{ "records": [ { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aicr-eks-h100-training-kubeflow-v0-14-0-argocd", "labels": { "sourceType": "aicr", "component": "aicr-eks-h100-training-kubeflow", "sourceVersion": "v0.14.0", "base": "argocd" } }, "spec": { "source": { "type": "aicr", "name": "eks-h100-training-kubeflow", "version": "v0.14.0", "record": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.14.0", "selection": { "name": "eks-h100-training-kubeflow", "kind": "source-variant", "provider": "NVIDIA AICR", "record": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml" } }, "baseVariant": { "name": "argocd", "revision": "generated-v0.14.0", "digest": "fc03b2950c81db63a4853424fcb30942e9ecf0e94e54f7474439421dcc254801", "digestRole": "source-output-inventory", "digestRecord": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt" }, "configuration": { "format": "argocd-application-yaml", "objects": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered", "inventory": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt", "objectCount": 17, "digest": "fc03b2950c81db63a4853424fcb30942e9ecf0e94e54f7474439421dcc254801", "digestRole": "inventory-file", "digestRecord": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml" }, "materialization": { "method": "aicr-compose-then-helm-render", "status": "captured", "outputDigest": "fc03b2950c81db63a4853424fcb30942e9ecf0e94e54f7474439421dcc254801", "record": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "eks-h100-training-kubeflow@v0.14.0/argocd; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "data/aicr-flattening-verdicts/aicr-eks-h100-training-kubeflow/flattening-safety-verdict.yaml" }, "boundaries": [ "AICR composed the platform and generated an Argo CD app-of-apps chart; Helm rendered that wrapper into exact Application objects.", "The component Applications still reference their own sources, so those nested sources are processed later by Argo CD." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect or compare AICR snapshots without selecting a recipe. The diff reports observed differences; select the intended provider-curated source variant before deciding whether a difference is a fault.", "requiredInputs": [ "An AICR snapshot, recipe, generated bundle, or exact generated output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow/argocd-rendered", "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded AICR composition and wrapper render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The selected provider-curated AICR leaf and its overlay choices; a recipe is needed for recipe-dependent generation or validation" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "accelerator=h100", "intent=training", "os=ubuntu", "platform=kubeflow", "service=eks", "acceleratedNodeSelector=nvidia.com/gpu.present=true", "storageClass=gp3", "workloadSelector=app.kubernetes.io/part-of=training", "namespace=argocd", "repoURL=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt", "targetRevision=0.14.0" ], "installTime": [], "installTimeStatus": "none-declared-for-the-rendered-applications" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd-sync-waves", "origin": "base", "type": "lifecycle-action", "detail": "AICR assigned the 16 component Applications to sync waves 0 through 15." }, { "id": "argocd-source-package", "origin": "base", "type": "lifecycle-action", "detail": "The parent and two path-based child Applications refer to the public AICR Helm source package at its recorded version and digest." } ], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "argocd-sync-waves", "requirementRefs": [ "argocd-sync-waves" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "AICR assigned the 16 component Applications to sync waves 0 through 15.", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "generated-not-live", "supportedRuntimes": [], "checks": [], "evidence": [] }, { "id": "argocd-source-package", "requirementRefs": [ "argocd-source-package" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "The parent and two path-based child Applications refer to the public AICR Helm source package at its recorded version and digest.", "automatic": false, "status": "recorded", "sourceStatus": "published", "supportedRuntimes": [], "checks": [], "evidence": [] } ], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "platform": "EKS", "accelerator": "H100", "operatingSystem": "Ubuntu", "argoCd": { "required": true, "applicationNamespace": "argocd", "ociHelmSourceRequired": true } }, "requirementRefs": [], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow/promotion-readiness-receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:1120c9a17b23f2c885121034d55445f2d3948c95c23756d02fa2209e4baf8c2e", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.14.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow/oci-layouts/argocd-source" }, "literalConfigOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010", "localPush": "pass", "localPull": "pass", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.14.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow/oci-layouts/argocd-config" }, "configHubReleaseOci": { "status": "base-variant-uploaded", "sourceRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.14.0", "sourceDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010", "receipt": "examples/aicr/eks-h100-training-kubeflow/confighub-upload-receipt.yaml" }, "argoCd": "applications-uploaded-not-reconciled", "flux": "not-applicable-to-this-base" }, "promotion": { "status": "pass", "receipt": "examples/aicr/eks-h100-training-kubeflow/promotion-readiness-receipt.yaml", "path": "base -> development -> staging", "sourceDigest": "sha256:dcf7feeeeaece04cb5d55cbc1106862172b3ae77718154252b39db1ad8957010", "changedApplications": [ "argoproj.io/v1alpha1/Application argocd/kube-prometheus-stack" ], "devDryRun": "pass", "stagingDryRun": "pass", "stagingMatchesReviewedDev": true }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "generationReceipt": "examples/aicr/eks-h100-training-kubeflow/argocd-oci-receipt.yaml", "sourceChecksums": "examples/aicr/eks-h100-training-kubeflow/argocd-helm-bundle/checksums.txt", "renderedChecksums": "examples/aicr/eks-h100-training-kubeflow/argocd-rendered/checksums.txt", "sourceManifest": "examples/aicr/eks-h100-training-kubeflow/local-argocd-source-oci-manifest.json", "renderedManifest": "examples/aicr/eks-h100-training-kubeflow/local-argocd-config-oci-manifest.json", "configHubUploadReceipt": "examples/aicr/eks-h100-training-kubeflow/confighub-upload-receipt.yaml", "variantPromotionReceipt": "examples/aicr/eks-h100-training-kubeflow/promotion-readiness-receipt.yaml", "scratchPromotionReceipt": "runs/aicr-variant-promotion-proof/receipt.yaml", "publicOciReceipt": "examples/aicr/eks-h100-training-kubeflow/public-oci-receipt.yaml" }, "operations": { "resourceClass": "system-configuration", "ownerClass": "platform-team", "changeCadence": "planned-platform-release" } }, "status": { "level": "partial", "claim": "AICR v0.14.0 generated a portable Argo CD Helm source package and 17 literal Application objects. ConfigHub imported those exact Applications from the recorded OCI digest, kept one reviewed Grafana Secret change in development, and promoted the same configuration to staging.", "limits": [ "The two public OCI artifacts were anonymously pulled at their recorded digests.", "The persistent helm-catalog demo contains the base, development, and staging Spaces. Exactly one Application changes in development and staging.", "No live Argo CD or GPU-cluster reconciliation is claimed.", "The target must provide monitoring/aicr-grafana-admin with the expected user and password keys." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aicr-eks-h100-training-kubeflow-v0-14-0-base", "labels": { "sourceType": "aicr", "component": "aicr-eks-h100-training-kubeflow", "sourceVersion": "v0.14.0", "base": "base" } }, "spec": { "source": { "type": "aicr", "name": "eks-h100-training-kubeflow", "version": "v0.14.0", "record": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml", "packageOciRef": "", "selection": { "name": "eks-h100-training-kubeflow", "kind": "source-variant", "provider": "NVIDIA AICR", "record": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml" } }, "baseVariant": { "name": "base", "revision": "generated-v0.14.0", "digest": "6d3e39557e3274037fc57cc1ba437ea3c96d0b4f72effc7b037608bb44488104", "digestRole": "source-output-inventory", "digestRecord": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt" }, "configuration": { "format": "flux-kubernetes-yaml", "objects": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle", "inventory": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt", "objectCount": 29, "digest": "6d3e39557e3274037fc57cc1ba437ea3c96d0b4f72effc7b037608bb44488104", "digestRole": "inventory-file", "digestRecord": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml" }, "materialization": { "method": "aicr-compose", "status": "captured", "outputDigest": "6d3e39557e3274037fc57cc1ba437ea3c96d0b4f72effc7b037608bb44488104", "record": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "eks-h100-training-kubeflow@v0.14.0/base; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "AICR composed the selected platform into the exact configuration retained by this base.", "Any nested source named by the generated configuration keeps its own processing boundary." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect or compare AICR snapshots without selecting a recipe. The diff reports observed differences; select the intended provider-curated source variant before deciding whether a difference is a fault.", "requiredInputs": [ "An AICR snapshot, recipe, generated bundle, or exact generated output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle", "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded AICR composition step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The selected provider-curated AICR leaf and its overlay choices; a recipe is needed for recipe-dependent generation or validation" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "accelerator=h100", "intent=training", "os=ubuntu", "platform=kubeflow", "service=eks", "acceleratedNodeSelector=nvidia.com/gpu.present=true", "storageClass=gp3", "workloadSelector=app.kubernetes.io/part-of=training" ], "installTime": [], "installTimeStatus": "none-declared-for-this-generated-artifact" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "flux-dependency-order", "origin": "base", "type": "lifecycle-action", "detail": "AICR generated Flux dependsOn relationships for the component order. This repo has not reconciled the bundle on a live target." }, { "id": "flux-external-artifact", "origin": "base", "type": "lifecycle-action", "detail": "Two local charts use ArtifactGenerator and ExternalArtifact. Flux must run source-watcher and enable ExternalArtifact on helm-controller." }, { "id": "flux-oci-source", "origin": "base", "type": "lifecycle-action", "detail": "The target needs an OCIRepository named aicr-bundle in flux-system that points at the published AICR artifact." } ], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "flux-dependency-order", "requirementRefs": [ "flux-dependency-order" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "AICR generated Flux dependsOn relationships for the component order. This repo has not reconciled the bundle on a live target.", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "generated-not-live", "supportedRuntimes": [ "Flux" ], "checks": [], "evidence": [] }, { "id": "flux-external-artifact", "requirementRefs": [ "flux-external-artifact" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "Two local charts use ArtifactGenerator and ExternalArtifact. Flux must run source-watcher and enable ExternalArtifact on helm-controller.", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "generated-not-live", "supportedRuntimes": [ "Flux" ], "checks": [], "evidence": [] }, { "id": "flux-oci-source", "requirementRefs": [ "flux-oci-source" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "The target needs an OCIRepository named aicr-bundle in flux-system that points at the published AICR artifact.", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "not-run", "supportedRuntimes": [ "Flux" ], "checks": [], "evidence": [] } ], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "platform": "EKS", "accelerator": "H100", "operatingSystem": "Ubuntu", "flux": { "minimumVersion": "v2.7.0", "controllers": [ "source-watcher" ], "featureGates": [ "ExternalArtifact=true on helm-controller" ], "source": { "apiVersion": "source.toolkit.fluxcd.io/v1", "kind": "OCIRepository", "name": "aicr-bundle", "namespace": "flux-system" } } }, "requirementRefs": [], "records": [ "examples/aicr/eks-h100-training-kubeflow/recipe.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "local-only", "localDigest": "sha256:b8089d6400833531c5d0d91177e70cf48f2b86896b0214c2b3318916ac4d29ba", "localPush": "pass", "localPull": "pass", "publicPush": "not-run", "publicPull": "not-run", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow:v0.14.0" }, "configHubReleaseOci": { "status": "not-run" }, "configHubUpload": { "status": "not-run" }, "argoCd": "not-generated", "flux": "oci-bundle-generated-local-pull-pass-not-live" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "generationReceipt": "examples/aicr/eks-h100-training-kubeflow/generation-receipt.yaml", "recipe": "examples/aicr/eks-h100-training-kubeflow/recipe.yaml", "checksums": "examples/aicr/eks-h100-training-kubeflow/flux-oci-bundle/checksums.txt", "localOciManifest": "examples/aicr/eks-h100-training-kubeflow/local-oci-manifest.json", "originalGitBundle": "examples/aicr/eks-h100-training-kubeflow/flux-bundle" }, "operations": { "resourceClass": "system-configuration", "ownerClass": "platform-team", "changeCadence": "planned-platform-release" } }, "status": { "level": "partial", "claim": "AICR v0.14.0 generated the committed recipe and OCI-oriented Flux bundle. All 29 Kubernetes objects and every bundle file are recorded; the artifact was pushed to and pulled from a temporary local registry at sha256:b8089d6400833531c5d0d91177e70cf48f2b86896b0214c2b3318916ac4d29ba.", "limits": [ "The OCI artifact has not been published to the public Google Artifact Registry target.", "The bundle has not been uploaded to ConfigHub.", "Flux needs the recorded source-watcher controller, ExternalArtifact feature gate, and OCIRepository before this bundle can reconcile.", "No live Flux or GPU-cluster reconciliation is claimed.", "The older Git-oriented bundle is kept as separate evidence and still contains its recorded YOUR_ORG/YOUR_REPO placeholder." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aicr-eks-h100-training-kubeflow-v0-19-0-argocd", "labels": { "sourceType": "aicr", "component": "aicr-eks-h100-training-kubeflow", "sourceVersion": "v0.19.0", "base": "argocd" } }, "spec": { "source": { "type": "aicr", "name": "eks-h100-training-kubeflow", "version": "v0.19.0", "record": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.19.0", "selection": { "name": "h100-eks-ubuntu-training-kubeflow", "kind": "source-variant", "provider": "NVIDIA AICR", "record": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml" } }, "baseVariant": { "name": "argocd", "revision": "generated-v0.19.0", "digest": "6dd6fd925a36d217eb08f1563e921bb8e89a83f1cbbfad31f88a6bcc1b0e44f2", "digestRole": "aicr-platform-index", "digestRecord": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/digest-index/platform-index.json" }, "configuration": { "format": "argocd-application-yaml", "objects": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered", "inventory": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered/checksums.txt", "objectCount": 17, "digest": "0825f8ba4888da84810184289cb1b0e0313b11f8f7414a4e91bae37fff5b7b94", "digestRole": "inventory-file", "digestRecord": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered/checksums.txt" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml" }, "materialization": { "method": "aicr-compose-then-helm-render", "status": "captured", "outputDigest": "0825f8ba4888da84810184289cb1b0e0313b11f8f7414a4e91bae37fff5b7b94", "record": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered/checksums.txt" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "eks-h100-training-kubeflow@v0.19.0/argocd; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/flattening-safety-verdict.yaml" }, "boundaries": [ "AICR composed the platform and generated an Argo CD app-of-apps chart; Helm rendered that wrapper into exact Application objects.", "The component Applications still reference their own sources, so those nested sources are processed later by Argo CD." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect or compare AICR snapshots without selecting a recipe. The diff reports observed differences; select the intended provider-curated source variant before deciding whether a difference is a fault.", "requiredInputs": [ "An AICR snapshot, recipe, generated bundle, or exact generated output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered", "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered/checksums.txt" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded AICR composition and wrapper render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The selected provider-curated AICR leaf and its overlay choices; a recipe is needed for recipe-dependent generation or validation" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-19-0/argocd-rendered/checksums.txt" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination check is blocked. The recorded plan names the prerequisite or route that is still missing.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "blocked", "resultState": "blocked", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml", "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-19-0-staging-argo-cd.yaml" ], "nextAction": "Resolve the named prerequisite or route, then run the destination check again." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "accelerator=h100", "intent=training", "os=ubuntu", "platform=kubeflow", "service=eks", "acceleratedNodeSelector=nvidia.com/gpu.present=true", "repoURL=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt", "storageClass=gp3", "workloadSelector=app.kubernetes.io/part-of=training", "deployer=argocd-helm" ], "installTime": [ { "category": "target-fact", "name": "aicr-target-fact-1", "purpose": "Argo CD and its Application CRD must exist before these objects can be applied." }, { "category": "target-fact", "name": "aicr-target-fact-2", "purpose": "The target must be an EKS cluster with H100 nodes running Ubuntu." }, { "category": "target-fact", "name": "aicr-target-fact-3", "purpose": "A gp3 StorageClass must be available for the selected storage input." }, { "category": "target-fact", "name": "aicr-target-fact-4", "purpose": "GPU nodes must carry nvidia.com/gpu.present=true for the selected node placement." } ], "installTimeStatus": "destination-facts-recorded-not-run" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd-prerequisite", "origin": "base", "type": "lifecycle-action", "detail": "make the Argo CD Application API and controller available" }, { "id": "component-order", "origin": "base", "type": "lifecycle-action", "detail": "reconcile component Applications in AICR dependency order" }, { "id": "downstream-chart-lifecycle", "origin": "base", "type": "lifecycle-action", "detail": "handle hooks, CRDs, certificates, and setup Jobs in each referenced chart" }, { "id": "aicr-health-checks", "origin": "base", "type": "lifecycle-action", "detail": "run the deployment and conformance checks carried by the AICR recipe" }, { "id": "aicr-target-fact-1", "origin": "base", "type": "target-fact", "detail": "Argo CD and its Application CRD must exist before these objects can be applied." }, { "id": "aicr-target-fact-2", "origin": "base", "type": "target-fact", "detail": "The target must be an EKS cluster with H100 nodes running Ubuntu." }, { "id": "aicr-target-fact-3", "origin": "base", "type": "target-fact", "detail": "A gp3 StorageClass must be available for the selected storage input." }, { "id": "aicr-target-fact-4", "origin": "base", "type": "target-fact", "detail": "GPU nodes must carry nvidia.com/gpu.present=true for the selected node placement." } ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "argocd-prerequisite", "requirementRefs": [ "argocd-prerequisite" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "make the Argo CD Application API and controller available", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-run-for-v0.19.0", "supportedRuntimes": [ "Argo CD" ], "checks": [ "Argo CD CRD discovery and controller readiness" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ], "orderHint": "before any retained Application object" }, { "id": "component-order", "requirementRefs": [ "component-order" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "reconcile component Applications in AICR dependency order", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-run-for-v0.19.0", "supportedRuntimes": [ "Argo CD" ], "checks": [ "observed sync operations and component health, not annotation survival alone" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ], "orderHint": "sync-wave annotations generated from recipe.deploymentOrder" }, { "id": "downstream-chart-lifecycle", "requirementRefs": [ "downstream-chart-lifecycle" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "handle hooks, CRDs, certificates, and setup Jobs in each referenced chart", "automatic": false, "status": "recorded", "sourceStatus": "nested-sources-rendered-routes-not-resolved", "supportedRuntimes": [ "Argo CD" ], "checks": [ "chart-level flattening decisions, routes, and live receipts for the exact referenced versions" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ], "orderHint": "chart-specific" }, { "id": "aicr-health-checks", "requirementRefs": [ "aicr-health-checks" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "run the deployment and conformance checks carried by the AICR recipe", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "not-run", "supportedRuntimes": [], "checks": [ "validator output from the target cluster" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ], "orderHint": "after the relevant component is available" } ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "platform": "EKS", "accelerator": "H100", "operatingSystem": "Ubuntu" }, "requirementRefs": [ "aicr-target-fact-1", "aicr-target-fact-2", "aicr-target-fact-3", "aicr-target-fact-4" ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ] }, "resolution": { "status": "blocked", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [ "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-19-0-staging-argo-cd.