apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ChartArtifactIndex"
metadata:
  name: "hashicorp-terraform-1.1.2"
  chart: "hashicorp/terraform"
  version: "1.1.2"
  generatedBy: "scripts/generate-chart-catalogs.mjs"
spec:
  doctrine: "1 Helm chart version -> 1 core recipe -> N variants -> M variant revisions -> package bases -> receipts"
  chart:
    ref: "hashicorp/terraform"
    version: "1.1.2"
    appVersion: ""
    sourceLock: "recipes/hashicorp/terraform/1.1.2/source-lock.yaml"
    dependencyLock: "recipes/hashicorp/terraform/1.1.2/dependency-lock.yaml"
    repository: "https://helm.releases.hashicorp.com"
    packageSHA256: "9115fecf667f3d41a5a1c5833de948ef699321a6165be7bebe4976a7279702d5"
  recipe:
    path: "recipes/hashicorp/terraform/1.1.2/recipe.yaml"
    importMode: "render-and-vendor"
    helmPlan: "recipes/hashicorp/terraform/1.1.2/helm-plan.yaml"
    chartDossier: "recipes/hashicorp/terraform/1.1.2/chart-dossier.yaml"
    controlPoints: "recipes/hashicorp/terraform/1.1.2/control-points.yaml"
    valueModel: "recipes/hashicorp/terraform/1.1.2/value-model.yaml"
    weirdnessAndMitigations: ""
    helmPainReport: "recipes/hashicorp/terraform/1.1.2/helm-pain-report.yaml"
    controlPointCategories:
      - "capability-profile"
      - "crds"
      - "dependency-lock"
      - "helm-equivalence"
      - "lifecycle-policy"
      - "rendered-manifest-scan"
      - "source-lock"
      - "variant-revision"
  catalogStatus:
    path: "recipes/hashicorp/terraform/1.1.2/catalog-status.yaml"
    status: "proof-grade"
    supportLevel: "machine-proof-only"
    supportedScopes:
      []
    productionReadiness: "not-reviewed-for-production"
    supportedVariants:
      []
    candidateVariants:
      - "default"
      - "no-crds"
    deferredVariants:
      []
  proofSummary:
    adoptionBucket: "promote-after-review"
    userStatus: "proof-grade-ready-for-promotion-review"
    strongestEvidence: "in-confighub-proof"
    proofLanes:
      renderParity: "2/2"
      inConfigHub: "2/2"
      localLive: "0/2"
      gitopsLive: "0/2"
      liveParity: "0/2"
    featureSummary: "crds;required-values"
    hardGap: "-"
    nextAction: "run catalog promotion review"
  installerPackage:
    path: "packages/hashicorp/terraform/1.1.2"
    ociRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2"
    installer: "packages/hashicorp/terraform/1.1.2/installer.yaml"
    receipt: "recipes/hashicorp/terraform/1.1.2/publication/installer-package-receipt.yaml"
    deterministicBundleSHA256: "a656ca6d20114f92209e9416d9795f0f5e90935d91e3c1906523224be94ef88e"
    deterministicAcrossTwoLocalBundles: true
    bases:
      -
        name: "default"
        path: "packages/hashicorp/terraform/1.1.2/bases/default"
        default: true
        description: "hashicorp/terraform default variant rendered from hashicorp/terraform@1.1.2"
      -
        name: "no-crds"
        path: "packages/hashicorp/terraform/1.1.2/bases/no-crds"
        default: false
        description: "hashicorp/terraform no-crds variant rendered from hashicorp/terraform@1.1.2"
  variants:
    -
      name: "default"
      variant: "recipes/hashicorp/terraform/1.1.2/variants/default/variant.yaml"
      namespace: "default"
      releaseName: "terraform"
      valuesProfile: "recipes/hashicorp/terraform/1.1.2/effective-values.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
            keys:
              - "credentials"
            name: "terraformrc"
            namespace: "default"
            purpose: "Terraform CLI credentials mounted at /etc/terraform/.terraformrc"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml"
            name: "workspacesecrets"
            namespace: "default"
            purpose: "Sensitive Terraform workspace variables mounted at /tmp/secrets"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
      targetFactSummary: "required Secret default/terraformrc keys credentials; required Secret default/workspacesecrets"
      packageBase:
        name: "default"
        path: "packages/hashicorp/terraform/1.1.2/bases/default"
        default: true
        description: "hashicorp/terraform default variant rendered from hashicorp/terraform@1.1.2"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2 --base default --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 5
        cubInstallObjectCountIncludingSupport: 6
        semanticObjectMatches: "5/5"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "default-r001"
