apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ChartArtifactIndex"
metadata:
  name: "bitnami-nginx-24.0.2"
  chart: "bitnami/nginx"
  version: "24.0.2"
  generatedBy: "scripts/generate-chart-catalogs.mjs"
spec:
  doctrine: "1 Helm chart version -> 1 core recipe -> N variants -> M variant revisions -> package bases -> receipts"
  chart:
    ref: "bitnami/nginx"
    version: "24.0.2"
    appVersion: "1.31.1"
    sourceLock: "recipes/bitnami/nginx/24.0.2/source-lock.yaml"
    dependencyLock: "recipes/bitnami/nginx/24.0.2/dependency-lock.yaml"
    repository: "https://charts.bitnami.com/bitnami"
    packageSHA256: "de4124245234c508f16f074351f66e701e101177439f38ddee89e5a038dae3a3"
  recipe:
    path: "recipes/bitnami/nginx/24.0.2/recipe.yaml"
    importMode: "render-and-vendor"
    helmPlan: "recipes/bitnami/nginx/24.0.2/helm-plan.yaml"
    chartDossier: "recipes/bitnami/nginx/24.0.2/chart-dossier.yaml"
    controlPoints: "recipes/bitnami/nginx/24.0.2/control-points.yaml"
    valueModel: "recipes/bitnami/nginx/24.0.2/value-model.yaml"
    valueSourceMap: "recipes/bitnami/nginx/24.0.2/value-source-map.yaml"
    weirdnessAndMitigations: "recipes/bitnami/nginx/24.0.2/weirdness-and-mitigations.md"
    helmPainReport: "recipes/bitnami/nginx/24.0.2/helm-pain-report.yaml"
    controlPointCategories:
      - "availability-policy"
      - "capability-profile"
      - "dependency-lock"
      - "deployment-workload"
      - "edge-ingress-policy"
      - "extension-slots"
      - "generated-facts"
      - "installer-support-object"
      - "network-policy"
      - "source-lock"
      - "target-facts"
  catalogStatus:
    path: "recipes/bitnami/nginx/24.0.2/catalog-status.yaml"
    status: "catalog-supported"
    supportLevel: "supported-for-declared-scopes"
    supportedScopes:
      - "local-test"
    productionReadiness: "production-review-ready"
    supportedVariants:
      - "http-clusterip"
      - "existing-tls-ingress"
    candidateVariants:
      []
    deferredVariants:
      []
  proofSummary:
    adoptionBucket: "try-from-public-catalog"
    userStatus: "catalog-supported-with-live-evidence"
    strongestEvidence: "live-helm-vs-confighub-parity"
    proofLanes:
      renderParity: "2/2"
      inConfigHub: "2/2"
      localLive: "2/2"
      gitopsLive: "2/2"
      liveParity: "2/2"
    featureSummary: "generated-secrets;install-vs-upgrade;extension-slots;remote-dependencies"
    hardGap: "existing-secret (chart ships no Secret toggle)"
    nextAction: "choose whether http-clusterip is in production scope; close or document its render-only live-readiness issue first"
  installerPackage:
    path: "packages/bitnami/nginx/24.0.2"
    ociRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2"
    installer: "packages/bitnami/nginx/24.0.2/installer.yaml"
    receipt: "recipes/bitnami/nginx/24.0.2/publication/installer-package-receipt.yaml"
    deterministicBundleSHA256: "2ad752b92ec7fe256da54a2b86fc0afde30d1f9afe38819587fb47c9cb9ecb8d"
    deterministicAcrossTwoLocalBundles: true
    bases:
      -
        name: "http-clusterip"
        path: "packages/bitnami/nginx/24.0.2/bases/http-clusterip"
        default: true
        description: "nginx plain HTTP ClusterIP variant rendered from bitnami/nginx@24.0.2"
      -
        name: "existing-tls-ingress"
        path: "packages/bitnami/nginx/24.0.2/bases/existing-tls-ingress"
        default: false
        description: "nginx existing TLS with ingress variant rendered from bitnami/nginx@24.0.2"
  variants:
    -
      name: "http-clusterip"
      variant: "recipes/bitnami/nginx/24.0.2/variants/http-clusterip/variant.yaml"
      namespace: "nginx"
      releaseName: "nginx"
      valuesProfile: "recipes/bitnami/nginx/24.0.2/effective-values.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        {}
      targetFactSummary: "none"
      packageBase:
        name: "http-clusterip"
        path: "packages/bitnami/nginx/24.0.2/bases/http-clusterip"
        default: true
        description: "nginx plain HTTP ClusterIP variant rendered from bitnami/nginx@24.0.2"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2 --base http-clusterip --work-dir <tmp> --non-interactive --namespace nginx"