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml" ] } }, "ownership": { "status": "declared", "sourceControlled": [ "Fields classified as source-owned by the AICR v0.19.0 field-policy assessment" ], "variantControlled": [ "Fields classified as safe reviewed ConfigHub changes by the AICR v0.19.0 field-policy assessment" ], "targetSupplied": [ "aicr-target-fact-1", "aicr-target-fact-2", "aicr-target-fact-3", "aicr-target-fact-4" ], "deliveryProtected": [], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-19-0/field-policy-assessment.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:00318b2196a914057ee3c1c7679be17f8500f65b2c2f96a791e404c1ba47c161", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd:0.19.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/oci-layouts/argocd-source", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/public-oci-receipt.yaml" }, "literalConfigOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:60330c80709c8bddb0c9bf52b4be35f803c302931dfa52f1d1b2b4637eb90635", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.19.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/oci-layouts/argocd-config", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/public-oci-receipt.yaml" }, "configHubUpload": { "status": "pass", "sourceRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.19.0", "sourceOciDigest": "sha256:60330c80709c8bddb0c9bf52b4be35f803c302931dfa52f1d1b2b4637eb90635", "configHubDataHash": "127138237fb994791dfa5e7e6958e8d6083fb779660dc346c879f09b3025560a", "objectIdentitiesMatched": true, "bindingMethod": "external-source-annotation-plus-exact-object-comparison", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/confighub-upload-receipt.yaml" }, "configHubReleaseOci": { "status": "published-and-pulled-by-digest", "reference": "oci://oci.hub.confighub.com:443/space/aicr-eks-h100-training-kubeflow-v0-19-0-argocd-staging@sha256:c2408fe664240a06620bc718698318953bec08c642a1c5a43996e868048cd0a1", "manifestDigest": "sha256:c2408fe664240a06620bc718698318953bec08c642a1c5a43996e868048cd0a1", "bundleDigest": "sha256:295883db781f9f6a6acd6402d994b24cf1bd6874247f17ca66eb1bbc732e7a5f", "promotedConfigurationMatched": true, "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/confighub-release-oci-receipt.yaml" }, "argoCd": "applications-retained-not-reconciled", "flux": "not-run-for-argo-application-wrapper" }, "promotion": { "status": "pass", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/promotion-readiness-receipt.yaml", "path": "base -> development -> staging", "sourceDigest": "sha256:60330c80709c8bddb0c9bf52b4be35f803c302931dfa52f1d1b2b4637eb90635", "changedApplications": [ "argoproj.io/v1alpha1/Application argocd/kube-prometheus-stack" ], "devDryRun": "pass", "stagingDryRun": "pass", "stagingMatchesReviewedDev": true }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "sourceGenerationReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/generation-receipt.yaml", "sourceProvenance": "runs/aicr-provenance-v0-19-0/receipt.yaml", "digestIndex": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/digest-index/platform-index.json", "flatteningVerdict": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/flattening-safety-verdict.yaml", "routeIntent": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/route-intent.yaml", "fieldPolicy": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/field-policy-assessment.yaml", "publicOciReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/public-oci-receipt.yaml", "configHubUploadReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/confighub-upload-receipt.yaml", "applyPolicyReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/apply-policy-receipt.yaml", "variantPromotionReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/promotion-readiness-receipt.yaml", "configHubReleaseOciReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-19-0/confighub-release-oci-receipt.yaml", "nestedSourceRenders": "data/aicr-v0-19-0-nested-sources/summary.md", "stagingRouteResolution": "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-19-0-staging-argo-cd.yaml", "processingChain": "data/aicr-v0-19-0-chain/summary.md" }, "operations": { "resourceClass": "system-configuration", "ownerClass": "platform-team", "changeCadence": "planned-platform-release" } }, "status": { "level": "partial", "claim": "AICR v0.19.0 produced 17 exact Argo CD Applications. Their source and literal OCI artifacts are publicly pullable. ConfigHub retained those Applications, promoted one reviewed change to staging, and published the approved staging result as a release OCI that was pulled and compared by digest.", "limits": [ "Both OCI artifacts were anonymously pulled at their recorded digests.", "ConfigHub recorded the literal OCI digest and its separate Unit data hash 127138237fb994791dfa5e7e6958e8d6083fb779660dc346c879f09b3025560a; the upload receipt binds them by exact-object comparison.", "The persistent development and staging variants contain the one reviewed Grafana Secret-reference change.", "The required-approval gate refused to publish an unapproved ConfigHub release.", "After approval, ConfigHub published the staging release OCI; an authenticated pull resolved the exact manifest digest and matched the promoted 17-Application object set.", "All 16 nested component sources rendered locally; eight rendered CRDs. Their destination-specific lifecycle handling still requires runtime evidence.", "Argo CD reconciliation, EKS, H100 execution, training, model requests, and exact runtime rollback have not run for this version." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aicr-eks-h100-training-kubeflow-v0-20-0-argocd", "labels": { "sourceType": "aicr", "component": "aicr-eks-h100-training-kubeflow", "sourceVersion": "v0.20.0", "base": "argocd" } }, "spec": { "source": { "type": "aicr", "name": "eks-h100-training-kubeflow", "version": "v0.20.0", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/generation-receipt.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow/aicr-bundle:0.20.0", "selection": { "name": "h100-eks-ubuntu-training-kubeflow", "kind": "source-variant", "provider": "NVIDIA", "providerRole": "source-catalog-curator", "providerIdentity": "https://github.com/NVIDIA/aicr", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/source-catalog/source-catalog-record.yaml", "catalog": { "name": "NVIDIA AICR built-in catalog", "version": "v0.20.0", "digest": "sha256:676f2d59eacd79ae1b72e5cbe00216b577def1da412dbdabb032f317a62dc1d8", "digestRole": "source-catalog-content", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/source-catalog/catalog-list.json" }, "dimensions": { "accelerator": "h100", "intent": "training", "os": "ubuntu", "platform": "kubeflow", "service": "eks" }, "selectionRecord": { "digest": "sha256:f7195375d052a1c4c169bfa7eb25e9999715cdae753dfab4b98da3b0aec49ea5", "digestRole": "selected-source-variant", "path": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/recipe.yaml" }, "evidence": { "status": "provider-linked", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/source-catalog/recipe-health.md" ], "references": [ "[eks/h100-ubuntu/training-kubeflow](https://validation.aicr.run/#/eks/h100-ubuntu/training-kubeflow)" ] } } }, "baseVariant": { "name": "argocd", "revision": "generated-v0.20.0", "digest": "969e73550ef853489c201d336701ba6a3d53224bb899ae0a75dce31ce60f1241", "digestRole": "aicr-platform-index", "digestRecord": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/digest-index/platform-index.json" }, "configuration": { "format": "argocd-application-yaml", "objects": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered", "inventory": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered/checksums.txt", "objectCount": 17, "digest": "f2a4f9e60e872bf2266a8dc89a239e704b0dd5f77a643c3bdf9561a088de99cc", "digestRole": "inventory-file", "digestRecord": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered/checksums.txt" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/generation-receipt.yaml" }, "materialization": { "method": "aicr-compose-then-helm-render", "status": "captured", "outputDigest": "f2a4f9e60e872bf2266a8dc89a239e704b0dd5f77a643c3bdf9561a088de99cc", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered/checksums.txt" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "eks-h100-training-kubeflow@v0.20.0/argocd; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/flattening-safety-verdict.yaml" }, "boundaries": [ "AICR composed the platform and generated an Argo CD app-of-apps chart; Helm rendered that wrapper into exact Application objects.", "The component Applications still reference their own sources, so those nested sources are processed later by Argo CD." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect or compare AICR snapshots without selecting a recipe. The diff reports observed differences; select the intended provider-curated source variant before deciding whether a difference is a fault.", "requiredInputs": [ "An AICR snapshot, recipe, generated bundle, or exact generated output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered", "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered/checksums.txt" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded AICR composition and wrapper render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The selected provider-curated AICR leaf and its overlay choices; a recipe is needed for recipe-dependent generation or validation" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/generation-receipt.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-20-0/argocd-rendered/checksums.txt" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination check is blocked. The recorded plan names the prerequisite or route that is still missing.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "blocked", "resultState": "blocked", "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml", "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-20-0-staging-argo-cd.yaml", "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-20-0-staging-flux.yaml" ], "nextAction": "Resolve the named prerequisite or route, then run the destination check again." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "accelerator=h100", "intent=training", "os=ubuntu", "platform=kubeflow", "service=eks", "acceleratedNodeSelector=nvidia.com/gpu.present=true", "repoURL=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow", "storageClass=gp3", "workloadSelector=app.kubernetes.io/part-of=training", "deployer=argocd-helm" ], "installTime": [ { "category": "target-fact", "name": "aicr-target-fact-1", "purpose": "Argo CD and its Application CRD must exist before the retained wrapper objects can be applied." }, { "category": "target-fact", "name": "aicr-target-fact-2", "purpose": "The destination must match the selected EKS, H100, Ubuntu, and Kubeflow training source variant." }, { "category": "target-fact", "name": "aicr-target-fact-3", "purpose": "A gp3 StorageClass must be available for the selected storage input." }, { "category": "target-fact", "name": "aicr-target-fact-4", "purpose": "GPU nodes must carry nvidia.com/gpu.present=true for the selected placement." }, { "category": "target-fact", "name": "aicr-target-fact-5", "purpose": "EFA, RDMA, driver, and nvidia_peermem requirements must be checked against the actual node and network role." } ], "installTimeStatus": "destination-facts-recorded-not-run" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "source-variant-target-match", "origin": "base", "type": "lifecycle-action", "detail": "compare observed destination facts with the intended NVIDIA source variant" }, { "id": "argocd-prerequisite", "origin": "base", "type": "lifecycle-action", "detail": "make the Argo CD Application API and controller available" }, { "id": "component-order", "origin": "base", "type": "lifecycle-action", "detail": "reconcile component Applications in AICR dependency order" }, { "id": "downstream-chart-lifecycle", "origin": "base", "type": "lifecycle-action", "detail": "handle CRDs, hooks, certificates, operators, and setup Jobs for every nested source" }, { "id": "aicr-node-inspection", "origin": "base", "type": "lifecycle-action", "detail": "collect and compare node facts without requiring a selected recipe" }, { "id": "aicr-configuration-validation", "origin": "base", "type": "lifecycle-action", "detail": "run checks whose prerequisites are satisfied by the selected source variant" }, { "id": "aicr-target-fact-1", "origin": "base", "type": "target-fact", "detail": "Argo CD and its Application CRD must exist before the retained wrapper objects can be applied." }, { "id": "aicr-target-fact-2", "origin": "base", "type": "target-fact", "detail": "The destination must match the selected EKS, H100, Ubuntu, and Kubeflow training source variant." }, { "id": "aicr-target-fact-3", "origin": "base", "type": "target-fact", "detail": "A gp3 StorageClass must be available for the selected storage input." }, { "id": "aicr-target-fact-4", "origin": "base", "type": "target-fact", "detail": "GPU nodes must carry nvidia.com/gpu.present=true for the selected placement." }, { "id": "aicr-target-fact-5", "origin": "base", "type": "target-fact", "detail": "EFA, RDMA, driver, and nvidia_peermem requirements must be checked against the actual node and network role." } ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "source-variant-target-match", "requirementRefs": [ "source-variant-target-match" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "compare observed destination facts with the intended NVIDIA source variant", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-run", "supportedRuntimes": [], "checks": [ "target snapshot, selected source-catalog digest, and an explained match or exception" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "before destination-specific promotion or delivery" }, { "id": "argocd-prerequisite", "requirementRefs": [ "argocd-prerequisite" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "make the Argo CD Application API and controller available", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-run", "supportedRuntimes": [ "Argo CD" ], "checks": [ "Argo CD CRD discovery and controller readiness" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "before any retained Application object" }, { "id": "component-order", "requirementRefs": [ "component-order" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "reconcile component Applications in AICR dependency order", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-run", "supportedRuntimes": [ "Argo CD" ], "checks": [ "observed sync operations and component health, not annotation survival alone" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "sync-wave annotations generated from recipe.deploymentOrder" }, { "id": "downstream-chart-lifecycle", "requirementRefs": [ "downstream-chart-lifecycle" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "handle CRDs, hooks, certificates, operators, and setup Jobs for every nested source", "automatic": false, "status": "recorded", "sourceStatus": "materialized-awaits-destination-execution", "supportedRuntimes": [], "checks": [ "nested source render, flattening decision, route resolution, and execution receipt" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "source- and destination-specific" }, { "id": "aicr-node-inspection", "requirementRefs": [ "aicr-node-inspection" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "collect and compare node facts without requiring a selected recipe", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "available-not-run-for-this-entry", "supportedRuntimes": [], "checks": [ "snapshot digests and the exact diff" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "before or independently of configuration delivery" }, { "id": "aicr-configuration-validation", "requirementRefs": [ "aicr-configuration-validation" ], "phase": "destination-resolution", "proposedActor": "selected destination actor", "proposedMechanism": "run checks whose prerequisites are satisfied by the selected source variant", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "not-run", "supportedRuntimes": [], "checks": [ "per-check prerequisite classification and target output" ], "evidence": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ], "orderHint": "after the relevant components or hardware exist" } ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "platform": "EKS", "accelerator": "H100", "operatingSystem": "Ubuntu" }, "requirementRefs": [ "aicr-target-fact-1", "aicr-target-fact-2", "aicr-target-fact-3", "aicr-target-fact-4", "aicr-target-fact-5" ], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ] }, "resolution": { "status": "blocked", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [ "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-20-0-staging-argo-cd.yaml", "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-20-0-staging-flux.yaml", "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml" ] } }, "ownership": { "status": "declared", "sourceControlled": [ "Fields classified as source-owned by the AICR v0.20.0 field-policy assessment" ], "variantControlled": [ "Fields classified as safe reviewed ConfigHub changes by the AICR v0.20.0 field-policy assessment" ], "targetSupplied": [ "aicr-target-fact-1", "aicr-target-fact-2", "aicr-target-fact-3", "aicr-target-fact-4", "aicr-target-fact-5" ], "deliveryProtected": [], "records": [ "examples/aicr/eks-h100-training-kubeflow-v0-20-0/field-policy-assessment.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:2eedf6b36ea2cfab828245e38f72b7ed344915b6695c6a56d92a744d25992431", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow/aicr-bundle:0.20.