apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ChartArtifactIndex"
metadata:
  name: "jetstack-trust-manager-v0.22.1"
  chart: "jetstack/trust-manager"
  version: "v0.22.1"
  generatedBy: "scripts/generate-chart-catalogs.mjs"
spec:
  doctrine: "1 Helm chart version -> 1 core recipe -> N variants -> M variant revisions -> package bases -> receipts"
  chart:
    ref: "jetstack/trust-manager"
    version: "v0.22.1"
    appVersion: "v0.22.1"
    sourceLock: "recipes/jetstack/trust-manager/v0.22.1/source-lock.yaml"
    dependencyLock: "recipes/jetstack/trust-manager/v0.22.1/dependency-lock.yaml"
    repository: "https://charts.jetstack.io"
    packageSHA256: "7fac0640b4c58424ca7589a91dfdc2f79a3cd490c0b2b5b8d4cfea2654e9133f"
  recipe:
    path: "recipes/jetstack/trust-manager/v0.22.1/recipe.yaml"
    importMode: "render-and-vendor"
    helmPlan: "recipes/jetstack/trust-manager/v0.22.1/helm-plan.yaml"
    chartDossier: "recipes/jetstack/trust-manager/v0.22.1/chart-dossier.yaml"
    controlPoints: "recipes/jetstack/trust-manager/v0.22.1/control-points.yaml"
    valueModel: "recipes/jetstack/trust-manager/v0.22.1/value-model.yaml"
    weirdnessAndMitigations: ""
    helmPainReport: "recipes/jetstack/trust-manager/v0.22.1/helm-pain-report.yaml"
    controlPointCategories:
      - "capability-profile"
      - "cluster-rbac"
      - "crds"
      - "dependency-lock"
      - "extension-slots"
      - "generated-facts"
      - "helm-equivalence"
      - "rendered-manifest-scan"
      - "source-lock"
      - "tpl-extension-slots"
      - "variant-revision"
      - "webhooks"
  catalogStatus:
    path: "recipes/jetstack/trust-manager/v0.22.1/catalog-status.yaml"
    status: "proof-grade"
    supportLevel: "machine-proof-only"
    supportedScopes:
      []
    productionReadiness: "not-reviewed-for-production"
    supportedVariants:
      []
    candidateVariants:
      - "default"
      - "no-crds"
    deferredVariants:
      []
  proofSummary:
    adoptionBucket: "promote-after-review"
    userStatus: "proof-grade-ready-for-promotion-review"
    strongestEvidence: "live-helm-vs-confighub-parity"
    proofLanes:
      renderParity: "2/2"
      inConfigHub: "2/2"
      localLive: "0/2"
      gitopsLive: "1/2"
      liveParity: "1/2"
    featureSummary: "crds;extension-slots"
    hardGap: "-"
    nextAction: "run catalog promotion review"
  installerPackage:
    path: "packages/jetstack/trust-manager/v0.22.1"
    ociRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1"
    installer: "packages/jetstack/trust-manager/v0.22.1/installer.yaml"
    receipt: "recipes/jetstack/trust-manager/v0.22.1/publication/installer-package-receipt.yaml"
    deterministicBundleSHA256: "59a0beec6b457b90851a9780d065f414c68eabf195c21f821e94d02e8f1c987b"
    deterministicAcrossTwoLocalBundles: true
    bases:
      -
        name: "default"
        path: "packages/jetstack/trust-manager/v0.22.1/bases/default"
        default: true
        description: "jetstack/trust-manager default variant rendered from jetstack/trust-manager@v0.22.1"
      -
        name: "no-crds"
        path: "packages/jetstack/trust-manager/v0.22.1/bases/no-crds"
        default: false
        description: "jetstack/trust-manager no-crds variant rendered from jetstack/trust-manager@v0.22.1"
  variants:
    -
      name: "default"
      variant: "recipes/jetstack/trust-manager/v0.22.1/variants/default/variant.yaml"
      namespace: "default"
      releaseName: "trust-manager"
      valuesProfile: "recipes/jetstack/trust-manager/v0.22.1/effective-values.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "certificates.cert-manager.io"
            purpose: "cert-manager Certificate CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "issuers.cert-manager.io"
            purpose: "cert-manager Issuer CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
        requiredNamespaces:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "cert-manager"
            purpose: "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base"
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            keys:
              - "tls.crt"
              - "tls.key"
            name: "trust-manager-tls"
            namespace: "default"
            purpose: "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
      targetFactSummary: "required Secret default/trust-manager-tls keys tls.crt,tls.key; required CRD certificates.cert-manager.io; required CRD issuers.cert-manager.io; required Namespace cert-manager"
      packageBase:
        name: "default"
        path: "packages/jetstack/trust-manager/v0.22.1/bases/default"
        default: true
        description: "jetstack/trust-manager default variant rendered from jetstack/trust-manager@v0.22.1"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1 --base default --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 14
        cubInstallObjectCountIncludingSupport: 15
        semanticObjectMatches: "14/14"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "default-r001"
          revision: "r001"
          variantRevision: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml"
          digest: "b2230146b96c81c8d8d8f7f031d90a72915b599d62d8dcf4ef304a08b290cb57"
