apiVersion: helm-expt.confighub.com/v1alpha1
kind: InstallGate
metadata:
  name: bitnami-redis-default-r001
spec:
  variantRevision: ../variant-revision.yaml
  renderedObjectSetSHA256: "175caf404c4a005708398d2facd696a8500ef4280c47c682b7bae6273a91272e"
  decision: warn
  allowedScopes:
    - local-test
  blockedScopes:
    - production
  reasons:
    - local scan found 0 high and 2 medium finding(s)
    - production publish is blocked until scan findings are resolved or explicitly waived
    - Helm equivalence passed for default variant
    - renders Redis Secret; cub installer separates it from uploaded manifests