apiVersion: helm-expt.confighub.com/v1alpha1
kind: CatalogStatus
metadata:
  name: "jetstack-cert-manager-v1.20.2"
spec:
  chart: "jetstack/cert-manager"
  version: "v1.20.2"
  status: "catalog-supported"
  supportLevel: "supported-for-declared-scopes"
  supportedScopes:
    - local-test
  productionReadiness: "production-review-ready"
  supportedVariants:
    - "default"
    - "crds-enabled"
  candidateVariants:
    []
  deferredVariants: []
  review:
    lastReviewed: "2026-05-27"
    humanReviewRequired: false
    productReviewRequired: false
  notes:
    - "Supported for local-test and proof-demo usage through real cub installer and ConfigHub receipts."
    - "default preserves the normal cert-manager controller/webhook install shape."
    - "crds-enabled is supported when CRD lifecycle ownership is intentionally accepted for the local-test scope."
    - "CRD lifecycle, webhook readiness, startup API hook routing, cluster RBAC, extension slots, and scan/gate warnings are recorded as production review input."
    - "Production recommendation remains a separate decision; crds-enabled is the stronger first production-review path, while default requires compatible CRDs to be staged and observed in the target cluster."