Generated at: 2026-09-12T14:20:22.973Z UTC · source: committed catalog, proof, live, and target-run data.
140 chart versions · 466 matrix rows (140 F1 source / 246 F2 base / 67 candidate / 13 F4 derived) · layers F1:140 / F2a:125 / F2b:121 / F2c:33 / F3:34 / F4a:7 / F4b:6 · lane cells: 1039 pass / 107 watch / 125 blocked / 308 not yet run / 1683 n/a · target run decisions: 22 runs / 2 superseded / 2 blocked-or-rejected · variant promotion: 179 proven / 17 watch / 48 todo / 2 blocked / 220 n/a · lifecycle records: 12 attached / 10 gap / 224 no separate route · prerequisite records: 89 attached / 145 gap / 12 none explicitly required · 74 active proof queue row(s) · 114 deferred accepted cell(s) · 0 hook-flagged variants unrouted (U). Generated from committed sources by scripts/generate-master-catalog-matrix.mjs; regenerate with npm run master-matrix.
✓ pass! watch✗ blocked/failed· not yet run– not applicable
Layer marks the path from F1 source chart through F2 bases and F3 target inputs to F4 derived ConfigHub variants; candidate and human-review rows are planning rows, not proof claims. Hover any cell for the reason and next action. How to read each cell and lane letter is explained in reading the matrix; the taxonomy and retention rules are part of how the catalog is built. Not in top-100 readiness (candidates/version drift): argo-cd/argo-cd@10.1.3, argo-cd/argo-cd@10.2.1, argo-cd/argo-cd@9.5.17, bitnami/mongodb@19.0.9, bitnami/mongodb@19.1.0, bitnami/nginx@24.0.4, bitnami/nginx@25.0.0, bitnami/postgresql@18.6.10, bitnami/postgresql@18.7.0, bitnami/redis@27.0.0, external-secrets/external-secrets@2.7.0, external-secrets/external-secrets@2.8.0, grafana/alloy@1.11.0, grafana/loki@7.1.0, jetstack/cert-manager@v1.21.0, kyverno/kyverno-policies@3.8.2, kyverno/kyverno@3.8.2, longhorn/longhorn@1.12.0, metallb/metallb@0.16.1, metrics-server/metrics-server@3.13.1, oauth2-proxy/oauth2-proxy@10.7.0, policy-reporter/policy-reporter@3.9.1, prometheus-community/kube-prometheus-stack@86.1.0, prometheus-community/kube-prometheus-stack@87.15.1, prometheus-community/kube-prometheus-stack@87.19.2, prometheus-community/prometheus-blackbox-exporter@11.15.1, prometheus-community/prometheus@29.9.0, stakater/reloader@2.2.14, traefik/traefik@41.0.2, velero/velero@12.1.0.
| Current product queue | Rows | Meaning | Examples |
|---|---|---|---|
| F1 source charts | 140 | Upstream Helm chart/version source rows. These are the starting points before any installer base is chosen. | aqua/trivy-operator@0.32.1/(source), argo-cd/argo-cd@9.5.15/(source), argo-cd/argo-cd@9.5.17/(source), argo-cd/argo-cd@10.1.3/(source) |
| Public catalog rows | 42 | Reviewed top-20 catalog rows. Use base-readiness or the per-chart catalog page to choose the easiest first base. | argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, bitnami/mongodb@19.0.7/existing-secret-replicaset, bitnami/mongodb@19.0.7/static-passwords |
| Promote after review | 82 | Proof-grade rows that need catalog/product review before becoming public starting points. | aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-events@2.4.21/default, argo-cd/argo-events@2.4.21/no-crds |
| Design a more useful base | 38 | Rows where plain render proof exists but the first user-facing base is not yet good enough. | argo-cd/argocd-image-updater@1.2.2/default, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default, bitnami/memcached@8.5.5/default, cloudpirates/nginx@0.16.1/default |
| Decide a limitation first | 19 | Rows where a product or operator boundary must be chosen before promotion. | bitnami/apache@11.4.29/default, bitnami/apache@11.4.29/legacy, bitnami/contour@21.1.4/default, bitnami/contour@21.1.4/legacy |
| Complete the core proof lane | 128 | Real base or derived rows missing at least one core evidence lane: ConfigHub proof, live Kubernetes, GitOps/OCI, or live parity. | argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argo-cd@9.5.17/default, argo-cd/argo-cd@9.5.17/no-crds, argo-cd/argo-cd@10.1.3/default |
| Active proof queue | 74 | Rows with a current non-pass live parity result and an exact rerun or review action. | argo-cd/argo-cd@9.5.17/default, autoscaler/cluster-autoscaler@9.57.0/controller-default-reviewed, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default, bitnami/apache@11.4.29/default |
| Deferred accepted dispositions | 34 | Rows whose current non-green cells are already accepted as watch or n/a; do not spend live-run time until scope changes. | argo-cd/argo-cd@9.5.17/default, argo-cd/argocd-image-updater@1.2.2/default, autoscaler/cluster-autoscaler@9.57.0/default, cloudnative-pg/cloudnative-pg@0.28.2/default |
| Derived ConfigHub variants | 13 | Downstream ConfigHub variants cloned from reviewed bases. These show environment, region, customer, or target-specific post-render customization without a Helm rerender. | bitnami/nginx@24.0.2/customer-acme-prod, bitnami/nginx@24.0.2/prod-us-east, bitnami/redis@25.5.3/prod-us-east, bitnami/redis@25.5.3/staging-eu-west |
| Candidate rows | 67 | Planned F2/F3 paths from committed work-order data. These are visible product paths, not proof claims. | autoscaler/cluster-autoscaler@9.57.0/default + review, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default + topology, bitnami/contour@21.1.4/legacy + review, bitnami/memcached@8.5.5/storage-default-reviewed |
| Custom-discussion candidates | 56 | Non-default or target-specific paths where inputs, ownership, or risk must be discussed before the row becomes runnable. | autoscaler/cluster-autoscaler@9.57.0/default + review, bitnami/contour@21.1.4/legacy + review, bitnami/memcached@8.5.5/storage-default-reviewed, bitnami/phpmyadmin@20.0.0/web-ui-existing-secret |
| Decide target run scope | 233 | Rows without a target run decision or target-bound receipt yet. | aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argo-cd@9.5.17/default |
| Investigate hard gaps | 111 | Rows with a named chart/product gap rather than a simple missing receipt. | argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argocd-image-updater@1.2.2/default, autoscaler/cluster-autoscaler@9.57.0/default + review |
| Chart | Layer | Kind | Variant | Links | Tier | Use | Evidence | Core | Quirks | Hooks | Route | Route record | Prerequisite record | R | C | L | Y | G | P | K | V | Action | Outcome | Target | Scope | Gap | Active proof | Next action |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| aqua/trivy-operator@0.32.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| argo-cd/argo-cd@9.5.15 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=argocd; delivery=con... | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✗ | ✓ | · | ✓ | stage | live-parity | · | – | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| argo-cd/argo-cd@9.5.17 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | · | ✓ | deferred | local-live | · | – | – | gitops-runtime-review | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | ✓ | – | ✗ | ✓ | ✓ | · | run | live-parity | · | – | – | – | ||
| argo-cd/argo-cd@10.1.3 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| argo-cd/argo-cd@10.2.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| argo-cd/argo-events@2.4.21 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| argo-cd/argo-rollouts@2.40.9 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| argo-cd/argo-workflows@1.0.14 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | 1 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✗ | – | 1 | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | controller-default-reviewed | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✗ | – | 1 | · | ✓ | ✓ | ✓ | ✓ | ✗ | · | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | minimal-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✓ | – | 1 | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| argo-cd/argocd-image-updater@1.2.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | add at least one user-shaped variant before catalog promotion | |
