apiVersion: helm-expt.confighub.com/v1alpha1 kind: LiveHelmConfigHubParityReceipt metadata: name: metrics-server-metrics-server-3.13.0-external-tls-ca-live-parity-20260605 spec: chart: metrics-server/metrics-server version: 3.13.0 base: external-tls-ca result: pass observedAt: '2026-06-12T16:02:09Z' package: path: packages/metrics-server/metrics-server/3.13.0 recipe: path: recipes/metrics-server/metrics-server/3.13.0 variantRevision: recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml targetProfile: name: none result: pass resources: [] gitOpsCanonicalizationProfile: name: k8s-zero-defaults result: pass changes: - 'apiservice-v1beta1-metrics-k8s-io.yaml: APIService/v1beta1.metrics.k8s.io: removed spec.insecureSkipTLSVerify=false' rationale: Remove Kubernetes API zero-value fields before publishing the OCI GitOps artifact; semantic parity remains checked against Helm. receipt: $HOME/code/helm-expt/runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/gitops-canonicalization-k8s-zero-defaults.yaml run: rig: helm-expt-parity-metricsserver-mqb474bi-18gb kubeContext: kind-helm-expt-parity-metricsserver-mqb474bi-18gb namespace: kube-system legNamespaces: regularHelm: kube-system configHubKubectlApply: kube-system configHubOciArgo: kube-system clusterLifecycle: cleaned-up cleanup: command: cub lk down --name helm-expt-parity-metricsserver-mqb474bi-18gb --force result: pass detail: 'Deleting kind cluster "helm-expt-parity-metricsserver-mqb474bi-18gb"... Deleting cluster "helm-expt-parity-metricsserver-mqb474bi-18gb" ... Deleted nodes: ["helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane"] Deleting Space "helm-expt-parity-metricsserver-mqb474bi-18gb-cluster" (recursive: cascades to Unit, Target, Worker)... Done.' legs: regularHelm: result: pass command: helm upgrade --install metrics-server metrics-server --repo https://kubernetes-sigs.github.io/metrics-server/ --version 3.13.0 --namespace kube-system --create-namespace --values $HOME/code/helm-expt/runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/regular-helm-values.yaml --wait --timeout 8m manifestSHA256: 03497dfa266c74cd3bdbf9f884e4d255ae0f24b426a030f6290c36505a1300a4 objectCount: 9 liveHelmManifestSHA256: 03497dfa266c74cd3bdbf9f884e4d255ae0f24b426a030f6290c36505a1300a4 liveHelmManifestObjectCount: 9 namespace: kube-system runtime: result: pass workloads: 'deployment.apps/coredns 2/2 2 2 117s deployment.apps/metrics-server 1/1 1 1 26s daemonset.apps/kindnet 1 1 1 1 1 kubernetes.io/os=linux 116s daemonset.apps/kube-proxy 1 1 1 1 1 kubernetes.io/os=linux 117s' pods: 'coredns-7d764666f9-8ts5w 1/1 Running 0 110s coredns-7d764666f9-l94j6 1/1 Running 0 110s etcd-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 117s kindnet-g7vkq 1/1 Running 0 110s kube-apiserver-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 117s kube-controller-manager-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 117s kube-proxy-2njfp 1/1 Running 0 110s kube-scheduler-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 117s metrics-server-b768588db-wm8cl 1/1 Running 0 26s' notReady: [] stderr: '' getManifestError: '' configHubKubectlApply: result: pass renderCommand: cub installer setup --pull $HOME/code/helm-expt/packages/metrics-server/metrics-server/3.13.0 --base external-tls-ca --work-dir /tmp/helm-expt-live-parity-helm-expt-parity-metricsserver-mqb474bi-18gb-metrics-server --non-interactive --namespace kube-system