apiVersion: helm-expt.confighub.com/v1alpha1
kind: LiveHelmInstallerKindParityReceipt
metadata:
  name: elastic-filebeat-8.5.1-default-kind-parity-20260606
spec:
  chart: elastic/filebeat
  version: 8.5.1
  base: default
  result: blocked
  observedAt: '2026-06-15T18:45:27Z'
  package:
    path: packages/elastic/filebeat/8.5.1
  recipe:
    path: recipes/elastic/filebeat/8.5.1
  variantRevision: recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml
  run:
    mode: two-vanilla-kind-clusters
    helmCluster: hx-filebe-bf4f6-couh-helm
    installerCluster: hx-filebe-bf4f6-couh-installer
    namespace: default
    cleanup:
      result: pass
      clusters:
      - cluster: hx-filebe-bf4f6-couh-helm
        leg: helm
        result: pass
        detail: 'Deleting cluster "hx-filebe-bf4f6-couh-helm" ...

          Deleted nodes: ["hx-filebe-bf4f6-couh-helm-control-plane"]'
      - cluster: hx-filebe-bf4f6-couh-installer
        leg: installer
        result: pass
        detail: 'Deleting cluster "hx-filebe-bf4f6-couh-installer" ...

          Deleted nodes: ["hx-filebe-bf4f6-couh-installer-control-plane"]'
    targetTopology:
      minimumSchedulableNodes: 1
      purpose: ''
  legs:
    regularHelm:
      result: blocked
      command: helm upgrade --install filebeat filebeat --repo https://helm.elastic.co
        --version 8.5.1 --namespace default --create-namespace --values $HOME/code/helm-expt/runs/live-kind-parity/elastic-filebeat-default/regular-helm-values.yaml
        --wait --timeout 8m
      namespace: default
      manifestSHA256: 690fcc3d2e2d1019f35b7d9ec64ba0783b4dc445a2060c400d49dae6a251e020
      objectCount: 7
      liveHelmManifestSHA256: c17892edd41d1981b277bb8173912129d4c8ede890c26dc5caf3fe35e5be8d1a
      liveHelmManifestObjectCount: 7
      runtimeNamespaces: &id001
      - default
      runtime:
        result: blocked
        namespaces: *id001
        workloads: '# default

          daemonset.apps/filebeat-filebeat   1     1     0     1     0     <none>   8m'
        pods: '# default

