apiVersion: helm-expt.confighub.com/v1alpha1
kind: ValueSourceMap
metadata:
  name: bitnami-redis-25.5.3
spec:
  chart: bitnami/redis
  version: 25.5.3
  entries:
    - id: replica-count
      valuePath: replica.replicaCount
      effectiveValue: 3
      source: chart-default
      renderedFields:
        - object: apps/v1|StatefulSet|redis|redis-replicas
          field: spec.replicas
          value: 3
      rolloutImpact: changes-replica-statefulset-scale
      immutableFieldRisk: false
      relatedPolicies:
        - stateful-workload
        - pvc-policy
    - id: release-name
      valuePath: releaseName
      effectiveValue: redis
      source: variant.releaseName
      renderedFields:
        # whole-release scope (wholeReleaseScope: true below): a releaseName rename
        # rewrites object names, the app.kubernetes.io/instance label, label
        # selectors, and release-embedded DNS across every object, so the blast
        # radius is the entire object set.
        - object: apps/v1|StatefulSet|redis|redis-master
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: apps/v1|StatefulSet|redis|redis-replicas
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: networking.k8s.io/v1|NetworkPolicy|redis|redis
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: policy/v1|PodDisruptionBudget|redis|redis-master
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: policy/v1|PodDisruptionBudget|redis|redis-replicas
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|ConfigMap|redis|redis-configuration
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|ConfigMap|redis|redis-health
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|ConfigMap|redis|redis-scripts
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|Secret|redis|redis
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|ServiceAccount|redis|redis-master
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|ServiceAccount|redis|redis-replica
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|Service|redis|redis-headless
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|Service|redis|redis-master
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
        - object: v1|Service|redis|redis-replicas
          field: metadata.labels.app.kubernetes.io/instance
          value: redis
      wholeReleaseScope: true
      rolloutImpact: changing-release-name-renames-objects
      immutableFieldRisk: true
    - id: namespace
      valuePath: namespace
      effectiveValue: redis
      source: variant.namespace
      renderedFields:
        # whole-release scope (wholeReleaseScope: true below): a namespace rename
        # rewrites metadata.namespace on every namespaced object in the release
        # plus namespace-embedded DNS, so the blast radius is the entire object set.
        - object: apps/v1|StatefulSet|redis|redis-master
          field: metadata.namespace
          value: redis
        - object: apps/v1|StatefulSet|redis|redis-replicas
          field: metadata.namespace
          value: redis
        - object: networking.k8s.io/v1|NetworkPolicy|redis|redis
          field: metadata.namespace
          value: redis
        - object: policy/v1|PodDisruptionBudget|redis|redis-master
          field: metadata.namespace
          value: redis
        - object: policy/v1|PodDisruptionBudget|redis|redis-replicas
          field: metadata.namespace
          value: redis
        - object: v1|ConfigMap|redis|redis-configuration
          field: metadata.namespace
          value: redis
        - object: v1|ConfigMap|redis|redis-health
          field: metadata.namespace
          value: redis
        - object: v1|ConfigMap|redis|redis-scripts
          field: metadata.namespace
          value: redis
        - object: v1|Secret|redis|redis
          field: metadata.namespace
          value: redis
        - object: v1|ServiceAccount|redis|redis-master
          field: metadata.namespace
          value: redis
        - object: v1|ServiceAccount|redis|redis-replica
          field: metadata.namespace
          value: redis
        - object: v1|Service|redis|redis-headless
          field: metadata.namespace
          value: redis
        - object: v1|Service|redis|redis-master
          field: metadata.namespace
          value: redis
        - object: v1|Service|redis|redis-replicas
          field: metadata.namespace
          value: redis
      wholeReleaseScope: true
      rolloutImpact: moving-namespace-creates-distinct-object-set
      immutableFieldRisk: true
    - id: image-digest
      valuePath: image.digest
      effectiveValue: "sha256:6e7a020f1f6504698a7272c58783bdc2c23588c49febbae5aca1bb8dfa10af25"
      source: catalog-policy
      renderedFields:
        - object: apps/v1|StatefulSet|redis|redis-master
          field: spec.template.spec.containers[0].image
          value: registry-1.docker.io/bitnami/redis@sha256:6e7a020f1f6504698a7272c58783bdc2c23588c49febbae5aca1bb8dfa10af25
        - object: apps/v1|StatefulSet|redis|redis-replicas
          field: spec.template.spec.containers[0].image
          value: registry-1.docker.io/bitnami/redis@sha256:6e7a020f1f6504698a7272c58783bdc2c23588c49febbae5aca1bb8dfa10af25
      rolloutImpact: changing-image-rolls-redis-pods
      immutableFieldRisk: false
    - id: redis-password
      valuePath: auth.password
      effectiveValueDigest: "sha256:6486a1dce90d013579f3b52d6939524b23b3ca00c5702e409348e6c0ba782349"
      source: generated-fact-receipt
      renderedFields:
        - object: v1|Secret|redis|redis
          field: data.redis-password
          valueDigest: "sha256:6486a1dce90d013579f3b52d6939524b23b3ca00c5702e409348e6c0ba782349"
        - object: apps/v1|StatefulSet|redis|redis-master
          field: spec.template.spec.volumes[redis-password].secret.secretName
          value: redis
        - object: apps/v1|StatefulSet|redis|redis-replicas
          field: spec.template.spec.volumes[redis-password].secret.secretName
          value: redis
      relatedFacts:
        - revisions/default/r001/receipts/generated-fact-receipt.yaml
      rolloutImpact: changes-secret-checksum-and-rolls-redis-pods
      immutableFieldRisk: false