applyMode: namespace-first kubectl apply; separated secrets staged when present manifestSHA256: 7cf6fea3ff41f65718922c2a7c09dec91d7027edc35e573d35de94461fb7ee1d objectCount: 10 namespace: kube-system manifestNamespaces: - kube-system runtimeNamespaces: &id001 - kube-system runtime: result: pass namespaces: *id001 workloads: '# kube-system deployment.apps/coredns 2/2 2 2 2m28s deployment.apps/metrics-server 1/1 1 1 30s daemonset.apps/kindnet 1 1 1 1 1 kubernetes.io/os=linux 2m27s daemonset.apps/kube-proxy 1 1 1 1 1 kubernetes.io/os=linux 2m28s' pods: '# kube-system coredns-7d764666f9-8ts5w 1/1 Running 0 2m21s coredns-7d764666f9-l94j6 1/1 Running 0 2m21s etcd-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 2m28s kindnet-g7vkq 1/1 Running 0 2m21s kube-apiserver-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 2m28s kube-controller-manager-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 2m28s kube-proxy-2njfp 1/1 Running 0 2m21s kube-scheduler-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 2m28s metrics-server-b768588db-zrj46 1/1 Running 0 30s' notReady: [] cleanupBeforeOci: namespaces: [] retainedNamespaces: [] reason: isolate the OCI/Argo leg from direct-apply workloads in single-cluster parity rigs configHubOciArgo: result: pass workloadSpace: helm-expt-parity-metricsserver-mqb474bi-18gb-metrics-server controller: Argo CD OCI app: metrics-server-parity manifestSHA256: 0581fecd7e5acf3b843fc48c7740bef0ef7bfb07a07646db9f19addcf9288949 objectCount: 10 namespace: kube-system manifestNamespaces: - kube-system runtimeNamespaces: &id002 - kube-system ociRevision: sha256:24f7d354402fb31d83893b0b396a25210334996e8255e754cb1b60b9fca2d0a3 sync: Synced health: Healthy separatedSecrets: [] runtime: result: pass namespaces: *id002 workloads: '# kube-system deployment.apps/coredns 2/2 2 2 3m38s deployment.apps/metrics-server 1/1 1 1 100s daemonset.apps/kindnet 1 1 1 1 1 kubernetes.io/os=linux 3m37s daemonset.apps/kube-proxy 1 1 1 1 1 kubernetes.io/os=linux 3m38s' pods: '# kube-system coredns-7d764666f9-8ts5w 1/1 Running 0 3m31s coredns-7d764666f9-l94j6 1/1 Running 0 3m31s etcd-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 3m38s kindnet-g7vkq 1/1 Running 0 3m31s kube-apiserver-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 3m38s kube-controller-manager-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 3m38s kube-proxy-2njfp 1/1 Running 0 3m31s kube-scheduler-helm-expt-parity-metricsserver-mqb474bi-18gb-control-plane 1/1 Running 0 3m38s metrics-server-b768588db-zrj46 1/1 Running 0 100s' notReady: [] semanticComparison: allowedExtraConfigHubObjects: - v1|Namespace||kube-system semanticNormalizations: &id003 - prune-null-fields helmVsConfigHubKubectlApply: result: pass helmObjectCount: 9 configHubObjectCount: 10 missingFromConfigHub: [] extraInConfigHub: - v1|Namespace||kube-system semanticDiffs: [] semanticNormalizations: *id003 comparisonSHA256: dd1ab08dc555fd279b5cc7a2eba6c019d56d207ca42c144e3f817e3a6efdfd3e helmVsConfigHubOciArgo: result: pass helmObjectCount: 9 configHubObjectCount: 10 missingFromConfigHub: [] extraInConfigHub: - v1|Namespace||kube-system semanticDiffs: [] semanticNormalizations: - prune-null-fields - k8s-zero-defaults comparisonSHA256: c7b5ad36e22474a7f4f3350dbe014199b470802074d921337501b8439c90d526 checks: - name: live-lane-lock result: pass detail: acquired $HOME/.confighub/locks/helm-expt-live-parity.lock - name: cub-lk-up result: pass detail: "Creating kind cluster \"helm-expt-parity-metricsserver-mqb474bi-18gb\"\ \ (kubeconfig: $HOME/.confighub/lk/helm-expt-parity-metricsserver-mqb474bi-18gb.kubeconfig)...