          filebeat-filebeat-m82jw   0/1   ContainerCreating   0     8m'
        notReady:
        - namespace: default
          pod: filebeat-filebeat-m82jw
          ready: 0/1
          status: ContainerCreating
          blockedReason: missing-required-secret
          missingSecret: elasticsearch-master-certs
        diagnostics:
        - namespace: default
          pod: filebeat-filebeat-m82jw
          result: blocked
          detailHead: "Name:             filebeat-filebeat-m82jw\nNamespace:     \
            \   default\nPriority:         0\nService Account:  filebeat-filebeat\n\
            Node:             hx-filebe-bf4f6-couh-helm-control-plane/192.168.97.2\n\
            Start Time:       Mon, 15 Jun 2026 19:46:20 +0100\nLabels:           app=filebeat-filebeat\n\
            \                  chart=filebeat-8.5.1\n                  controller-revision-hash=864bf68b84\n\
            \                  heritage=Helm\n                  pod-template-generation=1\n\
            \                  release=filebeat\nAnnotations:      configChecksum:\
            \ c88755a4c60c24e519a9ead083dd5eeadf884b224f64126bb9aae2ca30cd7ed\nStatus:\
            \           Pending\nIP:               \nIPs:              <none>\nControlled\
            \ By:    DaemonSet/filebeat-filebeat\nContainers:\n  filebeat:\n    Container\
            \ ID:  \n    Image:         docker.elastic.co/beats/filebeat:8.5.1\n \
            \   Image ID:      \n    Port:          <none>\n    Host Port:     <none>\n\
            \    Args:\n      -e\n      -E\n      http.enabled=true\n    State:  \
            \        Waiting\n      Reason:       ContainerCreating\n    Ready:  \
            \        False\n    Restart Count:  0\n    Limits:\n      cpu:     1\n\
            \      memory:  200Mi\n    Requests:\n      cpu:     100m\n      memory:\
            \  100Mi\n    Liveness:  exec [sh -c #!/usr/bin/env bash -e\ncurl --fail\
            \ 127.0.0.1:5066\n] delay=10s timeout=5s period=10s #success=1 #failure=3\n\
            \    Readiness:  exec [sh -c #!/usr/bin/env bash -e\nfilebeat test output\n\
            ] delay=10s timeout=5s period=10s #success=1 #failure=3\n    Environment:\n\
            \      POD_NAMESPACE:           default (v1:metadata.namespace)\n    \
            \  NODE_NAME:                (v1:spec.nodeName)\n      ELASTICSEARCH_USERNAME:\
            \  <set to the key 'username' in secret 'elasticsearch-master-credentials'>\
            \  Optional: false\n      ELASTICSEARCH_PASSWORD:  <set to the key 'password'\
            \ in secret 'elasticsearch-master-credentials'>  Optional: false\n   \
            \ Mounts:\n      /usr/share/filebeat/certs/ from elasticsearch-master-certs\
            \ (rw)\n      /usr/share/filebeat/data from data (rw)\n      /usr/share/filebeat/filebeat.yml\
            \ from filebeat-config (ro,path=\"filebeat.yml\")\n      /var/lib/docker/containers\
            \ from varlibdockercontainers (ro)\n      /var/log from varlog (ro)\n\
            \      /var/run/docker.sock from varrundockersock (ro)\n      /var/run/secrets/kubernetes.io/serviceaccount\
            \ from kube-api-access-lr5bs (ro)\nConditions:\n  Type               \
            \         Status\n  PodReadyToStartContainers   False \n  Initialized\
            \                 True \n  Ready                       False \n  ContainersReady\
            \             False \n  PodScheduled                True \nVolumes:\n\
            \  elasticsearch-master-certs:\n    Type:        Secret (a volume populated\
            \ by a Secret)\n    SecretName:  elasticsearch-master-certs\n    Optional:\
            \    false\n  filebeat-config:\n    Type:      ConfigMap (a volume populated\
            \ by a ConfigMap)\n    Name:      filebeat-filebeat-daemonset-config\n\
            \    Optional:  false\n  data:\n    Type:          HostPath (bare host\
            \ directory volume)\n    Path:          /var/lib/filebeat-filebeat-default-data\n\
            \    HostPathType:  DirectoryOrCreate\n  varlibdockercontainers:\n   \
            \ Type:          HostPath (bare ho"