          revision: "r001"
          variantRevision: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml"
          digest: "40c409175a95558a0683036dc80b3b7877540cfc68ea6eceeae017c731fd5b95"
          renderedObjectSetSHA256: "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b"
          renderedObjects: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/object-inventory.yaml"
          objectCount: 5
          helmObjectCount: 5
          cubInstallObjectCountIncludingSupport: 6
          semanticObjectMatches: "5/5"
          separatedSecretFiles: 0
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b"
            scan:
              kind: "ScanReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/receipts/scan-receipt.yaml"
              result: "warn"
              renderedObjectSetSHA256: "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b"
            installGate:
              kind: "InstallGate"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/receipts/install-gate.yaml"
              result: "warn"
              renderedObjectSetSHA256: "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b"
    -
      name: "no-crds"
      variant: "recipes/hashicorp/terraform/1.1.2/variants/no-crds/variant.yaml"
      namespace: "default"
      releaseName: "terraform"
      valuesProfile: "recipes/hashicorp/terraform/1.1.2/effective-values-no-crds.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml"
            name: "workspaces.app.terraform.io"
            purpose: "Terraform Workspace CRD managed outside this no-crds preset"
            sourcePath: "revisions/default/r001/rendered/release-objects.yaml"
            sourceVariant: "default"
            suggestedSource: "kubectl apply -f <terraform-workspace-crd.yaml>"
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
            keys:
              - "credentials"
            name: "terraformrc"
            namespace: "default"
            purpose: "Terraform CLI credentials mounted at /etc/terraform/.terraformrc"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default create secret generic terraformrc --from-file=credentials=<path-to-terraform-cli-config>"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            evidence:
              - "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml"
              - "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml"
            name: "workspacesecrets"
            namespace: "default"
            purpose: "Sensitive Terraform workspace variables mounted at /tmp/secrets"
            sourcePath: "../../target-prerequisite-plan.yaml"
            suggestedSource: "kubectl -n default apply -f <workspacesecrets-manifest.yaml>"
      targetFactSummary: "required Secret default/terraformrc keys credentials; required Secret default/workspacesecrets; required CRD workspaces.app.terraform.io"
      packageBase:
        name: "no-crds"
        path: "packages/hashicorp/terraform/1.1.2/bases/no-crds"
        default: false
        description: "hashicorp/terraform no-crds variant rendered from hashicorp/terraform@1.1.2"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2 --base no-crds --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 4
        cubInstallObjectCountIncludingSupport: 5
        semanticObjectMatches: "4/4"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "no-crds-r001"
          revision: "r001"
          variantRevision: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml"
          digest: ""
          renderedObjectSetSHA256: "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a"
          renderedObjects: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/object-inventory.yaml"
          objectCount: 4
          helmObjectCount: 4
          cubInstallObjectCountIncludingSupport: ""
          semanticObjectMatches: "4/4"
          separatedSecretFiles: ""
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a"
            scan:
              kind: "ScanReceipt"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/receipts/scan-receipt.yaml"
              result: ""
              renderedObjectSetSHA256: "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a"
            installGate:
              kind: "InstallGate"
              path: "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/receipts/install-gate.yaml"
              result: "allow"
              renderedObjectSetSHA256: "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a"