| autoscaler/cluster-autoscaler@9.57.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ! | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | controller-default-reviewed | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✗ | ✓ | model | live-parity | · | – | – | inspect-receipt | run catalog promotion review | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | the missing Helm input value(s) | – | unknown-preflight: unknown; npm run kind-parity:run -- --chart auto... | |
| autoscaler/vertical-pod-autoscaler@0.9.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| aws-controllers-k8s/ec2-chart@1.18.4 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| F2b | base | eks-inference | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| aws-controllers-k8s/eks-chart@1.16.3 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| F2b | base | eks-inference | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| aws-controllers-k8s/iam-chart@1.7.3 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| F2b | base | eks-inference | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | model | in-confighub | · | – | – | target-fit-review | add at least one user-shaped variant before catalog promotion | |
| F3 | candidate | default + topology | source · catalog GitHub folder | candidate | candidate | candidate | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | AWS/EKS metadata + node providerID | – | provide-storage-or-topology: AWS/EKS metadata + node providerID; np... | |
| bitnami/apache@11.4.29 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| bitnami/contour@21.1.4 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac | 1 | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | ! | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | existing-secret (chart ships no Secret toggle) | runtime-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F3 | candidate review | legacy + review | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| bitnami/elasticsearch@22.1.6 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| bitnami/memcached@8.5.5 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | existing-secret (chart ships no Secret toggle) | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | storage-default-reviewed | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | StorageClass; persistence; CRD ownership if present; pr... | – | design effective-values-storage-default-reviewed.yaml from the name... | |
| bitnami/mongodb@19.0.7 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret-replicaset | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | – | – | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ! | run | live-parity | ✓ | cub-lk-kind-vanilla; namespace=mongodb; delivery=co... | – | – | choose whether static-passwords is in production scope; close or do... | |
| bitnami/mongodb@19.0.9 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret-replicaset | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | · | ! | run | local-live | · | – | – | gitops-runtime-review | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | – | – | ||
| bitnami/mongodb@19.1.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret-replicaset | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ! | run | two-cluster-kind-parity | · | – | – | gitops-runtime-review | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| bitnami/mysql@14.0.3 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | ✓ | cub-lk-kind-vanilla; namespace=mysql; delivery=conf... | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| bitnami/nginx@24.0.2 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-tls-ingress | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | existing-secret (chart ships no Secret toggle) | – | ||
| F2b | base | http-clusterip | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=nginx; delivery=conf... | existing-secret (chart ships no Secret toggle) | – | choose whether http-clusterip is in production scope; close or docu... | |
| F4b | derived from http-clusterip | customer-acme-prod | source · catalog · variant · package · revision GitHub folder | derived | derived | target-bound | ✓ | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | ✓ | – | – | ✓ | – | – | – | – | target-bound-derived | ✓ | helm-expt-derived-nginx-cust-0605-cluster/oci | – | – | keep the target-bound derived variant receipt fresh when the source... | |
| F4b | derived from http-clusterip | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | target-bound | ✓ | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | ✓ | – | – | ✓ | – | – | – | – | target-bound-derived | ✓ | helm-expt-derived-nginx-0605-cluster/oci | – | – | keep the target-bound derived variant receipt fresh when the source... | |
| bitnami/nginx@24.0.4 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-tls-ingress | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | · | ! | run | local-live | · | – | – | gitops-runtime-review | ||
| F2b | base | http-clusterip | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ! | run | live-parity | · | – | – | – | ||
| bitnami/nginx@25.0.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-tls-ingress | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ! | run | two-cluster-kind-parity | · | – | – | gitops-runtime-review | ||
| F2b | base | http-clusterip | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| bitnami/opensearch@2.0.10 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | local live | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | – | image-retention-review | run catalog promotion review | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | local live | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | – | image-retention-review | run catalog promotion review | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | local live | ✗ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | – | image-retention-review | run catalog promotion review | |
| bitnami/phpmyadmin@20.0.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2c | candidate review | web-ui-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | Service/Ingress shape; TLS Secret reference; auth or ad... | – | design effective-values-web-ui-existing-secret.yaml from the named ... | |
| bitnami/postgresql@18.6.7 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | ha (curated proof lane - bespoke teaching needed) | – | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ! | run | live-parity | ✓ | cub-lk-kind-vanilla; namespace=postgresql; delivery... | ha (curated proof lane - bespoke teaching needed) | – | choose whether static-passwords is in production scope; close or do... | |
| bitnami/postgresql@18.6.10 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ! | run | live-parity | · | – | – | – | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | – | – | ||
| bitnami/postgresql@18.7.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| bitnami/rabbitmq@16.0.14 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | ✓ | cub-lk-kind-vanilla; namespace=rabbitmq; delivery=c... | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| bitnami/redis@25.5.3 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=redis; delivery=conf... | – | – | choose whether default is in production scope; close or document it... | |