          renderedObjectSetSHA256: "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683"
          renderedObjects: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/object-inventory.yaml"
          objectCount: 14
          helmObjectCount: 14
          cubInstallObjectCountIncludingSupport: 15
          semanticObjectMatches: "14/14"
          separatedSecretFiles: 0
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683"
            scan:
              kind: "ScanReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/receipts/scan-receipt.yaml"
              result: "warn"
              renderedObjectSetSHA256: "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683"
            installGate:
              kind: "InstallGate"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/receipts/install-gate.yaml"
              result: "warn"
              renderedObjectSetSHA256: "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683"
    -
      name: "no-crds"
      variant: "recipes/jetstack/trust-manager/v0.22.1/variants/no-crds/variant.yaml"
      namespace: "default"
      releaseName: "trust-manager"
      valuesProfile: "recipes/jetstack/trust-manager/v0.22.1/effective-values-no-crds.yaml"
      capabilityProfile:
        apiVersions:
          []
        kubeVersion: "1.30.0"
      hookPolicy: "no-hooks"
      targetFacts:
        requiredCRDs:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "bundles.trust.cert-manager.io"
            purpose: "trust-manager CRD managed outside this no-crds base"
            sourceVariant: "default"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "certificates.cert-manager.io"
            purpose: "cert-manager Certificate CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "issuers.cert-manager.io"
            purpose: "cert-manager Issuer CRD required by trust-manager certificate.yaml"
            sourcePath: "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml"
            sourceVariant: "jetstack/cert-manager@v1.20.2/crds-enabled"
        requiredNamespaces:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            name: "cert-manager"
            purpose: "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base"
        requiredSecrets:
          -
            deliveryLanes:
              - "regularHelm"
              - "cubInstallerApply"
              - "configHubKubectlApply"
              - "configHubOciArgo"
            keys:
              - "tls.crt"
              - "tls.key"
            name: "trust-manager-tls"
            namespace: "default"
            purpose: "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle"
      targetFactSummary: "required Secret default/trust-manager-tls keys tls.crt,tls.key; required CRD bundles.trust.cert-manager.io; required CRD certificates.cert-manager.io; required CRD issuers.cert-manager.io; required Namespace cert-manager"
      packageBase:
        name: "no-crds"
        path: "packages/jetstack/trust-manager/v0.22.1/bases/no-crds"
        default: false
        description: "jetstack/trust-manager no-crds variant rendered from jetstack/trust-manager@v0.22.1"
      setupCheck:
        command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1 --base no-crds --work-dir <tmp> --non-interactive --namespace default"
        helmReleaseObjectCount: 13
        cubInstallObjectCountIncludingSupport: 14
        semanticObjectMatches: "13/13"
        separatedSecretCount: 0
        allowedCubOnlyObjects:
          - "v1|Namespace||default"
      revisions:
        -
          name: "no-crds-r001"
          revision: "r001"
          variantRevision: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml"
          digest: ""
          renderedObjectSetSHA256: "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250"
          renderedObjects: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/release-objects.yaml"
          objectInventory: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/object-inventory.yaml"
          objectCount: 13
          helmObjectCount: 13
          cubInstallObjectCountIncludingSupport: ""
          semanticObjectMatches: "13/13"
          separatedSecretFiles: ""
          receipts:
            render:
              kind: "RenderReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/receipts/render-receipt.yaml"
              result: "recorded"
              renderedObjectSetSHA256: "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250"
            helmEquivalence:
              kind: "HelmEquivalenceReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/receipts/helm-equivalence-receipt.yaml"
              result: "pass"
              renderedObjectSetSHA256: "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250"
            scan:
              kind: "ScanReceipt"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/receipts/scan-receipt.yaml"
              result: ""
              renderedObjectSetSHA256: "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250"
            installGate:
              kind: "InstallGate"
              path: "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/receipts/install-gate.yaml"
              result: "allow"
              renderedObjectSetSHA256: "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250"