        helmReleaseObjectCount: 5
        cubInstallObjectCountIncludingSupport: 6
        semanticObjectMatches: "5/5"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||nginx"
      revisions:
        -
          name: "http-clusterip-r001"
          revision: "r001"
          variantRevision: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml"
          digest: "1eefe2d05ce603981d16cf976aa38b0497de756c716dc5be6825ff6b6ba4c37d"
          renderedObjectSetSHA256: "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba"
          renderedObjects: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml"
          objectCount: 5
          helmObjectCount: 5
          cubInstallObjectCountIncludingSupport: 6
          semanticObjectMatches: "5/5"
          separatedSecretFiles: 0
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba"
            scan:
              kind: "ScanReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/receipts/scan-receipt.yaml"
              result: "warn"
              renderedObjectSetSHA256: "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba"
            installGate:
              kind: "InstallGate"
              path: "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/receipts/install-gate.yaml"
              result: "warn"
              renderedObjectSetSHA256: "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba"
    -
      name: "existing-tls-ingress"
      variant: "recipes/bitnami/nginx/24.0.2/variants/existing-tls-ingress/variant.yaml"
      namespace: "nginx"
      releaseName: "nginx"
      valuesProfile: "recipes/bitnami/nginx/24.0.2/effective-values-existing-tls-ingress.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredSecrets:
          -
            keys:
              - "tls.crt"
              - "tls.key"
              - "ca.crt"
            name: "nginx-backend-tls"
            namespace: "nginx"
            purpose: "TLS certificate material mounted by the NGINX pod"
          -
            keys:
              - "tls.crt"
              - "tls.key"
            name: "nginx-ingress-tls"
            namespace: "nginx"
            purpose: "TLS certificate material referenced by the Ingress"
      targetFactSummary: "required Secret nginx/nginx-backend-tls keys tls.crt,tls.key,ca.crt; required Secret nginx/nginx-ingress-tls keys tls.crt,tls.key"
      packageBase:
        name: "existing-tls-ingress"
        path: "packages/bitnami/nginx/24.0.2/bases/existing-tls-ingress"
        default: false
        description: "nginx existing TLS with ingress variant rendered from bitnami/nginx@24.0.2"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2 --base existing-tls-ingress --work-dir <tmp> --non-interactive --namespace nginx"
        helmReleaseObjectCount: 6
        cubInstallObjectCountIncludingSupport: 7
        semanticObjectMatches: "6/6"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||nginx"
      revisions:
        -
          name: "existing-tls-ingress-r001"
          revision: "r001"
          variantRevision: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml"
          digest: "60945c95552a4d059faecdec34a1774858e6170d55e7d2261f9b502fa4868731"
          renderedObjectSetSHA256: "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f"
          renderedObjects: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml"
          objectCount: 6
          helmObjectCount: 6
          cubInstallObjectCountIncludingSupport: 7
          semanticObjectMatches: "6/6"
          separatedSecretFiles: 0
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f"
            scan:
              kind: "ScanReceipt"
              path: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/receipts/scan-receipt.yaml"
              result: "warn"
              renderedObjectSetSHA256: "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f"
            installGate:
              kind: "InstallGate"
              path: "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/receipts/install-gate.yaml"
              result: "warn"
              renderedObjectSetSHA256: "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f"