| F2b | base | reuse-existing-secret | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | – | – | ||
| F4a | derived from default | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | redis-targets/prod-us-east | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| F4b | derived from default | staging-eu-west | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | ✓ | – | – | ✗ | – | – | – | stage | derived-intended-state | ✗ | <target-space>/oci | namespace-mutation-not-yet-modeled;redis-secret-deliver... | target-bound-derived-variant | Add a derived namespace mutation check for Redis or keep namespace ... | |
| bitnami/redis@27.0.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| F2b | base | reuse-existing-secret | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | ||
| bitnami/spark@10.0.3 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| bitnami/zookeeper@13.8.7 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | legacy | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | local live | ✗ | lookup;generated-facts;tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✗ | ✓ | image | local-live | · | – | existing-secret (chart ships no Secret toggle) | image-retention-review | review limitation before promotion: existing-secret (chart ships no... | |
| cloudnative-pg/cloudnative-pg@0.28.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;tpl;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | generated-facts;tpl;crds;cluster-rbac;webhooks | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | generated-facts;tpl;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| cloudpirates/nginx@0.16.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| cloudpirates/rabbitmq@0.21.13 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| cloudpirates/redis@0.34.11 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| coredns/coredns@1.45.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | controller-default-reviewed | source · catalog GitHub folder | candidate | human review | candidate | – | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | CRD ownership; admission/webhook behavior; RBAC scope; ... | – | design effective-values-controller-default-reviewed.yaml from the n... | |
| crossplane-stable/crossplane@2.3.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| descheduler/descheduler@0.36.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | tpl;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | cluster-metrics-readonly | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service exposure; RBAC scope; persistence if the chart ... | – | design effective-values-cluster-metrics-readonly.yaml from the name... | |
| dex/dex@0.24.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | web-ui-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | Service/Ingress shape; TLS Secret reference; auth or ad... | – | design effective-values-web-ui-existing-secret.yaml from the named ... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| elastic/eck-operator@3.4.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| elastic/filebeat@8.5.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | tpl;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F2b | base | node-or-cluster-collector | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | tpl;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate | default + secret | source · catalog GitHub folder | candidate | candidate | candidate | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | Secret elasticsearch-master-certs | – | stage-secret: Secret elasticsearch-master-certs; npm run kind-parit... | |
| F3 | candidate review | node-or-cluster-collector + external-api | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | the upstream service/endpoint the workload connects to | – | provide-external-service: unknown; npm run kind-parity:run -- --cha... | |
| F3 | candidate review | node-or-cluster-collector + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| elastic/kibana@8.5.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | tpl | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | web-ui-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | tpl | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | Service/Ingress shape; TLS Secret reference; auth or ad... | – | design effective-values-web-ui-existing-secret.yaml from the named ... | |
| F3 | candidate review | default + external-api | source · catalog GitHub folder | candidate | human review | candidate | – | tpl | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | the upstream service/endpoint the workload connects to | – | provide-external-service: unknown; npm run kind-parity:run -- --cha... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| elastic/logstash@8.5.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | tpl;capabilities;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| elastic/metricbeat@8.5.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate | default + secret | source · catalog GitHub folder | candidate | candidate | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | Secret elasticsearch-master-certs | – | stage-secret: Secret elasticsearch-master-certs; npm run kind-parit... | |
| external-dns/external-dns@1.21.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;crds;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | dry-run-txt-registry | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;crds;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;crds;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2c | candidate review | cloudflare-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | provider.name=cloudflare; env uses valueFrom secretKeyR... | – | Cloudflare install with API token supplied by an existing Secret.; ... | |
| F2c | candidate review | route53-irsa | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | provider.name=aws; serviceAccount.annotations includes ... | – | AWS Route53 install using IAM role for service account rather than ... | |
| external-secrets/external-secrets@2.5.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=external-secrets; de... | – | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | image policy decision recorded for a target scope; create digest-pi... | |
| external-secrets/external-secrets@2.7.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| external-secrets/external-secrets@2.8.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | ✗ | · | · | · | stage | render-parity | · | – | – | – | ||
| fairwinds-stable/goldilocks@10.3.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | existing-secret (chart ships no Secret toggle) | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | cluster-metrics-readonly | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service exposure; RBAC scope; persistence if the chart ... | – | design effective-values-cluster-metrics-readonly.yaml from the name... | |
| fairwinds-stable/vpa@4.11.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | lookup;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | review APIService render-path notes: current maintained bases do no... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | lookup;tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | review APIService render-path notes: current maintained bases do no... | |
