apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "InstallGate"
metadata:
  name: "rabbitmq-existing-secret-r001"
spec:
  variantRevision: "../variant-revision.yaml"
  renderedObjectSetSHA256: "cdff3262264844b099e7f4421f1bbd5027360c2d23ba34667506d85255c4b6f2"
  decision: "warn"
  allowedScopes:
    - "local-test"
  blockedScopes:
    - "production"
  reasons:
    - "Helm equivalence passed for existing-secret"
    - "Generated credential handling needs explicit generated fact or target fact policy before production"
    - "Any future hook-producing values need explicit lifecycle policy before production"
    - "RabbitMQ StatefulSet and volumeClaimTemplates need storage, upgrade, and rollback policy"
    - "requires target Secrets rabbitmq/rabbitmq-auth and rabbitmq/rabbitmq-erlang-cookie before apply"