\n\ Creating cluster \"helm-expt-parity-metricsserver-mqb474bi-18gb\" ...\n \u2022\ \ Ensuring node image (kindest/node:v1.35.0) \U0001F5BC ...\n \u2713 Ensuring\ \ node image (kindest/node:v1.35.0) \U0001F5BC\n \u2022 Preparing nodes \U0001F4E6\ \ ...\n \u2713 Preparing nodes \U0001F4E6 \n \u2022 Writing configuration\ \ \U0001F4DC ...\n \u2713 Writing configuration \U0001F4DC\n \u2022 Starting\ \ control-plane \U0001F579\uFE0F ...\n \u2713 Starting control-plane \U0001F579\ \uFE0F\n \u2022 Installing CNI \U0001F50C ...\n \u2713 Installing CNI \U0001F50C\ \n \u2022 Installing StorageClass \U0001F4BE ...\n \u2713 Installing StorageClass\ \ \U0001F4BE\nSet kubectl context to \"kind-helm-expt-parity-metricsserver-mqb474bi-18gb\"\ \nYou can now use your cluster with:\n\nkubectl cluster-info --context kind-helm-expt-parity-metricsserver-mqb474bi-18gb\ \ --kubeconfig $HOME/.confighub/lk/helm-expt-parity-metricsserver-mqb474bi-18gb.kubeconfig\n\ \nHave a nice day! \U0001F44B\nInstalling Argo CD...\nCreating namespace \"\ argocd\"...\napiVersion: v1\nkind:" - name: target-facts-regular-helm result: pass detail: secrets=1 crds=0 - name: regular-helm-live result: pass detail: "Release \"metrics-server\" does not exist. Installing it now.\nNAME:\ \ metrics-server\nLAST DEPLOYED: Fri Jun 12 17:03:46 2026\nNAMESPACE: kube-system\n\ STATUS: deployed\nREVISION: 1\nDESCRIPTION: Install complete\nTEST SUITE: None\n\ NOTES:\n***********************************************************************\n\ * Metrics Server *\n***********************************************************************\n\ \ Chart version: 3.13.0\n App version: 0.8.0\n Image tag: registry.k8s.io/metrics-server/metrics-server:v0.8.0\n\ ***********************************************************************" - name: target-facts-confighub-apply result: pass detail: secrets=1 crds=0 - name: confighub-kubectl-apply-live result: pass detail: '# kube-system deployment.apps/coredns 2/2 2 2 2m28s deployment.apps/metrics-server 1/1 1 1 30s daemonset.apps/kindnet 1 1 1 1 1 kubernetes.io/os=linux 2m27s daemonset.apps/kube-proxy 1 1 1 1 1 kubernetes.io/os=linux 2m28s' - name: target-facts-confighub-oci result: pass detail: secrets=1 crds=0 - name: confighub-oci-argo-live result: pass detail: sync=Synced health=Healthy after 20s - name: semantic-object-parity result: pass detail: apply=pass argo=pass applyDiffs=0 argoDiffs=0 targetFacts: regularHelm: result: pass stagedSecrets: - namespace: kube-system name: metrics-server-tls keys: - tls.crt - tls.key lane: regularHelm stagedCRDs: [] path: $HOME/code/helm-expt/runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/target-facts-regular-helm.yaml configHubKubectlApply: result: pass stagedSecrets: - namespace: kube-system name: metrics-server-tls keys: - tls.crt - tls.key lane: configHubKubectlApply stagedCRDs: [] path: $HOME/code/helm-expt/runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/target-facts-confighub-apply.yaml configHubOciArgo: result: pass stagedSecrets: - namespace: kube-system name: metrics-server-tls keys: - tls.crt - tls.key lane: configHubOciArgo stagedCRDs: [] path: $HOME/code/helm-expt/runs/live-helm-confighub-compare/metrics-server-metrics-server-external-tls-ca/target-facts-confighub-oci.yaml