| falcosecurity/falco@9.0.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | lookup;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | node-or-cluster-collector | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | DaemonSet versus Deployment shape; destination Secret o... | – | design effective-values-node-or-cluster-collector.yaml from the nam... | |
| falcosecurity/falcosidekick@0.13.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| fluent/fluent-bit@0.57.6 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;hooks;cluster-rbac | 1 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | needs variant | live parity | ✓ | tpl;capabilities;hooks;cluster-rbac | 1 | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | node-or-cluster-collector | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;hooks;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | DaemonSet versus Deployment shape; destination Secret o... | – | design effective-values-node-or-cluster-collector.yaml from the nam... | |
| fluent/fluentd@0.5.3 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | kind parity | ✗ | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | node-or-cluster-collector | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | DaemonSet versus Deployment shape; destination Secret o... | – | design effective-values-node-or-cluster-collector.yaml from the nam... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| gatekeeper/gatekeeper@3.22.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | capabilities;hooks;crds;cluster-rbac;webhooks | 4 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✓ | capabilities;hooks;crds;cluster-rbac;webhooks | 4 | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | capabilities;hooks;crds;cluster-rbac;webhooks | 4 | – | · | ✓ | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| gitlab/gitlab-runner@0.89.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | generated-facts;tpl;capabilities | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ! | ✓ | stage | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | runner-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | registration Secret reference; runner RBAC; namespace; ... | – | design effective-values-runner-existing-secret.yaml from the named ... | |
| F3 | candidate review | default + external-api | source · catalog GitHub folder | candidate | human review | candidate | – | generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | the upstream service/endpoint the workload connects to | – | provide-external-service: unknown; npm run kind-parity:run -- --cha... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| grafana/alloy@1.8.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✗ | run | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✗ | run | live-parity | · | – | – | – | run catalog promotion review | |
| grafana/alloy@1.11.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| grafana/grafana@10.5.15 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | existing-secret-ingress | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | – | vanilla-kubernetes; namespace=grafana; delivery=con... | – | – | resolve image digests for each affected variant before production O... | |
| F2b | base | static-passwords | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ! | run | live-parity | · | – | – | – | resolve image digests for each affected variant before production O... | |
| F4a | derived from static-passwords | customer-acme-prod | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | – | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | observability-targets/customer-acme-prod | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| F4a | derived from static-passwords | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | – | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | observability-targets/prod-us-east | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| grafana/loki@7.0.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2b | base | simple-scalable-minio | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | single-binary-filesystem | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | ✓ | cub-lk-kind-vanilla; namespace=loki; delivery=confi... | – | – | image policy decision recorded for a target scope; create digest-pi... | |
| grafana/loki@7.1.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| grafana/promtail@6.17.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| grafana/pyroscope@2.0.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | existing-secret (chart ships no Secret toggle) | runtime-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | · | ! | ! | ✗ | ✓ | model | in-confighub | · | – | existing-secret (chart ships no Secret toggle) | runtime-review | review limitation before promotion: existing-secret (chart ships no... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | limit first | kind parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | existing-secret (chart ships no Secret toggle) | runtime-review | review limitation before promotion: existing-secret (chart ships no... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate review | ha + review | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate review | no-crds + review | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| grafana/rollout-operator@0.49.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| grafana/tempo@1.24.4 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (tempo single-binary chart; HA is the separate tempo... | – | choose or create an F2 base before rendering or deploying |
| F2b | base | local-persistent | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | – | vanilla-kubernetes; namespace=tempo; delivery=confi... | ha (tempo single-binary chart; HA is the separate tempo... | – | resolve image digests for each affected variant before production O... | |
| F2b | base | s3-query-observability | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | ha (tempo single-binary chart; HA is the separate tempo... | gitops-runtime-review | resolve image digests for each affected variant before production O... | |
| haproxytech/kubernetes-ingress@1.52.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| hashicorp/consul@2.0.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2b | base | default-control-plane | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | ✓ | cub-lk-kind-vanilla; namespace=consul; delivery=con... | ha (curated proof lane - bespoke teaching needed) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | secure-mesh-existing-secrets | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✗ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ✗ | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | ha (curated proof lane - bespoke teaching needed) | gitops-runtime-review | image policy decision recorded for a target scope; create digest-pi... | |
| hashicorp/terraform@1.1.2 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | crds | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | crds | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ! | ! | ✗ | ✓ | model | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | crds | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | crds | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate review | no-crds + review | source · catalog GitHub folder | candidate | human review | candidate | – | crds | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate | no-crds + secret | source · catalog GitHub folder | candidate | candidate | candidate | – | crds | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | Secret workspacesecrets; Secret terraformrc | – | stage-secret: Secret workspacesecrets; Secret terraformrc; npm run ... | |
