apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "InstallGate"
metadata:
  name: "bitnami-apache-11-4-29-legacy-r001"
  labels:
    confighub.io/chart-ref: "bitnami/apache"
    confighub.io/chart-version: "11.4.29"
    confighub.io/image-source: "bitnamilegacy"
    confighub.io/proof-tier: "next80-full"
    confighub.io/variant: "legacy"
spec:
  variantRevision: "../variant-revision.yaml"
  renderedObjectSetSHA256: "1d068da0bd7af6230de4a414eb9abc70a895f63cfd7d79f5591d6951ece06399"
  decision: "allow"
  allowedScopes:
    - "local-test"
    - "review"
    - "production-candidate"
  blockedScopes:
    []
  reasons:
    - "regular Helm output matches cub installer setup for bitnami/apache@11.4.29 (legacy image-remap variant)"
    - "5 Helm objects are bound to renderedObjectSetSHA256"
    - "rendered-object scan produced no findings in the local proof policy"
    - "local-live lane confirms workload readiness after remapping images to the verified-pullable docker.io/bitnamilegacy namespace"