apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "InheritanceGraph"
metadata:
  name: "prometheus-community-kube-prometheus-stack-85.3.3"
spec:
  chart: "prometheus-community/kube-prometheus-stack"
  version: "85.3.3"
  recipe: "recipe.yaml"
  baseVariant: "default"
  variants:
    -
      name: "default"
      variant: "variants/default/variant.yaml"
      valuesProfile: "effective-values.yaml"
    -
      name: "no-crds"
      variant: "variants/no-crds/variant.yaml"
      valuesProfile: "effective-values-no-crds.yaml"
  edges:
    -
      from: "default"
      to: "default"
      type: "base-self"
      inheritedValuePaths:
        - "grafana.adminPassword"
      overriddenValuePaths:
        []
      addedValuePaths:
        []
      removedValuePaths:
        []
      valueSourceMapCoverage:
        []
    -
      from: "default"
      to: "no-crds"
      type: "inherits-with-overrides"
      inheritedValuePaths:
        - "grafana.adminPassword"
      overriddenValuePaths:
        []
      addedValuePaths:
        - "crds.enabled"
      removedValuePaths:
        []
      valueSourceMapCoverage:
        - "crds.enabled"
  targetFactEdges:
    -
      variant: "default"
      kind: "Secret"
      namespace: "monitoring"
      name: "kube-prometheus-stack-admission"
      keys:
        - "ca"
        - "cert"
        - "key"
      fact: "Secret/monitoring/kube-prometheus-stack-admission:ca+cert+key"
      purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "alertmanagerconfigs.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/alertmanagerconfigs.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "alertmanagers.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/alertmanagers.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "podmonitors.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/podmonitors.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "probes.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/probes.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheusagents.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheusagents.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheuses.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheuses.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheusrules.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheusrules.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "scrapeconfigs.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/scrapeconfigs.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "servicemonitors.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/servicemonitors.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "default"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "thanosrulers.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/thanosrulers.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD included in this preset and applied before dependent objects"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "Secret"
      namespace: "monitoring"
      name: "kube-prometheus-stack-admission"
      keys:
        - "ca"
        - "cert"
        - "key"
      fact: "Secret/monitoring/kube-prometheus-stack-admission:ca+cert+key"
      purpose: "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "alertmanagerconfigs.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/alertmanagerconfigs.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "alertmanagers.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/alertmanagers.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "podmonitors.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/podmonitors.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "probes.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/probes.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheusagents.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheusagents.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheuses.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheuses.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "prometheusrules.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/prometheusrules.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "scrapeconfigs.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/scrapeconfigs.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "servicemonitors.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/servicemonitors.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
    -
      variant: "no-crds"
      kind: "CustomResourceDefinition"
      namespace: ""
      name: "thanosrulers.monitoring.coreos.com"
      keys:
        []
      fact: "CRD/thanosrulers.monitoring.coreos.com"
      purpose: "Prometheus Operator CRD managed outside this no-crds preset"
      sourceVariant: "default"
      deliveryLanes:
        - "regularHelm"
        - "cubInstallerApply"
        - "configHubKubectlApply"
        - "configHubOciArgo"
  generatedFactEdges:
    []
  fieldReachability:
    -
      valuePath: "grafana.adminPassword"
      source: "inline-proof"
      renderedFieldCount: 4
      renderedFields:
        - "v1|Secret|monitoring|kube-prometheus-stack-grafana:data.admin-password"
        - "apps/v1|Deployment|monitoring|kube-prometheus-stack-grafana:spec.template.spec.containers[grafana-sc-dashboard].env.REQ_PASSWORD.valueFrom.secretKeyRef"
        - "apps/v1|Deployment|monitoring|kube-prometheus-stack-grafana:spec.template.spec.containers[grafana-sc-datasources].env.REQ_PASSWORD.valueFrom.secretKeyRef"
        - "apps/v1|Deployment|monitoring|kube-prometheus-stack-grafana:spec.template.spec.containers[grafana].env.GF_SECURITY_ADMIN_PASSWORD.valueFrom.secretKeyRef"
      immutableFieldRisk: false
      rolloutImpact: "changes-grafana-admin-secret-and-dependent-grafana-pods"
    -
      valuePath: "crds.enabled"
      source: "chart-default-and-no-crds-variant"
      renderedFieldCount: 10
      renderedFields:
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||alertmanagerconfigs.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||alertmanagers.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||podmonitors.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||probes.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||prometheusagents.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||prometheuses.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||prometheusrules.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||scrapeconfigs.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||servicemonitors.monitoring.coreos.com:metadata.name"
        - "apiextensions.k8s.io/v1|CustomResourceDefinition||thanosrulers.monitoring.coreos.com:metadata.name"
      immutableFieldRisk: true
      rolloutImpact: "changes-prometheus-operator-crd-object-set"
  notes:
    - "This graph is recovered from checked-in recipe artifacts."
    - "It is a desired-state graph fragment, not a live-cluster observation."
    - "Field reachability is limited to charts that have value-source-map.yaml coverage."