| hashicorp/vault@0.32.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | ✗ | kind-vanilla; namespace=vault; delivery=confighub-o... | – | – | resolve image digests for each affected variant before production O... | |
| F2b | base | dev-mode | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | resolve image digests for each affected variant before production O... | |
| F2b | base | ha-raft-ui | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✗ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ! | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | – | operating-policy | resolve image digests for each affected variant before production O... | |
| F3 | candidate review | ha-raft-ui + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F4a | derived from default | regulated-prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | security-targets/regulated-prod-us-east | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| F4a | derived from default | staging-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | tpl;capabilities;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | security-targets/staging-us-east | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| ingress-nginx/ingress-nginx@4.15.1 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | tpl;capabilities;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | record the target-scoped lifecycle support decision, then refresh l... | |
| F2b | base | admission-disabled | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks | – | – | – | · | ✓ | ✓ | ✓ | · | ! | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | record the target-scoped lifecycle support decision, then refresh l... | |
| F2b | base | internal-clusterip | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | tpl;capabilities;cluster-rbac;webhooks | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | ✓ | cub-lk-kind-vanilla; namespace=ingress-nginx; deliv... | – | – | record the target-scoped lifecycle support decision, then refresh l... | |
| istio/gateway@1.30.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | – | image-retention-review | run catalog promotion review | |
| F2b | base | controller-default-reviewed | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | image | in-confighub | · | – | – | image-retention-review | run catalog promotion review | |
| istio/istiod@1.30.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✗ | ✗ | ✗ | ✓ | stage | in-confighub | · | – | – | stage-prerequisite | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | external-ca | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | external CA / certificate provider values set after sou... | – | Use externally managed CA material rather than implicit control-pla... | |
| F2c | candidate | minimal-profile | source · catalog GitHub folder | candidate | candidate | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | pilot resource profile lowered; telemetry/addons left out | – | Smallest reasonable control plane for proof/test clusters. | |
| F2c | candidate review | revisioned-control-plane | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | revision set; pilot autoscale reviewed; namespace injec... | – | Install a revisioned Istio control plane for safe canary/promotion. | |
| F3 | candidate | default + namespace | source · catalog GitHub folder | candidate | candidate | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | the target Namespace named by the chart | – | create-namespace: unknown; npm run live-parity:run -- --recipe reci... | |
| jaegertracing/jaeger@4.8.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | lookup;generated-facts;tpl;capabilities | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | existing-secret (chart ships no Secret toggle) | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | node-or-cluster-collector | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | DaemonSet versus Deployment shape; destination Secret o... | – | design effective-values-node-or-cluster-collector.yaml from the nam... | |
| jaegertracing/jaeger-operator@2.57.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | crds;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | crds;webhooks | – | – | – | ✓ | ✓ | ✓ | ✓ | · | ✗ | ✗ | ✗ | ✓ | stage | local-live | · | – | – | stage-prerequisite | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | crds;webhooks | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ✓ | ✓ | ✗ | ✓ | stage | live-parity | · | – | – | stage-prerequisite | run catalog promotion review | |
| F3 | candidate review | default + crd | source · catalog GitHub folder | candidate | human review | candidate | – | crds;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | cert-manager CRDs | – | install-crds: cert-manager CRDs; npm run live-parity:run -- --recip... | |
| F3 | candidate review | no-crds + crd | source · catalog GitHub folder | candidate | human review | candidate | – | crds;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | cert-manager CRDs | – | install-crds: cert-manager CRDs; npm run kind-parity:run -- --chart... | |
| jetstack/cert-manager@v1.20.2 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | write or fix the receipt for target fact preflight | |
| F2b | base | crds-enabled | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | – | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=cert-manager; delive... | – | – | write or fix the receipt for target fact preflight | |
| jetstack/cert-manager@v1.21.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | crds-enabled | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| jetstack/cert-manager-csi-driver@v0.14.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| jetstack/trust-manager@v0.22.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | – | gitops-runtime-review | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| karpenter/karpenter@1.14.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | capabilities;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | capabilities;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | review source/current-version drift and refresh recipe if needed | |
| F2b | base | crds-managed | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | capabilities;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | review source/current-version drift and refresh recipe if needed | |
| F2b | base | eks-inference | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | capabilities;crds;cluster-rbac;webhooks | – | – | – | ✓ | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | review source/current-version drift and refresh recipe if needed | |
| kedacore/keda@2.19.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;crds;cluster-rbac;webhooks | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run APIService promotion review: choose supported base, target scop... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;crds;cluster-rbac;webhooks | 1 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run APIService promotion review: choose supported base, target scop... | |
| kyverno/kyverno@3.8.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | 8 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✓ | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | 8 | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | review | live parity | ✓ | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | 8 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | run | live-parity | · | – | – | – | run catalog promotion review | |
