apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "VariantPromotionReceipt"
metadata:
  name: "trust-manager-default-variant-promotion-20260527"
spec:
  observedAt: "2026-05-27"
  context:
    organization: "Kubara"
    server: "https://hub.confighub.com"
    cubClientVersion: "Version:    dev"
    cubServerVersion: "v0.1.80"
  subject:
    chart: "jetstack/trust-manager"
    chartVersion: "v0.22.1"
    packagePath: "packages/jetstack/trust-manager/v0.22.1"
    variant: "default"
    upstreamSpace: "helm-trust-manager-default-confighub-proof"
    downstreamSpace: "TrustManager-default-staging"
  commands:
    upstreamUpdate: "cub unit update deployment-default-trust-manager runs/trust-manager-default-confighub-proof/latest/logs/27-promotion-upstream-patched.yaml --space helm-trust-manager-default-confighub-proof --change-desc ..."
    upstreamAddUnit: "cub unit create promotion-marker-trust-manager-default runs/trust-manager-default-confighub-proof/latest/logs/29-promotion-marker-configmap.yaml --space helm-trust-manager-default-confighub-proof --allow-exists"
    dryRun: "cub variant promote TrustManager-default-staging --dry-run -o mutations"
    changeset: "cub changeset create trust-manager-default-variant-promote-20260527 --space TrustManager-default-staging --description ... --allow-exists"
    promote: "cub variant promote TrustManager-default-staging --changeset TrustManager-default-staging/trust-manager-default-variant-promote-20260527 --change-desc ..."
    fallbackPromote: "cub variant promote TrustManager-default-staging --change-desc ..."
  upstreamChange:
    changedUnit: "deployment-default-trust-manager"
    beforeHeadRevisionNum: 2
    afterHeadRevisionNum: 3
    annotation: "helm-expt.confighub.com/promotion-proof=trust-manager-default-promotion-20260527"
    updateResult: "pass"
  upstreamAddition:
    markerUnit: "promotion-marker-trust-manager-default"
    upstreamUnitID: "3cd99007-97fb-4cd0-9793-63ce4e8b75f6"
    result: "pass"
    proofOnly: true
  preview:
    result: "pass"
    output: "  + promotion-marker-trust-manager-default"
  changeset:
    slug: "trust-manager-default-variant-promote-20260527"
    result: "pass"
    output: "Successfully created changeset trust-manager-default-variant-promote-20260527 (c33f8366-61ea-4473-959e-30cbd5492c51)"
  promote:
    result: "pass"
    output: "Upgrading units behind their upstream...\nAwaiting triggers...\nSuccessfully upgraded unit: deployment-default-trust-manager\nBulk upgrade operation completed:\n  Success: 1 unit(s)\nAdding 1 unit(s) from upstream\nAwaiting triggers...\nSuccessfully created unit: promotion-marker-trust-manager-default\nBulk create operation completed:\n  Success: 1 unit(s)"
  fallbackPromote:
    used: false
    result: "not-used"
    output: ""
  assertions:
    changedUnitCaughtUp: "pass"
    upstreamHeadRevisionNum: 3
    downstreamUpstreamRevisionNumBefore: 2
    downstreamUpstreamRevisionNumAfter: 3
    addedUnitCloned: "pass"
    addedUnitSlug: "promotion-marker-trust-manager-default"
    addedUnitDownstreamUpstreamUnitID: "3cd99007-97fb-4cd0-9793-63ce4e8b75f6"
    deletionHandling: "not-tested"
    fieldOwnership: "not-tested"
  result: "pass"
  reason: "server-side promotion passed through a changeset"
  limitations:
    - "This receipt proves ConfigHub server-side promotion mechanics for changed Units and newly added Units."
    - "It does not prove deletion handling, field ownership conflict handling, target apply, GitOps sync, or Kubernetes workload convergence."
    - "The added ConfigMap is proof-only and is not part of the Helm chart's rendered object set."