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/oci-layouts/argocd-source", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/public-oci-receipt.yaml" }, "literalConfigOci": { "status": "public-anonymous-pull-proved", "localDigest": "sha256:4779ed69b9858791379a93704bb92ac11ec3b72e987b34921e293dd695415be8", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.20.0", "ociLayout": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/oci-layouts/argocd-config", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/public-oci-receipt.yaml" }, "configHubUpload": { "status": "pass", "sourceRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aicr-eks-h100-training-kubeflow-argocd-config:0.20.0", "sourceOciDigest": "sha256:4779ed69b9858791379a93704bb92ac11ec3b72e987b34921e293dd695415be8", "configHubDataHash": "99246a3a947ec2b4a0037a395e81c21c4f6efb92198fe08e9a9afb63b2f3ab56", "objectIdentitiesMatched": true, "bindingMethod": "external-source-annotation-plus-exact-object-comparison", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/confighub-upload-receipt.yaml" }, "configHubReleaseOci": { "status": "published-and-pulled-by-digest", "reference": "oci://oci.hub.confighub.com:443/space/aicr-eks-h100-training-kubeflow-v0-20-0-argocd-production@sha256:4684baa1f7d7c83b479dfeaa8a189e452e9de41156dd8eda5a707e37689ffdd7", "manifestDigest": "sha256:4684baa1f7d7c83b479dfeaa8a189e452e9de41156dd8eda5a707e37689ffdd7", "bundleDigest": "sha256:786f06fe9fafdb24546ae3d62dfaabbf03d4943f4986c6c6a7ecbc92c46f6c85", "promotedConfigurationMatched": true, "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/confighub-release-oci-receipt.yaml" }, "argoCd": "applications-retained-not-reconciled", "flux": "not-run-for-argo-application-wrapper" }, "promotion": { "status": "pass", "receipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/promotion-readiness-receipt.yaml", "path": "base -> development -> staging -> production", "sourceDigest": "sha256:4779ed69b9858791379a93704bb92ac11ec3b72e987b34921e293dd695415be8", "changedApplications": [ "argoproj.io/v1alpha1/Application argocd/kube-prometheus-stack" ], "devDryRun": "pass", "stagingDryRun": "pass", "stagingMatchesReviewedDev": true, "production": "aicr-eks-h100-training-kubeflow-v0-20-0-argocd-production", "productionDryRun": "pass" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "sourceGenerationReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/generation-receipt.yaml", "sourceProvenance": "runs/aicr-provenance-v0-20-0/receipt.yaml", "digestIndex": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/digest-index/platform-index.json", "flatteningVerdict": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/flattening-safety-verdict.yaml", "routeIntent": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/route-intent.yaml", "fieldPolicy": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/field-policy-assessment.yaml", "publicOciReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/public-oci-receipt.yaml", "configHubUploadReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/confighub-upload-receipt.yaml", "applyPolicyReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/apply-policy-receipt.yaml", "variantPromotionReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/promotion-readiness-receipt.yaml", "configHubReleaseOciReceipt": "examples/aicr/eks-h100-training-kubeflow-v0-20-0/confighub-release-oci-receipt.yaml", "nestedSourceRenders": "data/aicr-v0-20-0-nested-sources/summary.md", "stagingRouteResolution": "data/lifecycle-route-resolutions/aicr-eks-h100-training-kubeflow-v0-20-0-staging-argo-cd.yaml", "processingChain": "data/aicr-v0-20-0-chain/summary.md" }, "operations": { "resourceClass": "system-configuration", "ownerClass": "platform-team", "changeCadence": "planned-platform-release" } }, "status": { "level": "partial", "claim": "AICR v0.20.0 produced 17 exact Argo CD Applications. Their source and literal OCI artifacts are publicly pullable. ConfigHub retained those Applications, promoted one reviewed change through staging and production, and published the approved production result as a release OCI that was pulled and compared by digest.", "limits": [ "Both OCI artifacts were anonymously pulled at their recorded digests.", "ConfigHub recorded the literal OCI digest and its separate Unit data hash 99246a3a947ec2b4a0037a395e81c21c4f6efb92198fe08e9a9afb63b2f3ab56; the upload receipt binds them by exact-object comparison.", "The persistent development, staging, and production variants contain the one reviewed Grafana Secret-reference change.", "The required-approval gate refused to publish an unapproved ConfigHub release.", "After approval, ConfigHub published the production release OCI; an authenticated pull resolved the exact manifest digest and matched the promoted 17-Application object set.", "All 16 nested component sources rendered locally; eight rendered CRDs. Their destination-specific lifecycle handling still requires runtime evidence.", "Argo CD reconciliation, EKS, H100 execution, training, model requests, and exact runtime rollback have not run for this version." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aqua-trivy-operator-0-32-1-default", "labels": { "sourceType": "helm", "component": "aqua/trivy-operator", "sourceVersion": "0.32.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "aqua/trivy-operator", "version": "0.32.1", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1@sha256:473c9b5a9803e80f6554db0cb7cd7f5c64c1ffdd1b04dd0216fdb4a657552ed0", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "081b6a7123204015bf5b972d7be7539f946ce988cfc670ff8a11926d5f005fe4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 33, "digest": "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25", "digestRole": "canonical-object-set", "digestRecord": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4728643a42924d6af2c0b2b4f1f616938c31b6271ed7e32bac2ce36e5e339a25", "record": "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "aqua/trivy-operator@0.32.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aqua/trivy-operator/0.32.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aqua/trivy-operator", "version=0.32.1", "base=default", "valuesProfile=recipes/aqua/trivy-operator/0.32.1/effective-values.yaml", "namespace=default", "releaseName=trivy-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aqua-trivy-operator-0-32-1-no-crds", "labels": { "sourceType": "helm", "component": "aqua/trivy-operator", "sourceVersion": "0.32.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "aqua/trivy-operator", "version": "0.32.1", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aqua-trivy-operator:0.32.1@sha256:473c9b5a9803e80f6554db0cb7cd7f5c64c1ffdd1b04dd0216fdb4a657552ed0", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492", "digestRole": "canonical-object-set", "digestRecord": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "875c8aa838c2841aeda6fbd5ffe95e4f7e2c6a36d64194715bb4039aff0ed492", "record": "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "aqua/trivy-operator@0.32.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aqua/trivy-operator/0.32.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml", "recipes/aqua/trivy-operator/0.32.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aqua/trivy-operator", "version=0.32.1", "base=no-crds", "valuesProfile=recipes/aqua/trivy-operator/0.32.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=trivy-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "clustercompliancereports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clustercompliancereports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterconfigauditreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clusterconfigauditreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterinfraassessmentreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clusterinfraassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterrbacassessmentreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clusterrbacassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustersbomreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clustersbomreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustervulnerabilityreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "clustervulnerabilityreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "configauditreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "configauditreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "exposedsecretreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "exposedsecretreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "infraassessmentreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "infraassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "rbacassessmentreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "rbacassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "sbomreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "sbomreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "vulnerabilityreports.aquasecurity.github.io", "type": "requiredCRDs", "required": true, "details": { "name": "vulnerabilityreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "clustercompliancereports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "clusterconfigauditreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "clusterinfraassessmentreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "clusterrbacassessmentreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "clustersbomreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "clustervulnerabilityreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "configauditreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "exposedsecretreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "infraassessmentreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "rbacassessmentreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "sbomreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" }, { "id": "vulnerabilityreports.aquasecurity.github.io", "origin": "base", "type": "target-fact", "detail": "Trivy Operator CRD managed outside this no-crds base" } ], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "name": "clustercompliancereports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "clusterconfigauditreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "clusterinfraassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "clusterrbacassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "clustersbomreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "clustervulnerabilityreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "configauditreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "exposedsecretreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "infraassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "rbacassessmentreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "sbomreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "name": "vulnerabilityreports.aquasecurity.github.io", "purpose": "Trivy Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Trivy Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/aqua/trivy-operator/0.32.1/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "clustercompliancereports.aquasecurity.github.io", "clusterconfigauditreports.aquasecurity.github.io", "clusterinfraassessmentreports.aquasecurity.github.io", "clusterrbacassessmentreports.aquasecurity.github.io", "clustersbomreports.aquasecurity.github.io", "clustervulnerabilityreports.aquasecurity.github.io", "configauditreports.aquasecurity.github.io", "exposedsecretreports.aquasecurity.github.io", "infraassessmentreports.aquasecurity.github.io", "rbacassessmentreports.aquasecurity.github.io", "sbomreports.aquasecurity.github.io", "vulnerabilityreports.aquasecurity.github.io" ], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "clustercompliancereports.aquasecurity.github.io", "clusterconfigauditreports.aquasecurity.github.io", "clusterinfraassessmentreports.aquasecurity.github.io", "clusterrbacassessmentreports.aquasecurity.github.io", "clustersbomreports.aquasecurity.github.io", "clustervulnerabilityreports.aquasecurity.github.io", "configauditreports.aquasecurity.github.io", "exposedsecretreports.aquasecurity.github.io", "infraassessmentreports.aquasecurity.github.io", "rbacassessmentreports.aquasecurity.github.io", "sbomreports.aquasecurity.github.io", "vulnerabilityreports.aquasecurity.github.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aqua-trivy-operator-0-32-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-10-1-3-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "10.1.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "10.1.3", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:10.1.3@sha256:33eee3ec734e11dad3a95f8a4cba5999106a54b0dcc51a477b5cebe7e0d45a4e", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e7a1919a997d784c8b0f9446ff9cc14ce14ed200aa618accec20682e3f6ccaa0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 55, "digest": "b2cbe21e58abbf285edb7710df9df299c93bb288293eed091ef7e24f83f850b5", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b2cbe21e58abbf285edb7710df9df299c93bb288293eed091ef7e24f83f850b5", "record": "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@10.1.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/10.1.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=10.1.3", "base=default", "valuesProfile=recipes/argo-cd/argo-cd/10.1.3/effective-values.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-10-1-3-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "10.1.3", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "10.1.3", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:10.1.3@sha256:33eee3ec734e11dad3a95f8a4cba5999106a54b0dcc51a477b5cebe7e0d45a4e", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "45a63f4fd98a247a033f78e0bc0563af61cd37674431d143fd96fb2177c22907", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 52, "digest": "813fb156368c0a1588c666c9870f07e5441347d11af65a9d349161109ae1a5da", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "813fb156368c0a1588c666c9870f07e5441347d11af65a9d349161109ae1a5da", "record": "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@10.1.3/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/10.1.3/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml", "recipes/argo-cd/argo-cd/10.1.3/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=10.1.3", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-cd/10.1.3/effective-values-no-crds.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "applications.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "applicationsets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "appprojects.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "applications.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "applicationsets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "appprojects.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-1-3-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-10-2-1-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "10.2.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "10.2.1", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:10.2.1@sha256:b933436ed879e10c1b684a2d5f89670a35e759264849ec7bfd7c2f2cec1dd5f8", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "5738758da4b11775f38bf7f640ac01986cb9da1ff645f4ad29e099321eecf6ea", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 55, "digest": "a2ba05a7684443115b1516e1b01a03ebe845cdfcf956722539ae0d3f5bff8780", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a2ba05a7684443115b1516e1b01a03ebe845cdfcf956722539ae0d3f5bff8780", "record": "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@10.2.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/10.2.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=10.2.1", "base=default", "valuesProfile=recipes/argo-cd/argo-cd/10.2.1/effective-values.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-10-2-1-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "10.2.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "10.2.1", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:10.2.1@sha256:b933436ed879e10c1b684a2d5f89670a35e759264849ec7bfd7c2f2cec1dd5f8", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "b5a8bd4aa70bc377f2f8c4a8ff685eb7c16efe13c1920f83ea3d71455a0908dd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 52, "digest": "51d717634a2d0098d0791629aad974dc79b1ec0de68e4adfe00005de2003ca14", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "51d717634a2d0098d0791629aad974dc79b1ec0de68e4adfe00005de2003ca14", "record": "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@10.2.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/10.2.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml", "recipes/argo-cd/argo-cd/10.2.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=10.2.1", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-cd/10.2.1/effective-values-no-crds.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "applications.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "applicationsets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "appprojects.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "applications.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "applicationsets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "appprojects.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-10-2-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-9-5-15-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "9.5.15", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "9.5.15", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.15@sha256:9ec6bd1950e4b8b300ac61a62b85943a462dd7fc80d64e5bc79995f054c2ce4d", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e8e4e9f365cf8f6d2b4faa7e873dfd1d39a8e598617f5024d71b1cd2651fbac7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 49, "digest": "e52ddef5e56e347a8959dd1e8591e116479bf8aa8682c83e3753fe7355a38cc0", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e52ddef5e56e347a8959dd1e8591e116479bf8aa8682c83e3753fe7355a38cc0", "record": "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@9.5.15/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/9.5.15/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=9.5.15", "base=default", "valuesProfile=recipes/argo-cd/argo-cd/9.5.15/effective-values.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-9-5-15-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "9.5.15", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "9.5.15", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.15@sha256:9ec6bd1950e4b8b300ac61a62b85943a462dd7fc80d64e5bc79995f054c2ce4d", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "b11e168aef43d573d20c07df70386f0e575f0f0dbfebaf05fce61f947158cb9c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 46, "digest": "23a51fb8ea2215b08a853bbb26698d80f58a5514b68d4f49cdcd870a8371fc71", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "23a51fb8ea2215b08a853bbb26698d80f58a5514b68d4f49cdcd870a8371fc71", "record": "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@9.5.15/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/9.5.15/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml", "recipes/argo-cd/argo-cd/9.5.15/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=9.5.15", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-cd/9.5.15/effective-values-no-crds.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "applications.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "applicationsets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "appprojects.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "applications.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "applicationsets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "appprojects.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.15/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-15-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-9-5-17-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "9.5.17", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "9.5.17", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.17@sha256:e32948e407f2003dd6a97ba3d6a0e362514bca13c51cbb16b7338c570fdde40f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "c7e7c149461d0986bc67c76d72e1c5d9cfa815003a761a9ea1f76574e762d473", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 49, "digest": "e79d4daf30498e893d2dc41c736de2de1fe3ff3a4dc396212a86336143f80fa7", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e79d4daf30498e893d2dc41c736de2de1fe3ff3a4dc396212a86336143f80fa7", "record": "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@9.5.17/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/9.5.17/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=9.5.17", "base=default", "valuesProfile=recipes/argo-cd/argo-cd/9.5.17/effective-values.