<!-- Generated by npm run catalog:weirdness. Do not edit by hand. -->

# grafana/loki 7.0.0 Weirdness And Mitigations

This note records the Helm pain surfaced during catalog review and where the
current ConfigHub/cub installer proof absorbs it.

## Support Boundary

| Field | Value |
| --- | --- |
| Catalog status | catalog-supported |
| Support level | supported-for-declared-scopes |
| Supported scopes | local-test |
| Production readiness | production-review-ready |
| Variants in this note | single-binary-filesystem, simple-scalable-minio |

Production support is not implied by this file. A chart can be supported for
local proof/demo use while still needing accepted scan, gate, lifecycle, and
operating-policy dispositions plus a final target-scoped support decision.

## Chart Notes

- Default chart rendering fails before object creation until loki.storage.bucketNames.chunks and schemaConfig are supplied.
- single-binary-filesystem selects SingleBinary topology, filesystem storage, and one Loki StatefulSet for local proof.
- simple-scalable-minio selects the scalable topology, one read/write/backend replica, explicit S3 bucket names, and the bundled MinIO dependency as a local object-store fixture.
- Chart dependency metadata records MinIO, grafana-agent-operator, and rollout-operator from Chart.lock.
- Promoted variants render no hook objects with --no-hooks; future hook or test enablement must map to lifecycle policy.
- Loki and MinIO render StatefulSets that need storage/upgrade/rollback policy before production.
- Loki config, structuredConfig, extraEnv, and raw object slots are template-powered extension surfaces; promoted variants keep raw object slots empty.

## Catalog Mitigations

- Supported for local-test and proof-demo usage through real cub installer and ConfigHub receipts.
- single-binary-filesystem is the simplest local Loki path and has live Helm-vs-ConfigHub OCI parity.
- simple-scalable-minio is supported as the local multi-component object-store variant, but remains target-resource sensitive.
- Default render blocking, storage policy, cluster RBAC, lifecycle policy, extension slots, MinIO Secret ownership, and scan/gate warnings are recorded as production review input.
- Production recommendation remains a separate decision; the first review path should prefer single-binary-filesystem unless the target explicitly accepts the scalable object-store topology.

## Control Points

| Control point | Status | Mitigation / evidence |
| --- | --- | --- |
| source-lock | handled | source-lock.yaml |
| dependency-lock | handled | chart declares MinIO, grafana-agent-operator, and rollout-operator dependencies; promoted variants lock their metadata. |
| capability-profile | handled | Kubernetes API and version branches are bound to the named Kubernetes capability profile. |
| blocked-default-render | handled | The chart default fails before render because required storage bucket/schema inputs are missing; the proof records the blocker and supplies two bounded variants. |
| storage-config | variant-controlled | Promoted variants bind storage mode, schemaConfig, and object-store settings before creating a rendered revision. |
| object-storage-policy | variant-controlled | The MinIO variant renders a chart-owned object-store fixture and marks its Secret as review-required before production. |
| lifecycle-policy | not-present-in-promoted-render | Promoted Loki variants render with --no-hooks; hook or test enablement must map to lifecycle policy before production. |
| stateful-workload | scan-and-review | apps/v1\|StatefulSet\|loki\|loki |
| pvc-policy | scan-and-review | Loki and MinIO StatefulSets need storage, retention, upgrade, and rollback policy. |
| cluster-rbac | scan-and-review | rbac.authorization.k8s.io/v1\|ClusterRole\|\|loki-clusterrole |
| tpl | controlled-by-empty-defaults | Loki config, structuredConfig, extraEnv, and raw object slots can use templating; promoted variants keep raw object slots empty. |
| installer-support-object | handled | v1\|Namespace\|\|loki |

## Control Point Index

- blocked-default-render
- capability-profile
- cluster-rbac
- dependency-lock
- installer-support-object
- lifecycle-policy
- object-storage-policy
- pvc-policy
- source-lock
- stateful-workload
- stateful-workload-policy
- storage-config
- tpl
- tpl-extension-slot

## Proof Links

- Catalog map: [CATALOG.md](CATALOG.md)
- Machine index: [artifact-index.yaml](artifact-index.yaml)
- Helm plan: [helm-plan.yaml](helm-plan.yaml)
- Control points: [control-points.yaml](control-points.yaml)
- Chart dossier: [chart-dossier.yaml](chart-dossier.yaml)