| F2c | candidate review | default-admission | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | admissionController replicas/resources reviewed; webhoo... | – | Normal Kyverno admission controller path with explicit webhook disp... | |
| F2c | candidate review | external-crds | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | CRD install disabled after source review; Kyverno CRDs ... | – | Install controller assuming CRDs are managed by platform lifecycle.... | |
| F2c | candidate review | ha-admission-reports | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | replica counts >1; reports/background controller settin... | – | Production-shaped HA admission and reports controller split.; webho... | |
| kyverno/kyverno@3.8.2 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | 8 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 8 | ✓ | · | · | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | ||
| kyverno/kyverno-policies@3.8.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;tpl | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | local live | ✗ | lookup;tpl | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | ! | ✓ | deferred | local-live | · | – | – | gitops-runtime-review | add at least one user-shaped variant before catalog promotion | |
| kyverno/kyverno-policies@3.8.2 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| linkerd/linkerd-crds@1.8.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | kind parity | ✗ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | – | gitops-runtime-review | add at least one user-shaped variant before catalog promotion | |
| longhorn/longhorn@1.11.2 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | generated-facts;tpl;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | generated-facts;tpl;cluster-rbac | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=longhorn-system; del... | – | – | choose the target-ready base, then record explicit security accepta... | |
| F2b | base | ui-ingress | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | generated-facts;tpl;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | choose the target-ready base, then record explicit security accepta... | |
| longhorn/longhorn@1.12.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| metallb/metallb@0.16.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| metrics-server/metrics-server@3.13.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | existing-secret (chart ships no Secret toggle) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;capabilities;cluster-rbac | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=kube-system; deliver... | existing-secret (chart ships no Secret toggle) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F2b | base | external-tls-ca | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;capabilities;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | existing-secret (chart ships no Secret toggle) | – | image policy decision recorded for a target scope; create digest-pi... | |
| F4b | derived from default | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | target-bound | ✓ | lookup;generated-facts;capabilities;cluster-rbac | – | – | – | – | – | ✓ | – | – | ✓ | – | – | – | – | target-bound-derived | ✓ | helm-expt-derived-ms-0605-cluster/oci | – | – | keep the target-bound derived variant receipt fresh when the source... | |
| metrics-server/metrics-server@3.13.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | ✓ | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | external-tls-ca | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | ✓ | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| minio-operator/operator@7.1.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | storage-default-reviewed | source · catalog GitHub folder | candidate | human review | candidate | – | cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | StorageClass; persistence; CRD ownership if present; pr... | – | design effective-values-storage-default-reviewed.yaml from the name... | |
| minio-operator/tenant@7.1.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | kind parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | – | gitops-runtime-review | add at least one user-shaped variant before catalog promotion | |
| mysql/mysql-operator@2.3.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| nats/nack@0.34.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✗ | ✓ | model | live-parity | · | – | – | inspect-parity-diff | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| nats/nats@2.14.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✗ | ✓ | model | live-parity | · | – | – | inspect-parity-diff | run catalog promotion review | |
| nats/surveyor@0.20.9 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F2b | base | default-reviewed | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | run catalog promotion review | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| F3 | candidate review | default-reviewed + external-api | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | the upstream service/endpoint the workload connects to | – | provide-external-service: unknown; npm run kind-parity:run -- --cha... | |
| F3 | candidate review | default-reviewed + review | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ✗ | ✗ | ✗ | ✓ | model | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | storage-default-reviewed | source · catalog GitHub folder | candidate | human review | candidate | – | capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | StorageClass; persistence; CRD ownership if present; pr... | – | design effective-values-storage-default-reviewed.yaml from the name... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | value nfs.server | – | unknown-preflight: value nfs.server; npm run kind-parity:run -- --c... | |
| nvidia/nvidia-device-plugin@0.19.3 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| F2b | base | eks-inference | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| F2b | base | nfd-enabled | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | render | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | review chart analysis and create a recipe candidate | |
| oauth2-proxy/oauth2-proxy@10.7.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| open-telemetry/opentelemetry-operator@0.114.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ! | ! | ✓ | ✓ | stage | two-cluster-kind-parity | · | – | – | gitops-runtime-review | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✗ | – | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| opencost/opencost@2.5.21 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | ConfigHub | ✗ | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✗ | – | ! | ! | ✗ | ✓ | stage | in-confighub | · | – | – | runtime-review | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | cluster-metrics-readonly | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service exposure; RBAC scope; persistence if the chart ... | – | design effective-values-cluster-metrics-readonly.yaml from the name... | |
| F3 | candidate review | default + review | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | scope | candidate-plan | – | – | operator review of the runtime residue | – | operator-review: unknown; npm run live-parity:run -- --recipe recip... | |