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-cd-9-5-17-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-cd", "sourceVersion": "9.5.17", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-cd", "version": "9.5.17", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-cd:9.5.17@sha256:e32948e407f2003dd6a97ba3d6a0e362514bca13c51cbb16b7338c570fdde40f", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "628d57f3f12753d1a1e57a8dd876ecd89e6b93e763c90a3b071b46c6a200bad7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 46, "digest": "58d54d31b7e52f80c4a352f48a8828fc62fc31b8e2c8aea497f756ae5ce0f9ec", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "58d54d31b7e52f80c4a352f48a8828fc62fc31b8e2c8aea497f756ae5ce0f9ec", "record": "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-cd@9.5.17/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-cd/9.5.17/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml", "recipes/argo-cd/argo-cd/9.5.17/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-cd", "version=9.5.17", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-cd/9.5.17/effective-values-no-crds.yaml", "namespace=argocd", "releaseName=argo-cd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "applications.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "applicationsets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "appprojects.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "argocd-redis", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "applications.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "applicationsets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "appprojects.argoproj.io", "origin": "base", "type": "target-fact", "detail": "Argo CD CRD managed outside this no-crds base" }, { "id": "argocd/argocd-redis", "origin": "base", "type": "target-fact", "detail": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applications.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "applicationsets.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "appprojects.argoproj.io", "purpose": "Argo CD CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/argo-cd/argo-cd/9.5.17/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "auth" ], "name": "argocd-redis", "namespace": "argocd", "purpose": "Redis auth Secret normally generated by the chart secret-init hook; config-only delivery lanes stage it explicitly" } ] }, "requirementRefs": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "applications.argoproj.io", "applicationsets.argoproj.io", "appprojects.argoproj.io", "argocd/argocd-redis" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-cd-9-5-17-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-events-2-4-21-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-events", "sourceVersion": "2.4.21", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-events", "version": "2.4.21", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-events:2.4.21@sha256:d17322319fd2884cdd914aa580ab94aed8ce7b948af51325a4d9973f7c001b47", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e2477b480724b8af1d4ad07dac29be619cf606e7849d8dd5fe5becb2dbd6ac3d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "fe5c705f2f03410df75055542a79619c82947dafbf3f1c01c05eca2fc197503b", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "fe5c705f2f03410df75055542a79619c82947dafbf3f1c01c05eca2fc197503b", "record": "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-events@2.4.21/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-events/2.4.21/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-events", "version=2.4.21", "base=default", "valuesProfile=recipes/argo-cd/argo-events/2.4.21/effective-values.yaml", "namespace=default", "releaseName=argo-events", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-events-2-4-21-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-events", "sourceVersion": "2.4.21", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-events", "version": "2.4.21", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-events:2.4.21@sha256:d17322319fd2884cdd914aa580ab94aed8ce7b948af51325a4d9973f7c001b47", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "4858a0854eb393c136be157686a7417478ee33c88428452eaa21ad3fed65ad49", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4858a0854eb393c136be157686a7417478ee33c88428452eaa21ad3fed65ad49", "record": "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "argo-cd/argo-events@2.4.21/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-events/2.4.21/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml", "recipes/argo-cd/argo-events/2.4.21/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-events", "version=2.4.21", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-events/2.4.21/effective-values-no-crds.yaml", "namespace=default", "releaseName=argo-events", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-events-2-4-21-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-rollouts-2-40-9-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-rollouts", "sourceVersion": "2.40.9", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-rollouts", "version": "2.40.9", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-rollouts:2.40.9@sha256:e77d2622b0c73818226779e719ecd8841bc282c710b5cc193940ff5cb8ee00ab", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "1f6a9d11dfbd60d65ad0885b7edee4f3fd1aca64eb9dccea42e570923e063a6d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 14, "digest": "cd696130d24a1a676d5bc1abb9978ff10d6d4e6e072655c6ef275453b1e85e47", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "cd696130d24a1a676d5bc1abb9978ff10d6d4e6e072655c6ef275453b1e85e47", "record": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-rollouts@2.40.9/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-rollouts/2.40.9/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-rollouts", "version=2.40.9", "base=default", "valuesProfile=recipes/argo-cd/argo-rollouts/2.40.9/effective-values.yaml", "namespace=default", "releaseName=argo-rollouts", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-rollouts-2-40-9-no-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-rollouts", "sourceVersion": "2.40.9", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-rollouts", "version": "2.40.9", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-rollouts:2.40.9@sha256:e77d2622b0c73818226779e719ecd8841bc282c710b5cc193940ff5cb8ee00ab", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "6facde581531cc4995b342bf9b3614f4c73f5c8d9ba057ae92895db6c3813dd7", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6facde581531cc4995b342bf9b3614f4c73f5c8d9ba057ae92895db6c3813dd7", "record": "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "argo-cd/argo-rollouts@2.40.9/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-rollouts/2.40.9/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml", "recipes/argo-cd/argo-rollouts/2.40.9/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-rollouts", "version=2.40.9", "base=no-crds", "valuesProfile=recipes/argo-cd/argo-rollouts/2.40.9/effective-values-no-crds.yaml", "namespace=default", "releaseName=argo-rollouts", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-rollouts-2-40-9-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-workflows-1-0-14-controller-default-reviewed", "labels": { "sourceType": "helm", "component": "argo-cd/argo-workflows", "sourceVersion": "1.0.14", "base": "controller-default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-workflows", "version": "1.0.14", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14@sha256:abbebaeccc07e0583c7ccc5ad0c9d315057e6b4c0a766bd72c167ee92d3f160f", "selection": { "name": "controller-default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml" } }, "baseVariant": { "name": "controller-default-reviewed", "revision": "r001", "digest": "7b46fc888a19969d6e87558651ea704282003b5cc1e47fac61b54019b4eb5e6e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "677516f7d311ffdfcf7a4b424585cada43ba104af51ef7e283c575d8279c16bc", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "677516f7d311ffdfcf7a4b424585cada43ba104af51ef7e283c575d8279c16bc", "record": "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-workflows@1.0.14/controller-default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-workflows/1.0.14/publication/flattening-safety-verdict-controller-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/controller-default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-workflows", "version=1.0.14", "base=controller-default-reviewed", "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values.yaml", "namespace=default", "releaseName=argo-workflows", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "clusterworkflowtemplates.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "clusterworkflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml", "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "cronworkflows.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "cronworkflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml", "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workflowartifactgctasks.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowartifactgctasks.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml", "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workfloweventbindings.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workfloweventbindings.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml", "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workflows.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml", "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workflowtaskresults.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtaskresults.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml", "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workflowtasksets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtasksets.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml", "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } }, { "name": "workflowtemplates.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml", "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "full CRDs required before workflow-controller and server can start; hook uses server-side apply because full CRDs exceed client-side apply annotation limits" }, { "id": "clusterworkflowtemplates.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD clusterworkflowtemplates.argoproj.io must exist before apply." }, { "id": "cronworkflows.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD cronworkflows.argoproj.io must exist before apply." }, { "id": "workflowartifactgctasks.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowartifactgctasks.argoproj.io must exist before apply." }, { "id": "workfloweventbindings.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workfloweventbindings.argoproj.io must exist before apply." }, { "id": "workflows.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflows.argoproj.io must exist before apply." }, { "id": "workflowtaskresults.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtaskresults.argoproj.io must exist before apply." }, { "id": "workflowtasksets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtasksets.argoproj.io must exist before apply." }, { "id": "workflowtemplates.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtemplates.argoproj.io must exist before apply." } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "full CRDs required before workflow-controller and server can start; hook uses server-side apply because full CRDs exceed client-side apply annotation limits", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "resolve the named prerequisite/blocker, then capture a live receipt", "direct full-CRD package route is proven; next prove controller-run ordering under Argo CD and Flux and test a cross-version CRD upgrade" ], "evidence": [ "data/hook-route-candidates/candidates.csv" ] } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "clusterworkflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml", "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "cronworkflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml", "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowartifactgctasks.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml", "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workfloweventbindings.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml", "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml", "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtaskresults.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml", "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtasksets.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml", "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml", "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/controller-default-reviewed-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/controller-default-reviewed-crds.yaml" } ] }, "requirementRefs": [ "clusterworkflowtemplates.argoproj.io", "cronworkflows.argoproj.io", "workflowartifactgctasks.argoproj.io", "workfloweventbindings.argoproj.io", "workflows.argoproj.io", "workflowtaskresults.argoproj.io", "workflowtasksets.argoproj.io", "workflowtemplates.argoproj.io" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "clusterworkflowtemplates.argoproj.io", "cronworkflows.argoproj.io", "workflowartifactgctasks.argoproj.io", "workfloweventbindings.argoproj.io", "workflows.argoproj.io", "workflowtaskresults.argoproj.io", "workflowtasksets.argoproj.io", "workflowtemplates.argoproj.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-controller-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-workflows-1-0-14-default", "labels": { "sourceType": "helm", "component": "argo-cd/argo-workflows", "sourceVersion": "1.0.14", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-workflows", "version": "1.0.14", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14@sha256:abbebaeccc07e0583c7ccc5ad0c9d315057e6b4c0a766bd72c167ee92d3f160f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4db204d97a2b43b18058363cf2420adb26684e775d4f6c1d98ab276ca2d3a141", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "677516f7d311ffdfcf7a4b424585cada43ba104af51ef7e283c575d8279c16bc", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "677516f7d311ffdfcf7a4b424585cada43ba104af51ef7e283c575d8279c16bc", "record": "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-workflows@1.0.14/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-workflows/1.0.14/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-workflows", "version=1.0.14", "base=default", "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values.yaml", "namespace=default", "releaseName=argo-workflows", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "clusterworkflowtemplates.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "clusterworkflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml", "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cronworkflows.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "cronworkflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml", "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workflowartifactgctasks.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowartifactgctasks.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml", "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workfloweventbindings.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workfloweventbindings.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml", "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workflows.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml", "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workflowtaskresults.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtaskresults.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml", "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workflowtasksets.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtasksets.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml", "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } }, { "name": "workflowtemplates.argoproj.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml", "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The controller and server require the Argo Workflows APIs. Helm normally downloads and applies the full CRDs in a hook before those workloads start." }, { "id": "clusterworkflowtemplates.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD clusterworkflowtemplates.argoproj.io must exist before apply." }, { "id": "cronworkflows.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD cronworkflows.argoproj.io must exist before apply." }, { "id": "workflowartifactgctasks.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowartifactgctasks.argoproj.io must exist before apply." }, { "id": "workfloweventbindings.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workfloweventbindings.argoproj.io must exist before apply." }, { "id": "workflows.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflows.argoproj.io must exist before apply." }, { "id": "workflowtaskresults.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtaskresults.argoproj.io must exist before apply." }, { "id": "workflowtasksets.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtasksets.argoproj.io must exist before apply." }, { "id": "workflowtemplates.argoproj.io", "origin": "base", "type": "target-fact", "detail": "CRD workflowtemplates.argoproj.io must exist before apply." } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The controller and server require the Argo Workflows APIs. Helm normally downloads and applies the full CRDs in a hook before those workloads start.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-route-candidates/argo-cd-argo-workflows.yaml", "data/hook-route-candidates/selected-routes/argo-cd-argo-workflows-default.yaml", "docs/demo/hooks-crds/argo-workflows.md", "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml", "recipes/argo-cd/argo-workflows/1.0.14/upstream/full-crds/argoproj.io_workflows.yaml", "recipes/argo-cd/argo-workflows/1.0.14/variants/default/variant.yaml", "runs/live-helm-confighub-compare/argo-cd-argo-workflows-default/receipt.yaml", "runs/live-kind-parity/argo-cd-argo-workflows-default/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "clusterworkflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_clusterworkflowtemplates.yaml", "sourceSHA256": "6451671e3cca063fdc31a242d1eeedbe07240667f3801c0ece62557f71405838", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_clusterworkflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "cronworkflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_cronworkflows.yaml", "sourceSHA256": "83d3bd6dff62fce97b6db5a7413b25de26bed9f25a3f223aa4b6bf7499290fc6", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_cronworkflows.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowartifactgctasks.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowartifactgctasks.yaml", "sourceSHA256": "9dd524792dfa35513afe0f754b02f76ac6e1b7488479fcd895fb08faeb8ddbd2", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowartifactgctasks.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workfloweventbindings.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workfloweventbindings.yaml", "sourceSHA256": "0941c8fda9cde30fd320313f8c0c2f1decf323f673e73bf679614af9e815093f", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workfloweventbindings.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflows.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflows.yaml", "sourceSHA256": "4dea37845b8ce92a2c255f5a72a92243674d6ba9c63637146ade88d4ef03484e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflows.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtaskresults.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtaskresults.yaml", "sourceSHA256": "86fb637b4268b3993f65f240d184604b3de77ecbf803662b9393ef116bfefe04", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtaskresults.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtasksets.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtasksets.yaml", "sourceSHA256": "b83e656ce12393c833c3c3356f59eb7500e96adb896c53ec0313a2a3ba8a3f8e", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtasksets.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "cubInstallerApply" ], "name": "workflowtemplates.argoproj.io", "sourcePath": "upstream/full-crds/argoproj.io_workflowtemplates.yaml", "sourceSHA256": "5aa32400ce3f1fca44c6cc6547a5f74173a9d29ec3fdb2b3da6d40f89a2ea152", "sourceURL": "https://raw.githubusercontent.com/argoproj/argo-helm/argo-workflows-1.0.14/charts/argo-workflows/files/crds/full/argoproj.io_workflowtemplates.yaml", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/argo-cd/argo-workflows/1.0.14/prerequisites/target-facts/default-crds.yaml" } ] }, "requirementRefs": [ "clusterworkflowtemplates.argoproj.io", "cronworkflows.argoproj.io", "workflowartifactgctasks.argoproj.io", "workfloweventbindings.argoproj.io", "workflows.argoproj.io", "workflowtaskresults.argoproj.io", "workflowtasksets.argoproj.io", "workflowtemplates.argoproj.io" ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "clusterworkflowtemplates.argoproj.io", "cronworkflows.argoproj.io", "workflowartifactgctasks.argoproj.io", "workfloweventbindings.argoproj.io", "workflows.argoproj.io", "workflowtaskresults.argoproj.io", "workflowtasksets.argoproj.io", "workflowtemplates.argoproj.