          detailTail: "   ELASTICSEARCH_PASSWORD:  <set to the key 'password' in secret\
            \ 'elasticsearch-master-credentials'>  Optional: false\n    Mounts:\n\
            \      /usr/share/filebeat/certs/ from elasticsearch-master-certs (rw)\n\
            \      /usr/share/filebeat/data from data (rw)\n      /usr/share/filebeat/filebeat.yml\
            \ from filebeat-config (ro,path=\"filebeat.yml\")\n      /var/lib/docker/containers\
            \ from varlibdockercontainers (ro)\n      /var/log from varlog (ro)\n\
            \      /var/run/docker.sock from varrundockersock (ro)\n      /var/run/secrets/kubernetes.io/serviceaccount\
            \ from kube-api-access-lr5bs (ro)\nConditions:\n  Type               \
            \         Status\n  PodReadyToStartContainers   False \n  Initialized\
            \                 True \n  Ready                       False \n  ContainersReady\
            \             False \n  PodScheduled                True \nVolumes:\n\
            \  elasticsearch-master-certs:\n    Type:        Secret (a volume populated\
            \ by a Secret)\n    SecretName:  elasticsearch-master-certs\n    Optional:\
            \    false\n  filebeat-config:\n    Type:      ConfigMap (a volume populated\
            \ by a ConfigMap)\n    Name:      filebeat-filebeat-daemonset-config\n\
            \    Optional:  false\n  data:\n    Type:          HostPath (bare host\
            \ directory volume)\n    Path:          /var/lib/filebeat-filebeat-default-data\n\
            \    HostPathType:  DirectoryOrCreate\n  varlibdockercontainers:\n   \
            \ Type:          HostPath (bare host directory volume)\n    Path:    \
            \      /var/lib/docker/containers\n    HostPathType:  \n  varlog:\n  \
            \  Type:          HostPath (bare host directory volume)\n    Path:   \
            \       /var/log\n    HostPathType:  \n  varrundockersock:\n    Type:\
            \          HostPath (bare host directory volume)\n    Path:          /var/run/docker.sock\n\
            \    HostPathType:  \n  kube-api-access-lr5bs:\n    Type:            \
            \        Projected (a volume that contains injected data from multiple\
            \ sources)\n    TokenExpirationSeconds:  3607\n    ConfigMapName:    \
            \       kube-root-ca.crt\n    Optional:                false\n    DownwardAPI:\
            \             true\nQoS Class:                   Burstable\nNode-Selectors:\
            \              <none>\nTolerations:                 node.kubernetes.io/disk-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/memory-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/not-ready:NoExecute\
            \ op=Exists\n                             node.kubernetes.io/pid-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/unreachable:NoExecute\
            \ op=Exists\n                             node.kubernetes.io/unschedulable:NoSchedule\
            \ op=Exists\nEvents:\n  Type     Reason       Age                 From\
            \               Message\n  ----     ------       ----                ----\
            \               -------\n  Normal   Scheduled    8m                  default-scheduler\
            \  Successfully assigned default/filebeat-filebeat-m82jw to hx-filebe-bf4f6-couh-helm-control-plane\n\
            \  Warning  FailedMount  108s (x11 over 8m)  kubelet            MountVolume.SetUp\
            \ failed for volume \"elasticsearch-master-certs\" : secret \"elasticsearch-master-certs\"\
            \ not found"
          logsHead: 'Error from server (BadRequest): container "filebeat" in pod "filebeat-filebeat-m82jw"
            is waiting to start: ContainerCreating'
          logsTail: 'Error from server (BadRequest): container "filebeat" in pod "filebeat-filebeat-m82jw"
            is waiting to start: ContainerCreating'
          blockedReason: missing-required-secret
          missingSecret: elasticsearch-master-certs
        apiServices:
          result: pass
          items: []
      stderr: 'Error: resource DaemonSet/default/filebeat-filebeat not ready. status:
        InProgress, message: Available: 0/1

