apiVersion: "helm-expt.confighub.com/v1alpha1" kind: "ChartArtifactIndex" metadata: name: "prometheus-community-kube-prometheus-stack-85.3.3" chart: "prometheus-community/kube-prometheus-stack" version: "85.3.3" generatedBy: "scripts/generate-chart-catalogs.mjs" spec: doctrine: "1 Helm chart version -> 1 core recipe -> N variants -> M variant revisions -> package bases -> receipts" chart: ref: "prometheus-community/kube-prometheus-stack" version: "85.3.3" appVersion: "v0.90.1" sourceLock: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/source-lock.yaml" dependencyLock: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/dependency-lock.yaml" repository: "https://prometheus-community.github.io/helm-charts" packageSHA256: "ec622442bef2379e170ba0fdc90231d30f8f2886e3414813fe4ae1086779601e" recipe: path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/recipe.yaml" importMode: "render-and-vendor" helmPlan: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/helm-plan.yaml" chartDossier: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/chart-dossier.yaml" controlPoints: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/control-points.yaml" valueModel: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/value-model.yaml" valueSourceMap: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/value-source-map.yaml" weirdnessAndMitigations: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/weirdness-and-mitigations.md" helmPainReport: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/helm-pain-report.yaml" controlPointCategories: - "admission-webhook" - "capability-profile" - "cluster-rbac" - "crd-policy" - "dependency-lock" - "generated-facts" - "installer-support-object" - "source-lock" - "tpl" catalogStatus: path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/catalog-status.yaml" status: "catalog-supported" supportLevel: "supported-for-declared-scopes" supportedScopes: - "local-test" productionReadiness: "production-review-ready" supportedVariants: - "default" - "no-crds" candidateVariants: [] deferredVariants: [] proofSummary: adoptionBucket: "try-from-public-catalog" userStatus: "catalog-supported-with-live-evidence" strongestEvidence: "live-helm-vs-confighub-parity" proofLanes: renderParity: "2/2" inConfigHub: "2/2" localLive: "2/2" gitopsLive: "2/2" liveParity: "2/2" featureSummary: "hooks;generated-secrets;crds;webhooks;required-values;install-vs-upgrade;extension-slots;remote-dependencies;dependency-range-frozen" hardGap: "existing-secret (chart ships no Secret toggle)" nextAction: "choose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support" installerPackage: path: "packages/prometheus-community/kube-prometheus-stack/85.3.3" ociRef: "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3" installer: "packages/prometheus-community/kube-prometheus-stack/85.3.3/installer.yaml" receipt: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/publication/installer-package-receipt.yaml" deterministicBundleSHA256: "cd92ab8dbd15343e9ece4bdaab87d3ca6ab5820d87c11bd3497b400c9d220798" deterministicAcrossTwoLocalBundles: true bases: - name: "default" path: "packages/prometheus-community/kube-prometheus-stack/85.3.3/bases/default" default: true description: "kube-prometheus-stack default with Grafana password bound variant rendered from prometheus-community/kube-prometheus-stack@85.3.3" - name: "no-crds" path: "packages/prometheus-community/kube-prometheus-stack/85.3.3/bases/no-crds" default: false description: "kube-prometheus-stack CRDs disabled variant rendered from prometheus-community/kube-prometheus-stack@85.3.3" variants: - name: "default" variant: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/default/variant.yaml" namespace: "monitoring" releaseName: "kube-prometheus-stack" valuesProfile: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values.yaml" capabilityProfile: apiVersions: [] kubeVersion: "1.30.0" hookPolicy: "no-hooks" targetFacts: requiredCRDs: - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagerconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagers.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "podmonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "probes.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusagents.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheuses.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusrules.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "scrapeconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "servicemonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - applyMode: "server-side-force-conflicts" deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "thanosrulers.monitoring.coreos.com" purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" requiredSecrets: - deliveryLanes: - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" keys: - "ca" - "cert" - "key" name: "kube-prometheus-stack-admission" namespace: "monitoring" purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" targetFactSummary: "required Secret monitoring/kube-prometheus-stack-admission keys ca,cert,key; required CRD alertmanagerconfigs.monitoring.coreos.com; required CRD alertmanagers.monitoring.coreos.com; required CRD podmonitors.monitoring.coreos.com; required CRD probes.monitoring.coreos.com; required CRD prometheusagents.monitoring.coreos.com; required CRD prometheuses.monitoring.coreos.com; required CRD prometheusrules.monitoring.coreos.com; required CRD scrapeconfigs.monitoring.coreos.com; required CRD servicemonitors.monitoring.coreos.com; required CRD thanosrulers.monitoring.coreos.com" packageBase: name: "default" path: "packages/prometheus-community/kube-prometheus-stack/85.3.3/bases/default" default: true description: "kube-prometheus-stack default with Grafana password bound variant rendered from prometheus-community/kube-prometheus-stack@85.3.3" setupCheck: command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3 --base default --work-dir --non-interactive --namespace monitoring" helmReleaseObjectCount: 124 cubInstallObjectCountIncludingSupport: 125 semanticObjectMatches: "124/124" separatedSecretCount: 2 allowedCubOnlyObjects: - "v1|Namespace||monitoring" revisions: - name: "default-r001" revision: "r001" variantRevision: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml" digest: "ecd433cd701d7b9138f9d90e56124b6945685e0abc801348d63ce82efa79eee4" renderedObjectSetSHA256: "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491" renderedObjects: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml" objectInventory: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/object-inventory.yaml" objectCount: 124 helmObjectCount: 124 cubInstallObjectCountIncludingSupport: 125 semanticObjectMatches: "124/124" separatedSecretFiles: 2 receipts: render: kind: "RenderReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/receipts/render-receipt.yaml" result: "recorded" renderedObjectSetSHA256: "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491" helmEquivalence: kind: "HelmEquivalenceReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/receipts/helm-equivalence-receipt.yaml" result: "pass" renderedObjectSetSHA256: "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491" scan: kind: "ScanReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/receipts/scan-receipt.yaml" result: "warn" renderedObjectSetSHA256: "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491" installGate: kind: "InstallGate" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/receipts/install-gate.yaml" result: "warn" renderedObjectSetSHA256: "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491" - name: "no-crds" variant: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/variants/no-crds/variant.yaml" namespace: "monitoring" releaseName: "kube-prometheus-stack" valuesProfile: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values-no-crds.yaml" capabilityProfile: apiVersions: [] kubeVersion: "1.30.0" hookPolicy: "no-hooks" targetFacts: requiredCRDs: - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagerconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "alertmanagers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "podmonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "probes.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusagents.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheuses.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "prometheusrules.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "scrapeconfigs.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "servicemonitors.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" - deliveryLanes: - "regularHelm" - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" name: "thanosrulers.monitoring.coreos.com" purpose: "Prometheus Operator CRD managed outside this no-crds preset" sourceVariant: "default" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" requiredSecrets: - deliveryLanes: - "cubInstallerApply" - "configHubKubectlApply" - "configHubOciArgo" keys: - "ca" - "cert" - "key" name: "kube-prometheus-stack-admission" namespace: "monitoring" purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" suggestedSource: "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" targetFactSummary: "required Secret monitoring/kube-prometheus-stack-admission keys ca,cert,key; required CRD alertmanagerconfigs.monitoring.coreos.com; required CRD alertmanagers.monitoring.coreos.com; required CRD podmonitors.monitoring.coreos.com; required CRD probes.monitoring.coreos.com; required CRD prometheusagents.monitoring.coreos.com; required CRD prometheuses.monitoring.coreos.com; required CRD prometheusrules.monitoring.coreos.com; required CRD scrapeconfigs.monitoring.coreos.com; required CRD servicemonitors.monitoring.coreos.com; required CRD thanosrulers.monitoring.coreos.com" packageBase: name: "no-crds" path: "packages/prometheus-community/kube-prometheus-stack/85.3.3/bases/no-crds" default: false description: "kube-prometheus-stack CRDs disabled variant rendered from prometheus-community/kube-prometheus-stack@85.3.3" setupCheck: command: "cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3 --base no-crds --work-dir --non-interactive --namespace monitoring" helmReleaseObjectCount: 114 cubInstallObjectCountIncludingSupport: 115 semanticObjectMatches: "114/114" separatedSecretCount: 2 allowedCubOnlyObjects: - "v1|Namespace||monitoring" revisions: - name: "no-crds-r001" revision: "r001" variantRevision: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml" digest: "6566541a9f0bf6dfee41fafac9aef3099a6d6cfe2a2fe4e218ef08d2d754bec0" renderedObjectSetSHA256: "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2" renderedObjects: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml" objectInventory: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/object-inventory.yaml" objectCount: 114 helmObjectCount: 114 cubInstallObjectCountIncludingSupport: 115 semanticObjectMatches: "114/114" separatedSecretFiles: 2 receipts: render: kind: "RenderReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/receipts/render-receipt.yaml" result: "recorded" renderedObjectSetSHA256: "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2" helmEquivalence: kind: "HelmEquivalenceReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/receipts/helm-equivalence-receipt.yaml" result: "pass" renderedObjectSetSHA256: "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2" scan: kind: "ScanReceipt" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/receipts/scan-receipt.yaml" result: "warn" renderedObjectSetSHA256: "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2" installGate: kind: "InstallGate" path: "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/receipts/install-gate.yaml" result: "warn" renderedObjectSetSHA256: "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2"