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argo-workflows-1-0-14-minimal-crds", "labels": { "sourceType": "helm", "component": "argo-cd/argo-workflows", "sourceVersion": "1.0.14", "base": "minimal-crds" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argo-workflows", "version": "1.0.14", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argo-workflows:1.0.14@sha256:abbebaeccc07e0583c7ccc5ad0c9d315057e6b4c0a766bd72c167ee92d3f160f", "selection": { "name": "minimal-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml" } }, "baseVariant": { "name": "minimal-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "8c1919f7c1841fb4dbaf12f2d110c82e4426e8e766310cc850efe81d2fb2fd4b", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "8c1919f7c1841fb4dbaf12f2d110c82e4426e8e766310cc850efe81d2fb2fd4b", "record": "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argo-workflows@1.0.14/minimal-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argo-workflows/1.0.14/publication/flattening-safety-verdict-minimal-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/release-objects.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argo-workflows", "version=1.0.14", "base=minimal-crds", "valuesProfile=recipes/argo-cd/argo-workflows/1.0.14/effective-values-minimal-crds.yaml", "namespace=default", "releaseName=argo-workflows", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "self-contained-crd-base", "origin": "base", "type": "lifecycle-action", "detail": "Argo Workflows default full CRDs are installed through a Helm hook using server-side apply; this base chooses the self-contained minimal-CRD route instead." } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "self-contained-crd-base", "requirementRefs": [ "self-contained-crd-base" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "Argo Workflows default full CRDs are installed through a Helm hook using server-side apply; this base chooses the self-contained minimal-CRD route instead.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-route-candidates/argo-cd-argo-workflows.yaml", "data/hook-route-candidates/selected-routes/argo-cd-argo-workflows-minimal-crds.yaml", "recipes/argo-cd/argo-workflows/1.0.14/revisions/minimal-crds/r001/receipts/install-gate.yaml", "recipes/argo-cd/argo-workflows/1.0.14/variants/minimal-crds/variant.yaml", "runs/argo-workflows-minimal-crds-confighub-proof/latest/confighub-proof-receipt.yaml", "runs/live-helm-confighub-compare/argo-cd-argo-workflows-minimal-crds/receipt.yaml", "runs/live-kind-parity/argo-cd-argo-workflows-minimal-crds/receipt.yaml", "runs/next80-local-kind/argo-cd-argo-workflows-1.0.14-minimal-crds/observation-receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argo-workflows-1-0-14-minimal-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "argo-cd-argocd-image-updater-1-2-2-default", "labels": { "sourceType": "helm", "component": "argo-cd/argocd-image-updater", "sourceVersion": "1.2.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "argo-cd/argocd-image-updater", "version": "1.2.2", "record": "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/argo-cd-argocd-image-updater:1.2.2@sha256:525b479c83d1f34cb049de230d2925bb494437ca0a0aa20c782b29a6baa382fa", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "cd823b8187553cfc9b2d03ed00d844c54c0d910f1a1435b9ca3c6404a16db448", "digestRole": "helm-variant-revision", "digestRecord": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "0b3646b69dab9a21cad5cbc550a95ffb9ac4be833cc2d076b1fd12cbe4e4eaf2", "digestRole": "canonical-object-set", "digestRecord": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "0b3646b69dab9a21cad5cbc550a95ffb9ac4be833cc2d076b1fd12cbe4e4eaf2", "record": "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "argo-cd/argocd-image-updater@1.2.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/argo-cd/argocd-image-updater/1.2.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml", "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml", "recipes/argo-cd/argocd-image-updater/1.2.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=argo-cd/argocd-image-updater", "version=1.2.2", "base=default", "valuesProfile=recipes/argo-cd/argocd-image-updater/1.2.2/effective-values.yaml", "namespace=default", "releaseName=argocd-image-updater", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/argo-cd-argocd-image-updater-1-2-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed", "labels": { "sourceType": "helm", "component": "autoscaler/cluster-autoscaler", "sourceVersion": "9.57.0", "base": "controller-default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "autoscaler/cluster-autoscaler", "version": "9.57.0", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-cluster-autoscaler:9.57.0@sha256:5eb03d4a705cb819281555c6618a61a42e73cbbacebb0d0604d2c88dfc996fd8", "selection": { "name": "controller-default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" } }, "baseVariant": { "name": "controller-default-reviewed", "revision": "r001", "digest": "466d6f9b7670813ecf7a1f20d76b80916bb24abae24f9b768fbd8121f030d9f5", "digestRole": "helm-variant-revision", "digestRecord": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "b89d1d1b0acbcfc12528c4aa8b29451000eb5734e04818aeedabf713c958837a", "digestRole": "canonical-object-set", "digestRecord": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b89d1d1b0acbcfc12528c4aa8b29451000eb5734e04818aeedabf713c958837a", "record": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "autoscaler/cluster-autoscaler@9.57.0/controller-default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/autoscaler/cluster-autoscaler/9.57.0/publication/flattening-safety-verdict-controller-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=autoscaler/cluster-autoscaler", "version=9.57.0", "base=controller-default-reviewed", "valuesProfile=recipes/autoscaler/cluster-autoscaler/9.57.0/effective-values-controller-default-reviewed.yaml", "namespace=default", "releaseName=cluster-autoscaler", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "kind", "type": "requiredValues", "required": true, "details": { "path": "autoDiscovery.clusterName", "purpose": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered.", "value": "kind" } }, { "name": "us-east-1", "type": "requiredValues", "required": true, "details": { "path": "awsRegion", "purpose": "Supplies the AWS region value required by this chart's default cloud-provider path.", "value": "us-east-1" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "autoDiscovery.clusterName", "origin": "base", "type": "target-fact", "detail": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered." }, { "id": "awsRegion", "origin": "base", "type": "target-fact", "detail": "Supplies the AWS region value required by this chart's default cloud-provider path." } ], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredValues": [ { "path": "autoDiscovery.clusterName", "purpose": "Enables the chart's node-group autodiscovery path so the controller Deployment is rendered.", "value": "kind" }, { "path": "awsRegion", "purpose": "Supplies the AWS region value required by this chart's default cloud-provider path.", "value": "us-east-1" } ] }, "requirementRefs": [ "autoDiscovery.clusterName", "awsRegion" ], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "autoDiscovery.clusterName", "awsRegion" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-controller-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "autoscaler-cluster-autoscaler-9-57-0-default", "labels": { "sourceType": "helm", "component": "autoscaler/cluster-autoscaler", "sourceVersion": "9.57.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "autoscaler/cluster-autoscaler", "version": "9.57.0", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-cluster-autoscaler:9.57.0@sha256:5eb03d4a705cb819281555c6618a61a42e73cbbacebb0d0604d2c88dfc996fd8", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "005e78a190f1d4c7be268fe4e5fb9181fd0271b08e0f469962c478f7dfe6dcc0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "9e67f520b5c65ff34d72f8c85e4245c2d9d238b6da336112dfa272a060d69446", "digestRole": "canonical-object-set", "digestRecord": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9e67f520b5c65ff34d72f8c85e4245c2d9d238b6da336112dfa272a060d69446", "record": "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "autoscaler/cluster-autoscaler@9.57.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/autoscaler/cluster-autoscaler/9.57.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml", "recipes/autoscaler/cluster-autoscaler/9.57.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=autoscaler/cluster-autoscaler", "version=9.57.0", "base=default", "valuesProfile=recipes/autoscaler/cluster-autoscaler/9.57.0/effective-values.yaml", "namespace=default", "releaseName=cluster-autoscaler", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/autoscaler-cluster-autoscaler-9-57-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "watch", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "autoscaler-vertical-pod-autoscaler-0-9-0-default", "labels": { "sourceType": "helm", "component": "autoscaler/vertical-pod-autoscaler", "sourceVersion": "0.9.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "autoscaler/vertical-pod-autoscaler", "version": "0.9.0", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-vertical-pod-autoscaler:0.9.0@sha256:1ee72dbefe5df3af05372c9e565302b3dfbdd4f6e91e8f116b2b6042764267e7", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "18615de8df98ce553dea90bb4d7b5c5bd7b3ffbf9c9c51a7e85293d14b1ccf51", "digestRole": "helm-variant-revision", "digestRecord": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 39, "digest": "9d7307f629bdc478fa0c9bc6646359976b96d0cfd549bd66c13442facfa57490", "digestRole": "canonical-object-set", "digestRecord": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9d7307f629bdc478fa0c9bc6646359976b96d0cfd549bd66c13442facfa57490", "record": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "autoscaler/vertical-pod-autoscaler@0.9.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=autoscaler/vertical-pod-autoscaler", "version=0.9.0", "base=default", "valuesProfile=recipes/autoscaler/vertical-pod-autoscaler/0.9.0/effective-values.yaml", "namespace=default", "releaseName=vertical-pod-autoscaler", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "vpa-tls-certs", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-certs", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook", "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/vpa-tls-certs", "origin": "base", "type": "target-fact", "detail": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook" } ], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-certs", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook", "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller" } ] }, "requirementRefs": [ "default/vpa-tls-certs" ], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/vpa-tls-certs" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "autoscaler-vertical-pod-autoscaler-0-9-0-no-crds", "labels": { "sourceType": "helm", "component": "autoscaler/vertical-pod-autoscaler", "sourceVersion": "0.9.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "autoscaler/vertical-pod-autoscaler", "version": "0.9.0", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/autoscaler-vertical-pod-autoscaler:0.9.0@sha256:1ee72dbefe5df3af05372c9e565302b3dfbdd4f6e91e8f116b2b6042764267e7", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "874f8d5277136c7721ff190fc6993d2f3d4de6c990ca7828c5f5e3a08d48ccf6", "digestRole": "canonical-object-set", "digestRecord": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "874f8d5277136c7721ff190fc6993d2f3d4de6c990ca7828c5f5e3a08d48ccf6", "record": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "autoscaler/vertical-pod-autoscaler@0.9.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml", "recipes/autoscaler/vertical-pod-autoscaler/0.9.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=autoscaler/vertical-pod-autoscaler", "version=0.9.0", "base=no-crds", "valuesProfile=recipes/autoscaler/vertical-pod-autoscaler/0.9.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=vertical-pod-autoscaler", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "vpa-tls-certs", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-certs", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook", "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/vpa-tls-certs", "origin": "base", "type": "target-fact", "detail": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook" } ], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-certs", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the VPA admission controller; Helm normally creates this via the certgen hook", "suggestedSource": "Run the chart certgen lifecycle action or stage a valid vpa-tls-certs Secret before waiting for the admission controller" } ] }, "requirementRefs": [ "default/vpa-tls-certs" ], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/vpa-tls-certs" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/autoscaler-vertical-pod-autoscaler-0-9-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-ec2-chart-1-18-4-default", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/ec2-chart", "sourceVersion": "1.18.4", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/ec2-chart", "version": "1.18.4", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-ec2-chart:1.18.4@sha256:40806df17d8ff6732613c13d151c5eff9c1e9551389718a9f3d3dac68d9f3721", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "6f812bfefbd060e5c690ad00043def40c61af766f25f7b0e00f532edd76ab5c7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 32, "digest": "f554824764fd9d781aaea445b728b209a93a190ccd8865ccdf235139377fcc59", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f554824764fd9d781aaea445b728b209a93a190ccd8865ccdf235139377fcc59", "record": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/ec2-chart@1.18.4/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/publication/flattening-safety-verdict-default.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/ec2-chart", "version=1.18.4", "base=default", "valuesProfile=recipes/aws-controllers-k8s/ec2-chart/1.18.4/effective-values.yaml", "namespace=ack-system", "releaseName=ack-ec2", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-ec2-chart-1-18-4-eks-inference", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/ec2-chart", "sourceVersion": "1.18.4", "base": "eks-inference" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/ec2-chart", "version": "1.18.4", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-ec2-chart:1.18.4@sha256:40806df17d8ff6732613c13d151c5eff9c1e9551389718a9f3d3dac68d9f3721", "selection": { "name": "eks-inference", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" } }, "baseVariant": { "name": "eks-inference", "revision": "r001", "digest": "967f8521974a2d44bf267797b99bb6c0021c5eb0b76af1e3fdf308798f48f8cf", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/rendered/object-inventory.yaml", "objectCount": 32, "digest": "52eab19d8c3c6c160d3259bd15bc468fa31eb295238e0b428fda9e53b8514a7d", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "52eab19d8c3c6c160d3259bd15bc468fa31eb295238e0b428fda9e53b8514a7d", "record": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/ec2-chart@1.18.4/eks-inference; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/ec2-chart/1.18.4/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml", "recipes/aws-controllers-k8s/ec2-chart/1.18.4/revisions/eks-inference/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/ec2-chart", "version=1.18.4", "base=eks-inference", "valuesProfile=recipes/aws-controllers-k8s/ec2-chart/1.18.4/effective-values-eks-inference.yaml", "namespace=ack-system", "releaseName=ack-ec2", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "aws-creds", "type": "requiredSecrets", "required": true, "details": { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared-credentials file mounted read-only at /var/run/secrets/aws" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller; rendered as the ConfigHub sentinel so an unbound environment fails vet-placeholders instead of reaching a cluster", "source": "environment-platform-profile", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "ack-system/aws-creds", "origin": "base", "type": "target-fact", "detail": "AWS shared-credentials file mounted read-only at /var/run/secrets/aws" }, { "id": "aws.region", "origin": "base", "type": "target-fact", "detail": "AWS region for the controller; rendered as the ConfigHub sentinel so an unbound environment fails vet-placeholders instead of reaching a cluster" } ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared-credentials file mounted read-only at /var/run/secrets/aws" } ], "requiredValues": [ { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller; rendered as the ConfigHub sentinel so an unbound environment fails vet-placeholders instead of reaching a cluster", "source": "environment-platform-profile", "stage": "pre-render" } ] }, "requirementRefs": [ "ack-system/aws-creds", "aws.region" ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "ack-system/aws-creds", "aws.region" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-ec2-chart-1-18-4-eks-inference.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-eks-chart-1-16-3-default", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/eks-chart", "sourceVersion": "1.16.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/eks-chart", "version": "1.16.3", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-eks-chart:1.16.3@sha256:eb94b9abf66765bdab5f22a07d826f4ef60de76ce241e052d633fc9a512775a4", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "d5da8664d910f2bc6002cf7d3cac668092b46d2c87a223a95cc35719c4e21565", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 20, "digest": "3fe09ae2024abed56f4c85fa918c2950dc8fddc677cec46dc69b681cd43bc3a9", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3fe09ae2024abed56f4c85fa918c2950dc8fddc677cec46dc69b681cd43bc3a9", "record": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/eks-chart@1.16.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/eks-chart/1.16.3/publication/flattening-safety-verdict-default.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/eks-chart", "version=1.16.3", "base=default", "valuesProfile=recipes/aws-controllers-k8s/eks-chart/1.16.3/effective-values.yaml", "namespace=ack-system", "releaseName=ack-eks", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-eks-chart-1-16-3-eks-inference", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/eks-chart", "sourceVersion": "1.16.3", "base": "eks-inference" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/eks-chart", "version": "1.16.3", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-eks-chart:1.16.3@sha256:eb94b9abf66765bdab5f22a07d826f4ef60de76ce241e052d633fc9a512775a4", "selection": { "name": "eks-inference", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" } }, "baseVariant": { "name": "eks-inference", "revision": "r001", "digest": "47d680387e443f1ae21c72e02c14662247894d4c9eaec538048b3931032150ac", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/rendered/object-inventory.yaml", "objectCount": 20, "digest": "7fd0d6032acd22425401c38a877d2b949ec9c0e3e49da622c6d06c3fd2658e8e", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "7fd0d6032acd22425401c38a877d2b949ec9c0e3e49da622c6d06c3fd2658e8e", "record": "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/eks-chart@1.16.3/eks-inference; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/eks-chart/1.16.