| percona/pg-operator@3.0.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| percona/psmdb-operator@1.22.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| percona/pxc-operator@1.19.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | lookup;crds;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | lookup;crds;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| policy-reporter/policy-reporter@3.9.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| projectcalico/tigera-operator@v3.32.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;hooks;cluster-rbac | 1 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | next80 | needs variant | live parity | ✗ | lookup;hooks;cluster-rbac | 1 | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | ✓ | ✓ | ✓ | ✓ | run | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | controller-default-reviewed | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;hooks;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | CRD ownership; admission/webhook behavior; RBAC scope; ... | – | design effective-values-controller-default-reviewed.yaml from the n... | |
| prometheus-community/alertmanager@1.37.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | ha | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| prometheus-community/kube-prometheus-stack@85.3.3 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage | 2 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage | 2 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | · | ✓ | stage | live-parity | ✓ | cub-lk-kind-vanilla; namespace=monitoring; delivery... | – | – | choose the target-ready base, then record explicit security accepta... | |
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | top20 | try | live parity | ✓ | lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage | 2 | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | · | ✓ | – | live-parity | · | – | – | – | choose the target-ready base, then record explicit security accepta... | |
| prometheus-community/kube-prometheus-stack@86.1.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | 2 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✓ | – | 2 | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✗ | ✓ | model | live-parity | · | – | – | inspect-parity-diff | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✓ | – | 2 | ✓ | · | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | ||
| prometheus-community/kube-prometheus-stack@87.15.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | 2 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | ✓ | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | existing-secret | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | ✓ | · | · | · | stage | render-parity | · | – | – | – | ||
| prometheus-community/kube-prometheus-stack@87.19.2 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | 2 | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | ✓ | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | existing-secret | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | · | · | · | · | stage | render-parity | · | – | – | – | ||
| F2b | base | no-crds | source · catalog · variant · package · revision · routes · intent GitHub folder | - | - | - | ✗ | – | 2 | ✓ | · | ✓ | ✓ | · | · | · | ✓ | · | · | · | stage | render-parity | · | – | – | – | ||
| prometheus-community/kube-state-metrics@7.4.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | cluster-metrics-readonly | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| prometheus-community/prometheus@29.8.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | ha (curated proof lane - bespoke teaching needed) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | · | – | ha (curated proof lane - bespoke teaching needed) | – | choose the target-ready base, then record explicit security accepta... | |
| F2b | base | server-only-ephemeral | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | · | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=monitoring; delivery... | ha (curated proof lane - bespoke teaching needed) | – | choose the target-ready base, then record explicit security accepta... | |
| F4a | derived from default | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | monitoring-targets/prod-us-east | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| F4a | derived from default | staging-eu-west | source · catalog · variant · package · revision GitHub folder | derived | derived | derived clone | ✗ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | ✓ | – | – | · | – | – | – | run | derived-intended-state | · | monitoring-targets/staging-eu-west | – | target-bound-derived-variant | bind the derived ConfigHub variant to a target and run the target-b... | |
| F4b | derived from server-only-ephemeral | prod-us-east | source · catalog · variant · package · revision GitHub folder | derived | derived | target-bound | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | ✓ | – | – | ✓ | – | – | – | – | target-bound-derived | ✓ | helm-expt-derived-prometheus-0605-cluster/oci | – | – | keep the target-bound derived variant receipt fresh when the source... | |
| F4b | derived from server-only-ephemeral | staging-eu-west | source · catalog · variant · package · revision GitHub folder | derived | derived | target-bound | ✓ | generated-facts;tpl;capabilities;cluster-rbac;stateful-storage | – | – | – | – | – | ✓ | – | – | ✓ | – | – | – | – | target-bound-derived | ✓ | helm-expt-derived-prom-stg-0605-cluster/oci | – | – | keep the target-bound derived variant receipt fresh when the source... | |
| prometheus-community/prometheus@29.9.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | – | gitops-runtime-review | ||
| F2b | base | server-only-ephemeral | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | ||
| prometheus-community/prometheus-adapter@5.3.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | live parity | ✗ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✗ | · | ✗ | ✗ | ✗ | ✓ | model | in-confighub | · | – | – | capability-profile-base | Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and... | |
| F2b | base | apiservice-v1-capability | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | live parity | ✓ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and... | |
| F2b | base | cluster-metrics-readonly | source · catalog · variant · package · revision · intent GitHub folder | next80 | - | live parity | ✗ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✗ | · | ✗ | ✗ | ✗ | ✓ | model | in-confighub | · | – | – | capability-profile-base | Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and... | |
| F3 | candidate | cluster-metrics-readonly + crd | source · catalog GitHub folder | candidate | candidate | candidate | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | the chart's CRDs | – | install-crds: unknown; npm run kind-parity:run -- --chart prometheu... | |
| F3 | candidate | default + crd | source · catalog GitHub folder | candidate | candidate | candidate | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | the chart's CRDs | – | install-crds: unknown; npm run kind-parity:run -- --chart prometheu... | |
| prometheus-community/prometheus-blackbox-exporter@11.10.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | cluster-metrics-readonly | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| prometheus-community/prometheus-blackbox-exporter@11.15.1 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| prometheus-community/prometheus-node-exporter@4.55.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | cluster-metrics-readonly | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | generated-facts;tpl;capabilities;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| prometheus-community/prometheus-operator-crds@29.0.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | generated-facts;crds | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | generated-facts;crds | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | cluster-metrics-readonly | source · catalog GitHub folder | candidate | human review | candidate | – | generated-facts;crds | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service exposure; RBAC scope; persistence if the chart ... | – | design effective-values-cluster-metrics-readonly.yaml from the name... | |