        context deadline exceeded'
      getManifestError: ''
    cubInstallerApply:
      result: blocked
      renderCommand: cub installer setup --pull $HOME/code/helm-expt/packages/elastic/filebeat/8.5.1
        --base default --work-dir /tmp/helm-expt-kind-parity-hx-filebe-bf4f6-couh-filebeat
        --non-interactive --namespace default
      applyMode: two-cluster vanilla-kind; namespace-first kubectl apply; separated
        secrets staged when present
      namespace: default
      manifestSHA256: 773401ea45ef3ec25fbb1ed3d476f6803c623c9f4b8fe4415ba77011e756c51b
      objectCount: 8
      manifestNamespaces:
      - default
      runtimeNamespaces: &id002
      - default
      runtime:
        result: blocked
        namespaces: *id002
        workloads: '# default

          daemonset.apps/filebeat-filebeat   1     1     0     1     0     <none>   10s'
        pods: '# default

          filebeat-filebeat-wzf4t   0/1   ContainerCreating   0     10s'
        notReady:
        - namespace: default
          pod: filebeat-filebeat-wzf4t
          ready: 0/1
          status: ContainerCreating
          blockedReason: missing-required-secret
          missingSecret: elasticsearch-master-certs
        diagnostics:
        - namespace: default
          pod: filebeat-filebeat-wzf4t
          result: blocked
          detailHead: "Name:             filebeat-filebeat-wzf4t\nNamespace:     \
            \   default\nPriority:         0\nService Account:  filebeat-filebeat\n\
            Node:             hx-filebe-bf4f6-couh-installer-control-plane/192.168.97.3\n\
            Start Time:       Mon, 15 Jun 2026 19:54:21 +0100\nLabels:           app=filebeat-filebeat\n\
            \                  chart=filebeat-8.5.1\n                  controller-revision-hash=864bf68b84\n\
            \                  heritage=Helm\n                  pod-template-generation=1\n\
            \                  release=filebeat\nAnnotations:      configChecksum:\
            \ c88755a4c60c24e519a9ead083dd5eeadf884b224f64126bb9aae2ca30cd7ed\nStatus:\
            \           Pending\nIP:               \nIPs:              <none>\nControlled\
            \ By:    DaemonSet/filebeat-filebeat\nContainers:\n  filebeat:\n    Container\
            \ ID:  \n    Image:         docker.elastic.co/beats/filebeat:8.5.1\n \
            \   Image ID:      \n    Port:          <none>\n    Host Port:     <none>\n\
            \    Args:\n      -e\n      -E\n      http.enabled=true\n    State:  \
            \        Waiting\n      Reason:       ContainerCreating\n    Ready:  \
            \        False\n    Restart Count:  0\n    Limits:\n      cpu:     1\n\
            \      memory:  200Mi\n    Requests:\n      cpu:     100m\n      memory:\
            \  100Mi\n    Liveness:  exec [sh -c #!/usr/bin/env bash -e\ncurl --fail\
            \ 127.0.0.1:5066\n] delay=10s timeout=5s period=10s #success=1 #failure=3\n\
            \    Readiness:  exec [sh -c #!/usr/bin/env bash -e\nfilebeat test output\n\
            ] delay=10s timeout=5s period=10s #success=1 #failure=3\n    Environment:\n\
            \      POD_NAMESPACE:           default (v1:metadata.namespace)\n    \
            \  NODE_NAME:                (v1:spec.nodeName)\n      ELASTICSEARCH_USERNAME:\
            \  <set to the key 'username' in secret 'elasticsearch-master-credentials'>\
            \  Optional: false\n      ELASTICSEARCH_PASSWORD:  <set to the key 'password'\
            \ in secret 'elasticsearch-master-credentials'>  Optional: false\n   \
            \ Mounts:\n      /usr/share/filebeat/certs/ from elasticsearch-master-certs\
            \ (rw)\n      /usr/share/filebeat/data from data (rw)\n      /usr/share/filebeat/filebeat.yml\
            \ from filebeat-config (ro,path=\"filebeat.yml\")\n      /var/lib/docker/containers\
            \ from varlibdockercontainers (ro)\n      /var/log from varlog (ro)\n\
            \      /var/run/docker.sock from varrundockersock (ro)\n      /var/run/secrets/kubernetes.io/serviceaccount\
            \ from kube-api-access-jq27w (ro)\nConditions:\n  Type               \
            \         Status\n  PodReadyToStartContainers   False \n  Initialized\
            \                 True \n  Ready                       False \n  ContainersReady\
            \             False \n  PodScheduled                True \nVolumes:\n\
            \  elasticsearch-master-certs:\n    Type:        Secret (a volume populated\
            \ by a Secret)\n    SecretName:  elasticsearch-master-certs\n    Optional:\
            \    false\n  filebeat-config:\n    Type:      ConfigMap (a volume populated\
            \ by a ConfigMap)\n    Name:      filebeat-filebeat-daemonset-config\n\
            \    Optional:  false\n  data:\n    Type:          HostPath (bare host\
            \ directory volume)\n    Path:          /var/lib/filebeat-filebeat-default-data\n\
            \    HostPathType:  DirectoryOrCreate\n  varlibdockercontainers:\n   \
            \ Type:          HostPath (ba"
          detailTail: "      ELASTICSEARCH_PASSWORD:  <set to the key 'password' in\
            \ secret 'elasticsearch-master-credentials'>  Optional: false\n    Mounts:\n\
            \      /usr/share/filebeat/certs/ from elasticsearch-master-certs (rw)\n\
            \      /usr/share/filebeat/data from data (rw)\n      /usr/share/filebeat/filebeat.yml\
            \ from filebeat-config (ro,path=\"filebeat.yml\")\n      /var/lib/docker/containers\
            \ from varlibdockercontainers (ro)\n      /var/log from varlog (ro)\n\
            \      /var/run/docker.sock from varrundockersock (ro)\n      /var/run/secrets/kubernetes.io/serviceaccount\