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml", "recipes/aws-controllers-k8s/eks-chart/1.16.3/revisions/eks-inference/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/eks-chart", "version=1.16.3", "base=eks-inference", "valuesProfile=recipes/aws-controllers-k8s/eks-chart/1.16.3/effective-values-eks-inference.yaml", "namespace=ack-system", "releaseName=ack-eks", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "aws-creds", "type": "requiredSecrets", "required": true, "details": { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared credentials file mounted read-only at /var/run/secrets/aws" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller's API calls; rendered as the confighubplaceholder sentinel and filled per target", "stage": "setup" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "ack-system/aws-creds", "origin": "base", "type": "target-fact", "detail": "AWS shared credentials file mounted read-only at /var/run/secrets/aws" }, { "id": "aws.region", "origin": "base", "type": "target-fact", "detail": "AWS region for the controller's API calls; rendered as the confighubplaceholder sentinel and filled per target" } ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared credentials file mounted read-only at /var/run/secrets/aws" } ], "requiredValues": [ { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller's API calls; rendered as the confighubplaceholder sentinel and filled per target", "stage": "setup" } ] }, "requirementRefs": [ "ack-system/aws-creds", "aws.region" ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "ack-system/aws-creds", "aws.region" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-eks-chart-1-16-3-eks-inference.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-iam-chart-1-7-3-default", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/iam-chart", "sourceVersion": "1.7.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/iam-chart", "version": "1.7.3", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-iam-chart:1.7.3@sha256:bc64855b8024441acf8626c2d586f19661b8750db07eb69064cec52220907aac", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "33a1f819209df27ff2f36644e598eca0e33a39bca619eb3d6b49857f1ba4cc1c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "350845a2ef277c599db5d4729da7c557505b39a6f6aec4be1e9d06dbb622243b", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "350845a2ef277c599db5d4729da7c557505b39a6f6aec4be1e9d06dbb622243b", "record": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/iam-chart@1.7.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/iam-chart/1.7.3/publication/flattening-safety-verdict-default.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/iam-chart", "version=1.7.3", "base=default", "valuesProfile=recipes/aws-controllers-k8s/iam-chart/1.7.3/effective-values.yaml", "namespace=ack-system", "releaseName=ack-iam", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-controllers-k8s-iam-chart-1-7-3-eks-inference", "labels": { "sourceType": "helm", "component": "aws-controllers-k8s/iam-chart", "sourceVersion": "1.7.3", "base": "eks-inference" } }, "spec": { "source": { "type": "helm", "name": "aws-controllers-k8s/iam-chart", "version": "1.7.3", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-controllers-k8s-iam-chart:1.7.3@sha256:bc64855b8024441acf8626c2d586f19661b8750db07eb69064cec52220907aac", "selection": { "name": "eks-inference", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" } }, "baseVariant": { "name": "eks-inference", "revision": "r001", "digest": "cfb019239b2a3c17d763b54da9071c8e84767d2c851356beaea43fbce2ecbd84", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "6f0442b679faf210cd45a2b44856acd2d96b675d5dc004f5b53f33677ec9c67d", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6f0442b679faf210cd45a2b44856acd2d96b675d5dc004f5b53f33677ec9c67d", "record": "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "aws-controllers-k8s/iam-chart@1.7.3/eks-inference; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-controllers-k8s/iam-chart/1.7.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml", "recipes/aws-controllers-k8s/iam-chart/1.7.3/revisions/eks-inference/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-controllers-k8s/iam-chart", "version=1.7.3", "base=eks-inference", "valuesProfile=recipes/aws-controllers-k8s/iam-chart/1.7.3/effective-values-eks-inference.yaml", "namespace=ack-system", "releaseName=ack-iam", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "aws-creds", "type": "requiredSecrets", "required": true, "details": { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared credentials file; the Deployment mounts the Secret volume read-only at /var/run/secrets/aws and AWS_SHARED_CREDENTIALS_FILE points at /var/run/secrets/aws/credentials" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller; deliberately the confighubplaceholder sentinel because the region belongs to the environment, not the chart", "source": "platform-profile", "stage": "pre-apply" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "ack-system/aws-creds", "origin": "base", "type": "target-fact", "detail": "AWS shared credentials file; the Deployment mounts the Secret volume read-only at /var/run/secrets/aws and AWS_SHARED_CREDENTIALS_FILE points at /var/run/secrets/aws/credentials" }, { "id": "aws.region", "origin": "base", "type": "target-fact", "detail": "AWS region for the controller; deliberately the confighubplaceholder sentinel because the region belongs to the environment, not the chart" } ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "credentials" ], "name": "aws-creds", "namespace": "ack-system", "purpose": "AWS shared credentials file; the Deployment mounts the Secret volume read-only at /var/run/secrets/aws and AWS_SHARED_CREDENTIALS_FILE points at /var/run/secrets/aws/credentials" } ], "requiredValues": [ { "installerInput": "awsRegion", "path": "aws.region", "purpose": "AWS region for the controller; deliberately the confighubplaceholder sentinel because the region belongs to the environment, not the chart", "source": "platform-profile", "stage": "pre-apply" } ] }, "requirementRefs": [ "ack-system/aws-creds", "aws.region" ], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "ack-system/aws-creds", "aws.region" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-controllers-k8s-iam-chart-1-7-3-eks-inference.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default", "labels": { "sourceType": "helm", "component": "aws-ebs-csi-driver/aws-ebs-csi-driver", "sourceVersion": "2.60.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "aws-ebs-csi-driver/aws-ebs-csi-driver", "version": "2.60.1", "record": "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/aws-ebs-csi-driver-aws-ebs-csi-driver:2.60.1@sha256:aa07d92ad91345ba7401a70b82dfdf9d2c9ca22ade4de23db3b370c77a3b88a0", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b554221fc3102a2c5716a231ba66d1079f892cffcbfe10ef8bfd14d11073bfd1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "ae9f0b30339870e7bab818ea4eb299e5393416b5efd5053dd5800017373bb3a7", "digestRole": "canonical-object-set", "digestRecord": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ae9f0b30339870e7bab818ea4eb299e5393416b5efd5053dd5800017373bb3a7", "record": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml", "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml", "recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=aws-ebs-csi-driver/aws-ebs-csi-driver", "version=2.60.1", "base=default", "valuesProfile=recipes/aws-ebs-csi-driver/aws-ebs-csi-driver/2.60.1/effective-values.yaml", "namespace=default", "releaseName=aws-ebs-csi-driver", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/aws-ebs-csi-driver-aws-ebs-csi-driver-2-60-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-apache-11-4-29-default", "labels": { "sourceType": "helm", "component": "bitnami/apache", "sourceVersion": "11.4.29", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/apache", "version": "11.4.29", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-apache:11.4.29@sha256:077fe56b8b4cc5eb310e9aaa48c5a33ce34c10d8ec54801840e3b965d1bb3f59", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "23eadb0e0776f75f2fc35b47dec09cf6aa977f525a336ffc186940ec433890e8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/apache/11.4.29/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "0b37f6d8ae27b5b341860619b89aa3d78e02d7bd01a2271fab216d4e65be047c", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/apache/11.4.29/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "0b37f6d8ae27b5b341860619b89aa3d78e02d7bd01a2271fab216d4e65be047c", "record": "recipes/bitnami/apache/11.4.29/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/apache@11.4.29/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/apache/11.4.29/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml", "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/apache/11.4.29/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml", "recipes/bitnami/apache/11.4.29/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/apache", "version=11.4.29", "base=default", "valuesProfile=recipes/bitnami/apache/11.4.29/effective-values.yaml", "namespace=default", "releaseName=apache", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-apache-11-4-29-legacy", "labels": { "sourceType": "helm", "component": "bitnami/apache", "sourceVersion": "11.4.29", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/apache", "version": "11.4.29", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-apache:11.4.29@sha256:077fe56b8b4cc5eb310e9aaa48c5a33ce34c10d8ec54801840e3b965d1bb3f59", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "1d068da0bd7af6230de4a414eb9abc70a895f63cfd7d79f5591d6951ece06399", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "1d068da0bd7af6230de4a414eb9abc70a895f63cfd7d79f5591d6951ece06399", "record": "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/apache@11.4.29/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/apache/11.4.29/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml", "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml", "recipes/bitnami/apache/11.4.29/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/apache", "version=11.4.29", "base=legacy", "valuesProfile=recipes/bitnami/apache/11.4.29/effective-values.yaml", "namespace=default", "releaseName=apache", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-apache-11-4-29-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-contour-21-1-4-default", "labels": { "sourceType": "helm", "component": "bitnami/contour", "sourceVersion": "21.1.4", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/contour", "version": "21.1.4", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4@sha256:3afcba580f100c30273c3cc718ce0fe51aa1c0dd351a94cdb449a080be89ba2e", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "5ce1cb8433b22f562e69e090ce4733a2e32c78c54675f8113a4c789bdca2436f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 20, "digest": "f28ab1558939812f833981bce56dfdbd7030428a4bcdd816b0eedb1bd13ffd53", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f28ab1558939812f833981bce56dfdbd7030428a4bcdd816b0eedb1bd13ffd53", "record": "recipes/bitnami/contour/21.1.4/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/contour@21.1.4/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/contour/21.1.4/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml", "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/contour/21.1.4/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml", "recipes/bitnami/contour/21.1.4/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/contour", "version=21.1.4", "base=default", "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values.yaml", "namespace=default", "releaseName=contour", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "contourcert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } }, { "name": "envoycert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/contourcert", "origin": "base", "type": "target-fact", "detail": "Contour serving certificate created by the chart's pre-install certgen hook" }, { "id": "default/envoycert", "origin": "base", "type": "target-fact", "detail": "Envoy client certificate created by the chart's pre-install certgen hook" } ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" }, { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } ] }, "requirementRefs": [ "default/contourcert", "default/envoycert" ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/contourcert", "default/envoycert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-contour-21-1-4-legacy", "labels": { "sourceType": "helm", "component": "bitnami/contour", "sourceVersion": "21.1.4", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/contour", "version": "21.1.4", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4@sha256:3afcba580f100c30273c3cc718ce0fe51aa1c0dd351a94cdb449a080be89ba2e", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 20, "digest": "d7df93e9094b4f918f3f97621beb90909c2d8f5a64ab8dc51b8f8dce0c934123", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d7df93e9094b4f918f3f97621beb90909c2d8f5a64ab8dc51b8f8dce0c934123", "record": "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/contour@21.1.4/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/contour/21.1.4/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "recipes/bitnami/contour/21.1.4/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/contour", "version=21.1.4", "base=legacy", "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values-legacy.yaml", "namespace=default", "releaseName=contour", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "contourcert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } }, { "name": "envoycert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "Contour and Envoy cannot start until contourcert and envoycert exist; Helm normally creates them with a hook that is absent from the ordinary rendered YAML." }, { "id": "default/contourcert", "origin": "base", "type": "target-fact", "detail": "Contour serving certificate created by the chart's pre-install certgen hook" }, { "id": "default/envoycert", "origin": "base", "type": "target-fact", "detail": "Envoy client certificate created by the chart's pre-install certgen hook" } ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "Contour and Envoy cannot start until contourcert and envoycert exist; Helm normally creates them with a hook that is absent from the ordinary rendered YAML.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-route-candidates/selected-routes/bitnami-contour-legacy.yaml", "packages/bitnami/contour/21.1.4/prerequisites/contour-certgen/run.sh", "recipes/bitnami/contour/21.1.4/lifecycle-route.yaml", "recipes/bitnami/contour/21.1.4/variants/legacy/variant.yaml", "runs/live-helm-confighub-compare/bitnami-contour-legacy/receipt.yaml", "runs/live-kind-parity/bitnami-contour-legacy/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" }, { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } ] }, "requirementRefs": [ "default/contourcert", "default/envoycert" ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/contourcert", "default/envoycert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "yes", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-contour-21-1-4-no-crds", "labels": { "sourceType": "helm", "component": "bitnami/contour", "sourceVersion": "21.1.4", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "bitnami/contour", "version": "21.1.4", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-contour:21.1.4@sha256:3afcba580f100c30273c3cc718ce0fe51aa1c0dd351a94cdb449a080be89ba2e", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "c481362a773024134946dc9307db4819ae2ccdd46b8d71e658595b11bb42622f", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c481362a773024134946dc9307db4819ae2ccdd46b8d71e658595b11bb42622f", "record": "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/contour@21.1.4/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/contour/21.1.4/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml", "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml", "recipes/bitnami/contour/21.1.4/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/contour", "version=21.1.4", "base=no-crds", "valuesProfile=recipes/bitnami/contour/21.1.4/effective-values-no-crds.yaml", "namespace=default", "releaseName=contour", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "contourcert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } }, { "name": "envoycert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/contourcert", "origin": "base", "type": "target-fact", "detail": "Contour serving certificate created by the chart's pre-install certgen hook" }, { "id": "default/envoycert", "origin": "base", "type": "target-fact", "detail": "Envoy client certificate created by the chart's pre-install certgen hook" } ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "contourcert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Contour serving certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" }, { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "ca.crt", "tls.crt", "tls.key" ], "name": "envoycert", "namespace": "default", "provisioningMode": "lifecycle-action", "purpose": "Envoy client certificate created by the chart's pre-install certgen hook", "suggestedSource": "package://prerequisites/contour-certgen/run.sh" } ] }, "requirementRefs": [ "default/contourcert", "default/envoycert" ], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/contourcert", "default/envoycert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-contour-21-1-4-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-elasticsearch-22-1-6-default", "labels": { "sourceType": "helm", "component": "bitnami/elasticsearch", "sourceVersion": "22.1.6", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/elasticsearch", "version": "22.1.6", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6@sha256:8732b35275c000b5df0e1a57907a46ffa6c15c3ecbc081cdbc12e12d321e3719", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "8d292151f332f34736127c59e38079e1664338994e1659100a11da7e2e6bc2d6", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 21, "digest": "2dea059172595f3477271eadd1aea69c4274d15a8029a55afb176cb5ffd66217", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2dea059172595f3477271eadd1aea69c4274d15a8029a55afb176cb5ffd66217", "record": "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/elasticsearch@22.1.6/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/elasticsearch/22.1.6/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/elasticsearch", "version=22.1.6", "base=default", "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values.yaml", "namespace=default", "releaseName=elasticsearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-elasticsearch-22-1-6-ha", "labels": { "sourceType": "helm", "component": "bitnami/elasticsearch", "sourceVersion": "22.1.6", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "bitnami/elasticsearch", "version": "22.1.6", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6@sha256:8732b35275c000b5df0e1a57907a46ffa6c15c3ecbc081cdbc12e12d321e3719", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "9ae3685e24863d4a3e6b8af8a7c2613d6123c927f9518be12d68370e2d0c3db4", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9ae3685e24863d4a3e6b8af8a7c2613d6123c927f9518be12d68370e2d0c3db4", "record": "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/elasticsearch@22.1.6/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/elasticsearch/22.1.6/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/release-objects.