| prometheus-community/prometheus-pushgateway@3.6.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | tpl;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | cluster-metrics-readonly | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service exposure; RBAC scope; persistence if the chart ... | – | design effective-values-cluster-metrics-readonly.yaml from the name... | |
| rook-release/rook-ceph@v1.19.5 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | no-crds (template-baked CRDs; no clean chart toggle yet) | – | add at least one user-shaped variant before catalog promotion | |
| rook-release/rook-ceph-cluster@v1.19.5 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | local live | ✗ | – | – | – | – | ✓ | ✓ | ✓ | ✓ | – | ✗ | ✗ | ✗ | ✓ | stage | local-live | · | – | – | stage-prerequisite | add at least one user-shaped variant before catalog promotion | |
| F3 | candidate | default + namespace | source · catalog GitHub folder | candidate | candidate | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | Namespace rook-ceph | – | create-namespace: Namespace rook-ceph; npm run live-parity:run -- -... | |
| runix/pgadmin4@1.62.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | tpl;capabilities;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| F2c | candidate review | web-ui-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | tpl;capabilities;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | Service/Ingress shape; TLS Secret reference; auth or ad... | – | design effective-values-web-ui-existing-secret.yaml from the named ... | |
| sealed-secrets/sealed-secrets@2.18.6 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| secrets-store-csi-driver/secrets-store-csi-driver@1.6.0 | F1 | source | (source) | source · catalog GitHub folder | top20 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | – | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | ✓ | cub-lk-kind-vanilla; namespace=kube-system; deliver... | – | – | choose the target-ready base, then record explicit security accepta... | |
| F2b | base | sync-secret-rotation | source · catalog · variant · package · revision · intent GitHub folder | top20 | try | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | choose the target-ready base, then record explicit security accepta... | |
| stakater/reloader@2.2.12 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | controller-default-reviewed | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| stakater/reloader@2.2.14 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| strimzi/strimzi-kafka-operator@1.0.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;capabilities;crds;cluster-rbac | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | tpl;capabilities;crds;cluster-rbac | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✓ | ✓ | deferred | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | tpl;capabilities;crds;cluster-rbac | – | – | – | ✓ | ✓ | ✓ | ✗ | · | ✓ | ✓ | ✓ | ✓ | stage | live-parity | · | – | – | – | run catalog promotion review | |
| traefik/traefik@40.2.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ✓ | ✓ | ✗ | ✓ | model | live-parity | · | – | – | inspect-parity-diff | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✗ | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | · | ✓ | ✓ | ✓ | · | ! | ! | ✓ | ✓ | deferred | two-cluster-kind-parity | · | – | – | gitops-runtime-review | run catalog promotion review | |
| F2c | candidate review | cloud-loadbalancer | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service.type=LoadBalancer; ingressClass.isDefaultClass ... | – | Normal cloud ingress-controller shape with explicit load balancer o... | |
| F2c | candidate review | external-crds | source · catalog GitHub folder | candidate | human review | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | providers.kubernetesCRD.enabled=false or CRD install di... | – | Use Traefik while CRD ownership is handled outside the package.; co... | |
| F2c | candidate | internal-clusterip-dashboard-off | source · catalog GitHub folder | candidate | candidate | candidate | – | lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | service.type=ClusterIP; ingressRoute.dashboard.enabled=... | – | Safe local/internal install with no public LoadBalancer and dashboa... | |
| traefik/traefik@41.0.2 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| valkey/valkey@0.11.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | tpl;stateful-storage | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | render | ✗ | tpl;stateful-storage | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| velero/velero@12.0.1 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ✗ | ✗ | ✗ | ✓ | model | in-confighub | · | – | – | render-input-model | run catalog promotion review | |
| F2b | base | no-crds | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | ConfigHub | ✗ | – | – | – | – | · | ✓ | ✓ | ✗ | – | ✗ | ✗ | ✗ | ✓ | model | in-confighub | · | – | – | render-input-model | run catalog promotion review | |
| F2c | candidate review | aws-s3-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | configuration.backupStorageLocation provider=aws; confi... | – | AWS S3 backup location with cloud credentials supplied externally.;... | |
| F2c | candidate review | azure-blob-existing-secret | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | configuration.backupStorageLocation provider=azure; buc... | – | Azure Blob backup location with credentials supplied externally. | |
| F2c | candidate review | filesystem-backup-node-agent | source · catalog GitHub folder | candidate | human review | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | model | candidate-plan | – | – | deployNodeAgent=true; configuration.features reviewed; ... | – | Enable node-agent path for filesystem backup coverage.; daemonset p... | |
| F3 | candidate | no-crds + crd | source · catalog GitHub folder | candidate | candidate | candidate | – | – | – | – | – | – | – | – | – | – | – | – | – | – | stage | candidate-plan | – | – | the chart's CRDs | – | install-crds: unknown; npm run kind-parity:run -- --chart velero/ve... | |
| velero/velero@12.1.0 | F1 | source | (source) | source · catalog GitHub folder | - | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | - | - | - | ✗ | – | – | – | – | · | ✓ | · | · | – | · | · | · | · | stage | render-parity | · | – | – | – | ||
| vm/victoria-logs-single@0.12.5 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | needs variant | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | add at least one user-shaped variant before catalog promotion | |
| vm/victoria-metrics-single@0.39.0 | F1 | source | (source) | source · catalog GitHub folder | next80 | source | source lock | – | – | – | – | – | – | – | – | – | – | – | – | – | – | – | source-lock | – | – | – | – | choose or create an F2 base before rendering or deploying |
| F2a | base | default | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review | |
| F2b | base | default-reviewed | source · catalog · variant · package · revision · intent GitHub folder | next80 | review | live parity | ✓ | – | – | – | – | · | ✓ | ✓ | ✓ | – | ✓ | ✓ | ✓ | ✓ | – | live-parity | · | – | – | – | run catalog promotion review |