            \ from kube-api-access-jq27w (ro)\nConditions:\n  Type               \
            \         Status\n  PodReadyToStartContainers   False \n  Initialized\
            \                 True \n  Ready                       False \n  ContainersReady\
            \             False \n  PodScheduled                True \nVolumes:\n\
            \  elasticsearch-master-certs:\n    Type:        Secret (a volume populated\
            \ by a Secret)\n    SecretName:  elasticsearch-master-certs\n    Optional:\
            \    false\n  filebeat-config:\n    Type:      ConfigMap (a volume populated\
            \ by a ConfigMap)\n    Name:      filebeat-filebeat-daemonset-config\n\
            \    Optional:  false\n  data:\n    Type:          HostPath (bare host\
            \ directory volume)\n    Path:          /var/lib/filebeat-filebeat-default-data\n\
            \    HostPathType:  DirectoryOrCreate\n  varlibdockercontainers:\n   \
            \ Type:          HostPath (bare host directory volume)\n    Path:    \
            \      /var/lib/docker/containers\n    HostPathType:  \n  varlog:\n  \
            \  Type:          HostPath (bare host directory volume)\n    Path:   \
            \       /var/log\n    HostPathType:  \n  varrundockersock:\n    Type:\
            \          HostPath (bare host directory volume)\n    Path:          /var/run/docker.sock\n\
            \    HostPathType:  \n  kube-api-access-jq27w:\n    Type:            \
            \        Projected (a volume that contains injected data from multiple\
            \ sources)\n    TokenExpirationSeconds:  3607\n    ConfigMapName:    \
            \       kube-root-ca.crt\n    Optional:                false\n    DownwardAPI:\
            \             true\nQoS Class:                   Burstable\nNode-Selectors:\
            \              <none>\nTolerations:                 node.kubernetes.io/disk-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/memory-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/not-ready:NoExecute\
            \ op=Exists\n                             node.kubernetes.io/pid-pressure:NoSchedule\
            \ op=Exists\n                             node.kubernetes.io/unreachable:NoExecute\
            \ op=Exists\n                             node.kubernetes.io/unschedulable:NoSchedule\
            \ op=Exists\nEvents:\n  Type     Reason       Age               From \
            \              Message\n  ----     ------       ----              ----\
            \               -------\n  Normal   Scheduled    10s               default-scheduler\
            \  Successfully assigned default/filebeat-filebeat-wzf4t to hx-filebe-bf4f6-couh-installer-control-plane\n\
            \  Warning  FailedMount  2s (x5 over 10s)  kubelet            MountVolume.SetUp\
            \ failed for volume \"elasticsearch-master-certs\" : secret \"elasticsearch-master-certs\"\
            \ not found"
          logsHead: 'Error from server (BadRequest): container "filebeat" in pod "filebeat-filebeat-wzf4t"
            is waiting to start: ContainerCreating'
          logsTail: 'Error from server (BadRequest): container "filebeat" in pod "filebeat-filebeat-wzf4t"
            is waiting to start: ContainerCreating'
          blockedReason: missing-required-secret
          missingSecret: elasticsearch-master-certs
        apiServices:
          result: pass
          items: []
  semanticComparison:
    allowedExtraInstallerObjects:
    - v1|Namespace||default
    semanticNormalizations: &id003
    - prune-null-fields
    regularHelmRenderVsLive:
      result: pass
      helmObjectCount: 7
      installerObjectCount: 7
      missingFromInstaller: []
      extraInInstaller: []
      semanticDiffs: []
      semanticNormalizations: *id003
      comparisonSHA256: 6447f00d42986b74131a60cbaa6fe7cca13ba06d3d9e2b913f098ff8196d3970
    helmVsCubInstallerApply:
      result: pass
      helmObjectCount: 7
      installerObjectCount: 8
      missingFromInstaller: []
      extraInInstaller:
      - v1|Namespace||default
      semanticDiffs: []
      semanticNormalizations: *id003
      comparisonSHA256: c90ccd49553545d990093d205a77069ff9881faac63f0338fd802eefca910e4f
  checks:
  - name: kind-create-helm
    result: pass
    detail: helm kind cluster created
  - name: kind-create-installer
    result: pass
    detail: installer kind cluster created
  - name: target-facts-helm
    result: pass
    detail: secrets=0 crds=0 namespaces=0
  - name: target-facts-installer
    result: pass
    detail: secrets=0 crds=0 namespaces=0
  - name: regular-helm-operating-policy
    result: pass
    detail: none
  - name: regular-helm-render-live-parity
    result: pass
    detail: missing=0 extra=[] diffs=0
  - name: regular-helm-live
    result: blocked
    detail: 'Error: resource DaemonSet/default/filebeat-filebeat not ready. status:
      InProgress, message: Available: 0/1

      context deadline exceeded'
  - name: cub-installer-operating-policy
    result: pass
    detail: none
  - name: cub-installer-apply-live
    result: blocked
    detail: '# default

      daemonset.apps/filebeat-filebeat   1     1     0     1     0     <none>   10s'
  - name: semantic-object-parity
    result: pass
    detail: missing=0 extra=['v1|Namespace||default'] diffs=0
  targetFacts:
    regularHelm:
      result: pass
      stagedSecrets: []
      stagedCRDs: []
      stagedObjectStores: []
      stagedNamespaces: []
    cubInstallerApply:
      result: pass
      stagedSecrets: []
      stagedCRDs: []
      stagedObjectStores: []
      stagedNamespaces: []
    requiredValues: []
  operatingPolicy:
    regularHelm:
      result: pass
      operation: none
    cubInstallerApply:
      result: pass
      operation: none
