + prometheus-blackbox-exporter-11.15.1 + prometheus-node-exporter-4.56.1SyncedHealthypass (7/7 ready)✓ observedcrds-and-eso-secret-wiring-are-explicit-spaces: CRD lifecycle and Grafana secret production are separately governed and visibly linked.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
kube-prometheus-stackplatform-componenthx-app-stagingdisabled-by-config87.19.2 + blackbox 11.15.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
kube-prometheus-stackplatform-componenthx-app-prod-adisabled-by-config87.19.2 + blackbox 11.15.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
kube-prometheus-stackplatform-componenthx-app-prod-bdisabled-by-config87.19.2 + blackbox 11.15.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
metrics-serverplatform-componenthx-app-devrendered-intent3.13.1metrics-server-3.13.1SyncedHealthypass (1/1 ready)✓ observednone recordedexamples/kubara/current-platform/source/overrides/hx-app-dev/helm/metrics-server/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
metrics-serverplatform-componenthx-app-stagingdisabled-by-config3.13.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
metrics-serverplatform-componenthx-app-prod-adisabled-by-config3.13.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
metrics-serverplatform-componenthx-app-prod-bdisabled-by-config3.13.1UnknownNotApplicableNotApplicableNotApplicable– disabledkubara-config-disabled: service is disabled for this cluster in the committed Kubara contractnonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
traefikplatform-componenthx-app-devrendered-intent41.0.2traefik-41.0.2SyncedHealthypass (1/1 ready)✓ observedkind-nodeport-with-configured-ingress-status: The reproducible kind lane uses declared NodePorts and Traefik's configured cluster hostname, so Ingress status and Argo health converge without a cloud LoadBalancer controller.examples/kubara/current-platform/source/overrides/hx-app-dev/helm/traefik/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
traefikplatform-componenthx-app-stagingrendered-intent41.0.2traefik-41.0.2SyncedHealthypass (1/1 ready)✓ observedkind-nodeport-with-configured-ingress-status: The reproducible kind lane uses declared NodePorts and Traefik's configured cluster hostname, so Ingress status and Argo health converge without a cloud LoadBalancer controller.examples/kubara/current-platform/source/overrides/hx-app-staging/helm/traefik/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
traefikplatform-componenthx-app-prod-arendered-intent41.0.2traefik-41.0.2SyncedHealthypass (1/1 ready)✓ observedkind-nodeport-with-configured-ingress-status: The reproducible kind lane uses declared NodePorts and Traefik's configured cluster hostname, so Ingress status and Argo health converge without a cloud LoadBalancer controller.examples/kubara/current-platform/source/overrides/hx-app-prod-a/helm/traefik/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
traefikplatform-componenthx-app-prod-brendered-intent41.0.2traefik-41.0.2SyncedHealthypass (1/1 ready)✓ observedkind-nodeport-with-configured-ingress-status: The reproducible kind lane uses declared NodePorts and Traefik's configured cluster hostname, so Ingress status and Argo health converge without a cloud LoadBalancer controller.examples/kubara/current-platform/source/overrides/hx-app-prod-b/helm/traefik/values-kind.yamlvalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
hx-webapplicationhx-app-devapplication-intentdigest-pinned fixturenginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7dSyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
hx-webapplicationhx-app-stagingapplication-intentdigest-pinned fixturenginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7dSyncedHealthypass (3/3 ready)✓ observedstaging-sandbox-url: Staging keeps its SANDBOX_URL departure through the second upstream promotion.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
hx-webapplicationhx-app-prod-aapplication-intentdigest-pinned fixturenginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7dSyncedHealthypass (2/2 ready)✓ observedone-target-rollback-replicas-2: prod-a is intentionally rolled back to two replicas while prod-b remains at three.nonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
hx-webapplicationhx-app-prod-bapplication-intentdigest-pinned fixturenginx@sha256:6784fb0834aa7dbbe12e3d7471e69c290df3e6ba810dc38b34ae33d3c1c05f7dSyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cubbychatapplicationhx-app-devapplication-intente9e76a076924d95897c3ede7a0f21cec523c4f6fghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20SyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cubbychatapplicationhx-app-stagingapplication-intente9e76a076924d95897c3ede7a0f21cec523c4f6fghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20SyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cubbychatapplicationhx-app-prod-aapplication-intente9e76a076924d95897c3ede7a0f21cec523c4f6fghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20SyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml
cubbychatapplicationhx-app-prod-bapplication-intente9e76a076924d95897c3ede7a0f21cec523c4f6fghcr.io/confighub/cubbychat/backend@sha256:0d8342bcb139662ab76b962609f3f99da0b3aaa050a97ad7230eb0c73f440755 + ghcr.io/confighub/cubbychat/frontend@sha256:4e2c305b56af8414fab8f1ee2c3b075d96d7f60a7bd9f1c73c733e0ee81dffe5 + postgres@sha256:33f923b05f64ca54ac4401c01126a6b92afe839a0aa0a52bc5aeb5cc958e5f20SyncedHealthypass (3/3 ready)✓ observednone recordednonevalidated source-current liveMatrix row in runs/kubara-mini-idp-reconcile/receipt.yaml

Return to the Kubara buyer journey · Browse every retained component version