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/elasticsearch", "version=22.1.6", "base=ha", "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values-ha.yaml", "namespace=default", "releaseName=elasticsearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-elasticsearch-22-1-6-legacy", "labels": { "sourceType": "helm", "component": "bitnami/elasticsearch", "sourceVersion": "22.1.6", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/elasticsearch", "version": "22.1.6", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-elasticsearch:22.1.6@sha256:8732b35275c000b5df0e1a57907a46ffa6c15c3ecbc081cdbc12e12d321e3719", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 21, "digest": "84bdbaf1a905f282a240ad1a5d355a257dd11617d4921411b1a7397738923e60", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "84bdbaf1a905f282a240ad1a5d355a257dd11617d4921411b1a7397738923e60", "record": "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/elasticsearch@22.1.6/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/elasticsearch/22.1.6/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml", "recipes/bitnami/elasticsearch/22.1.6/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/elasticsearch", "version=22.1.6", "base=legacy", "valuesProfile=recipes/bitnami/elasticsearch/22.1.6/effective-values.yaml", "namespace=default", "releaseName=elasticsearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-elasticsearch-22-1-6-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-memcached-8-5-5-default", "labels": { "sourceType": "helm", "component": "bitnami/memcached", "sourceVersion": "8.5.5", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/memcached", "version": "8.5.5", "record": "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-memcached:8.5.5@sha256:52e3841ddc88cb3b0577c50d7f87bb8b6727c3193d5da524472732df205476b4", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "f2585d5ddb8397b359357847a9d806e940d5e58d33fbc4f6888162dac7969926", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "8cd477e08d9fdd2d56df7832f901d773af4f4313a405330180d7068cd7751558", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "8cd477e08d9fdd2d56df7832f901d773af4f4313a405330180d7068cd7751558", "record": "recipes/bitnami/memcached/8.5.5/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/memcached@8.5.5/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/memcached/8.5.5/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml", "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/memcached/8.5.5/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml", "recipes/bitnami/memcached/8.5.5/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/memcached", "version=8.5.5", "base=default", "valuesProfile=recipes/bitnami/memcached/8.5.5/effective-values.yaml", "namespace=default", "releaseName=memcached", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-memcached-8-5-5-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-0-7-existing-secret-replicaset", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.0.7", "base": "existing-secret-replicaset" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.0.7", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.7@sha256:1cf506fe86a28ec2fe06badacd29ee69e35747d2a228f040af432ea3c6f65c35", "selection": { "name": "existing-secret-replicaset", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" } }, "baseVariant": { "name": "existing-secret-replicaset", "revision": "r001", "digest": "e6bb1a9cd5f8cd648c1de31cf90274158f56b1d10d4c1c737f41a0009b50b58f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "3723a87004e25f813534be469bf648b6d6b80357fb01e47e465f775dcaec9231", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3723a87004e25f813534be469bf648b6d6b80357fb01e47e465f775dcaec9231", "record": "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.0.7/existing-secret-replicaset; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.0.7/publication/flattening-safety-verdict-existing-secret-replicaset.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/existing-secret-replicaset/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.0.7", "base=existing-secret-replicaset", "valuesProfile=recipes/bitnami/mongodb/19.0.7/effective-values-existing-secret-replicaset.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "mongodb-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and MongoDB-valid replica-set key" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "mongodb/mongodb-auth", "origin": "base", "type": "target-fact", "detail": "MongoDB root password and MongoDB-valid replica-set key" } ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and MongoDB-valid replica-set key" } ] }, "requirementRefs": [ "mongodb/mongodb-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "mongodb/mongodb-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-existing-secret-replicaset.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-0-7-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.0.7", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.0.7", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.7@sha256:1cf506fe86a28ec2fe06badacd29ee69e35747d2a228f040af432ea3c6f65c35", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "798291fc78d5966edd0c76e416d1aa5f2d402dfc043d20cdba9ca1e5c75d0df8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "ce99d9a7867d5cb7ea0f0f983d092600ec1bb24ce50e969d1032bdbf937e8fdf", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ce99d9a7867d5cb7ea0f0f983d092600ec1bb24ce50e969d1032bdbf937e8fdf", "record": "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.0.7/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.0.7/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml", "recipes/bitnami/mongodb/19.0.7/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.0.7", "base=static-passwords", "valuesProfile=recipes/bitnami/mongodb/19.0.7/effective-values.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-7-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-0-9-existing-secret-replicaset", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.0.9", "base": "existing-secret-replicaset" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.0.9", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.9@sha256:37930a411e8fbd975677a68a10a1790bacfbd20d4661848d4cbbec3d728061a1", "selection": { "name": "existing-secret-replicaset", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" } }, "baseVariant": { "name": "existing-secret-replicaset", "revision": "r001", "digest": "d83a388eb3ad8f4f9b6e630a60ae0ea2eda0fb83b3e693cb898f1153d0a15f80", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "ba28659f7a827714941ba587c403de0e7afec7bf77a35512ff751bf6c2fdd3a2", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ba28659f7a827714941ba587c403de0e7afec7bf77a35512ff751bf6c2fdd3a2", "record": "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.0.9/existing-secret-replicaset; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.0.9/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/existing-secret-replicaset/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.0.9", "base=existing-secret-replicaset", "valuesProfile=recipes/bitnami/mongodb/19.0.9/effective-values-existing-secret-replicaset.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "mongodb-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and replica-set key" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "mongodb/mongodb-auth", "origin": "base", "type": "target-fact", "detail": "MongoDB root password and replica-set key" } ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and replica-set key" } ] }, "requirementRefs": [ "mongodb/mongodb-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "mongodb/mongodb-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-existing-secret-replicaset.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-0-9-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.0.9", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.0.9", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.0.9@sha256:37930a411e8fbd975677a68a10a1790bacfbd20d4661848d4cbbec3d728061a1", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "57c0003edfc0c19a66af53c438ac0200e3bb12174bd1068a4b455edc17a4c949", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "4c5f0cd0bc6bffd0ff46b15cdb23ce44dba155120b6be46952d7da70ade25a68", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4c5f0cd0bc6bffd0ff46b15cdb23ce44dba155120b6be46952d7da70ade25a68", "record": "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.0.9/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.0.9/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml", "recipes/bitnami/mongodb/19.0.9/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.0.9", "base=static-passwords", "valuesProfile=recipes/bitnami/mongodb/19.0.9/effective-values.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-0-9-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-1-0-existing-secret-replicaset", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.1.0", "base": "existing-secret-replicaset" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.1.0", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.1.0@sha256:1804b3a7dbfcdb7879564e9961eddc7c5e15e6020358332f20be9927ea7f8406", "selection": { "name": "existing-secret-replicaset", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" } }, "baseVariant": { "name": "existing-secret-replicaset", "revision": "r001", "digest": "936f588e879134f4b3c370c6f02f64e45fe9cfdc521b8e63bb4b3a6dec7b3249", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "b39a69abcab4c663d77a1176895385b5c864766a5ac19b16953d3cfd4597adcd", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b39a69abcab4c663d77a1176895385b5c864766a5ac19b16953d3cfd4597adcd", "record": "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.1.0/existing-secret-replicaset; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.1.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/existing-secret-replicaset/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.1.0", "base=existing-secret-replicaset", "valuesProfile=recipes/bitnami/mongodb/19.1.0/effective-values-existing-secret-replicaset.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "mongodb-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and MongoDB-valid replica-set key" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "mongodb/mongodb-auth", "origin": "base", "type": "target-fact", "detail": "MongoDB root password and MongoDB-valid replica-set key" } ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "mongodb-root-password", "mongodb-replica-set-key" ], "name": "mongodb-auth", "namespace": "mongodb", "purpose": "MongoDB root password and MongoDB-valid replica-set key" } ] }, "requirementRefs": [ "mongodb/mongodb-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "mongodb/mongodb-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-existing-secret-replicaset.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mongodb-19-1-0-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/mongodb", "sourceVersion": "19.1.0", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mongodb", "version": "19.1.0", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mongodb:19.1.0@sha256:1804b3a7dbfcdb7879564e9961eddc7c5e15e6020358332f20be9927ea7f8406", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "2405209a62223da30dd1d14f97ac5e7c94d8c29ea28068d28c72fc3970f11158", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "2753c6bfaf61d7e60135c7a52e1e05bd4fde979c5796b4e2b54ffa2cb64c6911", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2753c6bfaf61d7e60135c7a52e1e05bd4fde979c5796b4e2b54ffa2cb64c6911", "record": "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mongodb@19.1.0/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mongodb/19.1.0/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml", "recipes/bitnami/mongodb/19.1.0/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mongodb", "version=19.1.0", "base=static-passwords", "valuesProfile=recipes/bitnami/mongodb/19.1.0/effective-values.yaml", "namespace=mongodb", "releaseName=mongodb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mongodb-19-1-0-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mysql-14-0-3-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/mysql", "sourceVersion": "14.0.3", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mysql", "version": "14.0.3", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mysql:14.0.3@sha256:d6f28a53019fe3768773ec9e58210ed5ba160f3338cb9ae746343cf47dc1c884", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "35f764d5ca1dea324b3bd8fea49b4d5eab5054b85f10216d3ee846252853e242", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "024c04f020fbe5cc7af518d743a68e055f999e88a6633b278adccc769c1b7fa8", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "024c04f020fbe5cc7af518d743a68e055f999e88a6633b278adccc769c1b7fa8", "record": "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mysql@14.0.3/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mysql/14.0.3/publication/flattening-safety-verdict-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml", "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml", "recipes/bitnami/mysql/14.0.3/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mysql", "version=14.0.3", "base=existing-secret", "valuesProfile=recipes/bitnami/mysql/14.0.3/effective-values-existing-secret.yaml", "namespace=mysql", "releaseName=mysql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "mysql-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "mysql-root-password", "mysql-password", "mysql-replication-password" ], "name": "mysql-auth", "namespace": "mysql", "purpose": "MySQL root, user, and replication passwords" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "mysql/mysql-auth", "origin": "base", "type": "target-fact", "detail": "MySQL root, user, and replication passwords" } ], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "mysql-root-password", "mysql-password", "mysql-replication-password" ], "name": "mysql-auth", "namespace": "mysql", "purpose": "MySQL root, user, and replication passwords" } ] }, "requirementRefs": [ "mysql/mysql-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "mysql/mysql-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-mysql-14-0-3-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/mysql", "sourceVersion": "14.0.3", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/mysql", "version": "14.0.3", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-mysql:14.0.3@sha256:d6f28a53019fe3768773ec9e58210ed5ba160f3338cb9ae746343cf47dc1c884", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "f5255e2acc903498bb91e3aad431849f888374c43a13050676b83b3ab7fe02a1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "04e856bfa75859dc9d8e45c61d49ad566494a7f66c257da9113ad26ca1696380", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "04e856bfa75859dc9d8e45c61d49ad566494a7f66c257da9113ad26ca1696380", "record": "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/mysql@14.0.3/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/mysql/14.0.3/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml", "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml", "recipes/bitnami/mysql/14.0.3/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/mysql", "version=14.0.3", "base=static-passwords", "valuesProfile=recipes/bitnami/mysql/14.0.3/effective-values.yaml", "namespace=mysql", "releaseName=mysql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-mysql-14-0-3-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-24-0-2-existing-tls-ingress", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "24.0.2", "base": "existing-tls-ingress" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "24.0.2", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2@sha256:7cf08c0348a32d577ffa0e16069ec6c2510ce773b372008d25b938f9546c5f67", "selection": { "name": "existing-tls-ingress", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" } }, "baseVariant": { "name": "existing-tls-ingress", "revision": "r001", "digest": "60945c95552a4d059faecdec34a1774858e6170d55e7d2261f9b502fa4868731", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "cb5cdb64d2f05a0f3e2b2d07facc3d08705f86b3a34a3f52c891bdbd28d44e8f", "record": "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@24.0.2/existing-tls-ingress; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/24.0.2/publication/flattening-safety-verdict-existing-tls-ingress.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml", "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml", "recipes/bitnami/nginx/24.0.2/revisions/existing-tls-ingress/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=24.0.2", "base=existing-tls-ingress", "valuesProfile=recipes/bitnami/nginx/24.0.2/effective-values-existing-tls-ingress.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "nginx-backend-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" } }, { "name": "nginx-ingress-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "nginx/nginx-backend-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material mounted by the NGINX pod" }, { "id": "nginx/nginx-ingress-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material referenced by the Ingress" } ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" }, { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } ] }, "requirementRefs": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-existing-tls-ingress.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-24-0-2-http-clusterip", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "24.0.2", "base": "http-clusterip" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "24.0.2", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2@sha256:7cf08c0348a32d577ffa0e16069ec6c2510ce773b372008d25b938f9546c5f67", "selection": { "name": "http-clusterip", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" } }, "baseVariant": { "name": "http-clusterip", "revision": "r001", "digest": "1eefe2d05ce603981d16cf976aa38b0497de756c716dc5be6825ff6b6ba4c37d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba", "record": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@24.0.2/http-clusterip; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/24.0.2/publication/flattening-safety-verdict-http-clusterip.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "A recorded delivery path reached its checked live result for this exact configuration.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "completed", "resultState": "pass", "records": [ "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml" ], "nextAction": "Read the receipt for the target, checks, limits, and observation time before relying on the result." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=24.0.2", "base=http-clusterip", "valuesProfile=recipes/bitnami/nginx/24.0.2/effective-values.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-separately-published", "note": "The selected installer base was uploaded directly as exact ConfigHub Units. This proof did not publish a separate literal-configuration OCI before ConfigHub." }, "configHubReleaseOci": { "status": "pass", "observedReference": "oci://oci.hub.confighub.com:443/space/hx-catalog-oci-20260726-wr7-nginx:latest", "digest": "sha256:26d97438d5b52dcacf140d2ef4c57a97bacd0c63e22d5cfa19076a0723b73049", "receipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml", "retained": "no", "note": "ConfigHub published the reviewed Units once; all three recorded consumers used this digest, then the test removed its temporary Space." }, "argoCd": "pass", "flux": "pass", "direct": "pass", "historicalGitopsOciStatus": "yes", "receipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "changeCadence": "application-release", "ownerClass": "application-team", "resourceClass": "user-workload", "classificationSource": "config-catalog/operational-class-examples.yaml", "classificationReason": "One application team owns this release and can change it often without changing shared cluster services.", "liveSpace": "bitnami-nginx-24-0-2-http-clusterip", "target": { "ownerClass": "application-team", "scope": "application-namespace", "selection": "Start in a development namespace, promote to staging, then release to the selected production clusters." }, "gates": { "normalSet": "baseline", "productionSet": "approvalRequired" }, "rollout": { "limit": "The receipt covers two staging clusters; it is not a large production rollout.", "method": "environment-promotion-then-fleet", "sequence": [ "development", "staging", "production targets" ], "status": "observed" } } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "The base was uploaded to a temporary ConfigHub Space, published as a Space release OCI, delivered three ways, and then cleaned up.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-24-0-4-existing-tls-ingress", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "24.0.4", "base": "existing-tls-ingress" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "24.0.4", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.4@sha256:ec8972b525425bdcd5f2ecdff2a6e6e23ddd219d2736a2cff0b5bacdb54a498b", "selection": { "name": "existing-tls-ingress", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" } }, "baseVariant": { "name": "existing-tls-ingress", "revision": "r001", "digest": "0d48591ebe834d65713a6fd9a4377ab6c583148cd4ee41fe938d76d9809c4413", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "35c8f535452c33518088a067f035d6249750b0a67245138feaf84d728c94588f", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "35c8f535452c33518088a067f035d6249750b0a67245138feaf84d728c94588f", "record": "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@24.0.4/existing-tls-ingress; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/24.0.4/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml", "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml", "recipes/bitnami/nginx/24.0.4/revisions/existing-tls-ingress/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=24.0.4", "base=existing-tls-ingress", "valuesProfile=recipes/bitnami/nginx/24.0.4/effective-values-existing-tls-ingress.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "nginx-backend-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" } }, { "name": "nginx-ingress-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "nginx/nginx-backend-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material mounted by the NGINX pod" }, { "id": "nginx/nginx-ingress-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material referenced by the Ingress" } ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" }, { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } ] }, "requirementRefs": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-existing-tls-ingress.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-24-0-4-http-clusterip", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "24.0.4", "base": "http-clusterip" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "24.0.4", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.4@sha256:ec8972b525425bdcd5f2ecdff2a6e6e23ddd219d2736a2cff0b5bacdb54a498b", "selection": { "name": "http-clusterip", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" } }, "baseVariant": { "name": "http-clusterip", "revision": "r001", "digest": "ceed118795a568537e296fc27e12feb418db550e4a2cb9d40b8625bf15afa334", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "5c175126acf3b7abd9fce0c17791cfce7236eac8f51e9781d20814cad14b0bac", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5c175126acf3b7abd9fce0c17791cfce7236eac8f51e9781d20814cad14b0bac", "record": "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@24.0.4/http-clusterip; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/24.0.4/publication/flattening-safety-verdict-http-clusterip.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml", "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml", "recipes/bitnami/nginx/24.0.4/revisions/http-clusterip/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=24.0.4", "base=http-clusterip", "valuesProfile=recipes/bitnami/nginx/24.0.4/effective-values.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-4-http-clusterip.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-25-0-0-existing-tls-ingress", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "25.0.0", "base": "existing-tls-ingress" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "25.0.0", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:25.0.0@sha256:69f2ad1adc8f92a5453bebb34bd5bfec6673d944447114879efb52a12d11fb70", "selection": { "name": "existing-tls-ingress", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" } }, "baseVariant": { "name": "existing-tls-ingress", "revision": "r001", "digest": "ac4859da3bb9a60ddea171887d45ca7ae7f558984df466dc2878ea4f8600a968", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "6cbd96e9b63ddeab378f378b86e1b7821d850144539d1a6e367eb639f2b2166e", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6cbd96e9b63ddeab378f378b86e1b7821d850144539d1a6e367eb639f2b2166e", "record": "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@25.0.0/existing-tls-ingress; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/25.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml", "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml", "recipes/bitnami/nginx/25.0.0/revisions/existing-tls-ingress/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=25.0.0", "base=existing-tls-ingress", "valuesProfile=recipes/bitnami/nginx/25.0.0/effective-values-existing-tls-ingress.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "nginx-backend-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" } }, { "name": "nginx-ingress-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "nginx/nginx-backend-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material mounted by the NGINX pod" }, { "id": "nginx/nginx-ingress-tls", "origin": "base", "type": "target-fact", "detail": "TLS certificate material referenced by the Ingress" } ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt", "tls.key", "ca.crt" ], "name": "nginx-backend-tls", "namespace": "nginx", "purpose": "TLS certificate material mounted by the NGINX pod" }, { "keys": [ "tls.crt", "tls.key" ], "name": "nginx-ingress-tls", "namespace": "nginx", "purpose": "TLS certificate material referenced by the Ingress" } ] }, "requirementRefs": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "nginx/nginx-backend-tls", "nginx/nginx-ingress-tls" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-existing-tls-ingress.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-nginx-25-0-0-http-clusterip", "labels": { "sourceType": "helm", "component": "bitnami/nginx", "sourceVersion": "25.0.0", "base": "http-clusterip" } }, "spec": { "source": { "type": "helm", "name": "bitnami/nginx", "version": "25.0.0", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:25.0.0@sha256:69f2ad1adc8f92a5453bebb34bd5bfec6673d944447114879efb52a12d11fb70", "selection": { "name": "http-clusterip", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" } }, "baseVariant": { "name": "http-clusterip", "revision": "r001", "digest": "72232e89bbc0549f2cf30b10b8f4a4ebce574f734fb775830f370e5a4fbab53c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "2e71065dc018fb37304a978d3bb6381f0628ac5ef4e0695b53fafe3680697780", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2e71065dc018fb37304a978d3bb6381f0628ac5ef4e0695b53fafe3680697780", "record": "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/nginx@25.0.0/http-clusterip; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/nginx/25.0.0/publication/flattening-safety-verdict-http-clusterip.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml", "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml", "recipes/bitnami/nginx/25.0.0/revisions/http-clusterip/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/nginx", "version=25.0.0", "base=http-clusterip", "valuesProfile=recipes/bitnami/nginx/25.0.0/effective-values.yaml", "namespace=nginx", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-25-0-0-http-clusterip.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-opensearch-2-0-10-default", "labels": { "sourceType": "helm", "component": "bitnami/opensearch", "sourceVersion": "2.0.10", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/opensearch", "version": "2.0.10", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10@sha256:3334c0f8f9ec8db8de4c35b946912dfd9a0822e8b640b62f60da6b8714be79d0", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "81e76ee6be2aacefd19db127bff401f895a0d83d4a6f88133339a19a4acb66fd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "99c0b24ee1850d1f5a4da323e9924a8a1f9d93a34a97a985d92c954836747afd", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "99c0b24ee1850d1f5a4da323e9924a8a1f9d93a34a97a985d92c954836747afd", "record": "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/opensearch@2.0.10/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/opensearch/2.0.10/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/opensearch", "version=2.0.10", "base=default", "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values.yaml", "namespace=default", "releaseName=opensearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-opensearch-2-0-10-ha", "labels": { "sourceType": "helm", "component": "bitnami/opensearch", "sourceVersion": "2.0.10", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "bitnami/opensearch", "version": "2.0.10", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10@sha256:3334c0f8f9ec8db8de4c35b946912dfd9a0822e8b640b62f60da6b8714be79d0", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "c419606d1875905b2e84126b7b1d5d33c18f7cf34c0dd8048ba6e9221db36564", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c419606d1875905b2e84126b7b1d5d33c18f7cf34c0dd8048ba6e9221db36564", "record": "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/opensearch@2.0.10/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/opensearch/2.0.10/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/release-objects.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/opensearch", "version=2.0.10", "base=ha", "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values-ha.yaml", "namespace=default", "releaseName=opensearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-opensearch-2-0-10-legacy", "labels": { "sourceType": "helm", "component": "bitnami/opensearch", "sourceVersion": "2.0.10", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/opensearch", "version": "2.0.10", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-opensearch:2.0.10@sha256:3334c0f8f9ec8db8de4c35b946912dfd9a0822e8b640b62f60da6b8714be79d0", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "ae93532b5f5b71b51e19b840c9195d903674e3edb9138823f46d73daf97afccc", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ae93532b5f5b71b51e19b840c9195d903674e3edb9138823f46d73daf97afccc", "record": "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/opensearch@2.0.10/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/opensearch/2.0.10/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml", "recipes/bitnami/opensearch/2.0.10/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/opensearch", "version=2.0.10", "base=legacy", "valuesProfile=recipes/bitnami/opensearch/2.0.10/effective-values.yaml", "namespace=default", "releaseName=opensearch", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-opensearch-2-0-10-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-phpmyadmin-20-0-0-default", "labels": { "sourceType": "helm", "component": "bitnami/phpmyadmin", "sourceVersion": "20.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/phpmyadmin", "version": "20.0.0", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-phpmyadmin:20.0.0@sha256:920d98ee4cb958782095688f69a573134ae55cdef731b3c8fa96e859fd59c06b", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "83c005cd0ec19cce717b505547ed1f1235447c6c4ba80f582e39f9616d0f89bd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "41d8e5dabf8548c2965f32db8fdb6870f07b3e3fd967d641d8dc952f7569eb0a", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "41d8e5dabf8548c2965f32db8fdb6870f07b3e3fd967d641d8dc952f7569eb0a", "record": "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/phpmyadmin@20.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/phpmyadmin/20.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/phpmyadmin", "version=20.0.0", "base=default", "valuesProfile=recipes/bitnami/phpmyadmin/20.0.0/effective-values.yaml", "namespace=default", "releaseName=phpmyadmin", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-phpmyadmin-20-0-0-legacy", "labels": { "sourceType": "helm", "component": "bitnami/phpmyadmin", "sourceVersion": "20.0.0", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/phpmyadmin", "version": "20.0.0", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-phpmyadmin:20.0.0@sha256:920d98ee4cb958782095688f69a573134ae55cdef731b3c8fa96e859fd59c06b", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "401bc04af284e57aba9dce87ee949cc2c2fed28b8adc4bfffd7056ef5ad70942", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "401bc04af284e57aba9dce87ee949cc2c2fed28b8adc4bfffd7056ef5ad70942", "record": "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/phpmyadmin@20.0.0/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/phpmyadmin/20.0.0/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml", "recipes/bitnami/phpmyadmin/20.0.0/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/phpmyadmin", "version=20.0.0", "base=legacy", "valuesProfile=recipes/bitnami/phpmyadmin/20.0.0/effective-values.yaml", "namespace=default", "releaseName=phpmyadmin", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-phpmyadmin-20-0-0-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-6-10-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.6.10", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.6.10", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.10@sha256:5ae84bf8515f296f114547dc6e66c326593b7bdb93b0bafc77bdeb278831129c", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "405f685ceaa082317180a153831b8cd0dd68873b099120e98fe3e2d7fc07e3f9", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "dfbd333f2a1842ca8af06c501cf0b9719fd1b121fc5ee87b78a1cd3253f9497a", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "dfbd333f2a1842ca8af06c501cf0b9719fd1b121fc5ee87b78a1cd3253f9497a", "record": "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.6.10/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.6.10/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.6.10", "base=existing-secret", "valuesProfile=recipes/bitnami/postgresql/18.6.10/effective-values-existing-secret.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "postgresql-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "postgresql/postgresql-auth", "origin": "base", "type": "target-fact", "detail": "PostgreSQL administrator password" } ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } ] }, "requirementRefs": [ "postgresql/postgresql-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "postgresql/postgresql-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-6-10-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.6.10", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.6.10", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.10@sha256:5ae84bf8515f296f114547dc6e66c326593b7bdb93b0bafc77bdeb278831129c", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "32074b6285042b6224c734591a8e97758acf8da37365567b31981d63c3680c05", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "3813cd50ce20e68fab8ac09137d36e9164c718df62da7eb0b3df35ede0ce7f69", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3813cd50ce20e68fab8ac09137d36e9164c718df62da7eb0b3df35ede0ce7f69", "record": "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.6.10/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.6.10/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml", "recipes/bitnami/postgresql/18.6.10/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.6.10", "base=static-passwords", "valuesProfile=recipes/bitnami/postgresql/18.6.10/effective-values.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-10-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-6-7-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.6.7", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.6.7", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.7@sha256:fccd0da443cb3d0360e6a15f6ada67162f04261da38a071eaad2e97786b307d8", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "ab479ef3d1a6b653a00265e9964f945106fffede029f348488cfde39a38d8c88", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "595ce44f8c11b10ad1817bf57141529864efd48318a6a97a6e914d3669bb90dd", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "595ce44f8c11b10ad1817bf57141529864efd48318a6a97a6e914d3669bb90dd", "record": "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.6.7/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.6.7/publication/flattening-safety-verdict-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.6.7", "base=existing-secret", "valuesProfile=recipes/bitnami/postgresql/18.6.7/effective-values-existing-secret.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "postgresql-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "postgresql/postgresql-auth", "origin": "base", "type": "target-fact", "detail": "PostgreSQL administrator password" } ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } ] }, "requirementRefs": [ "postgresql/postgresql-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "postgresql/postgresql-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-6-7-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.6.7", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.6.7", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.6.7@sha256:fccd0da443cb3d0360e6a15f6ada67162f04261da38a071eaad2e97786b307d8", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "4925e0cde363d86173e36d27f9005e77ee3062fd6b07ea7108831d97b0339812", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "db49bd6d27e0deaed0b9e314f0527bc2d9468b7be10f9bbdaad14593f0b65a6b", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "db49bd6d27e0deaed0b9e314f0527bc2d9468b7be10f9bbdaad14593f0b65a6b", "record": "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.6.7/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.6.7/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml", "recipes/bitnami/postgresql/18.6.7/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.6.7", "base=static-passwords", "valuesProfile=recipes/bitnami/postgresql/18.6.7/effective-values.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-6-7-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-7-0-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.7.0", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.7.0", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.7.0@sha256:cf2cfeae128c4ede5cfa9ac65bdf241b557d59a1badacdd107e044caadb0d353", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "9958a534112986f32df60af4ef84c473a5731f8de7d2f140c4632aac6ddf0f9e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "bdcfa750a9553ede16f5718d0189d3616820e3ba1422eb82a8217f54c3c70dd2", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bdcfa750a9553ede16f5718d0189d3616820e3ba1422eb82a8217f54c3c70dd2", "record": "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.7.0/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.7.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.7.0", "base=existing-secret", "valuesProfile=recipes/bitnami/postgresql/18.7.0/effective-values-existing-secret.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "postgresql-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "postgresql/postgresql-auth", "origin": "base", "type": "target-fact", "detail": "PostgreSQL administrator password" } ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "postgres-password" ], "name": "postgresql-auth", "namespace": "postgresql", "purpose": "PostgreSQL administrator password" } ] }, "requirementRefs": [ "postgresql/postgresql-auth" ], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "postgresql/postgresql-auth" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-postgresql-18-7-0-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/postgresql", "sourceVersion": "18.7.0", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/postgresql", "version": "18.7.0", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-postgresql:18.7.0@sha256:cf2cfeae128c4ede5cfa9ac65bdf241b557d59a1badacdd107e044caadb0d353", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "a62a1709dcd88a1de3f59db3d65a2725b07255081b69026536cbaf90dd550385", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "e640101bb1c3c9ee519e04bfb6e28254f7a894c6f49b394e73756b351e5b57d1", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e640101bb1c3c9ee519e04bfb6e28254f7a894c6f49b394e73756b351e5b57d1", "record": "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/postgresql@18.7.0/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/postgresql/18.7.0/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml", "recipes/bitnami/postgresql/18.7.0/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/postgresql", "version=18.7.0", "base=static-passwords", "valuesProfile=recipes/bitnami/postgresql/18.7.0/effective-values.yaml", "namespace=postgresql", "releaseName=postgresql", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-postgresql-18-7-0-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-rabbitmq-16-0-14-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/rabbitmq", "sourceVersion": "16.0.14", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/rabbitmq", "version": "16.0.14", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-rabbitmq:16.0.14@sha256:fbdec937aa01df18d8cedc10a9dbd9b76f78cb209de1e6133f2118e92930fba9", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "e6cd5a984f86012e27472ff2823c5d9888ea7214f84119769bcabce0b25d2df1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "cdff3262264844b099e7f4421f1bbd5027360c2d23ba34667506d85255c4b6f2", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "cdff3262264844b099e7f4421f1bbd5027360c2d23ba34667506d85255c4b6f2", "record": "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/rabbitmq@16.0.14/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/rabbitmq/16.0.14/publication/flattening-safety-verdict-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/rabbitmq", "version=16.0.14", "base=existing-secret", "valuesProfile=recipes/bitnami/rabbitmq/16.0.14/effective-values-existing-secret.yaml", "namespace=rabbitmq", "releaseName=rabbitmq", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "rabbitmq-auth", "type": "requiredSecrets", "required": true, "details": { "keys": [ "rabbitmq-password" ], "name": "rabbitmq-auth", "namespace": "rabbitmq", "purpose": "RabbitMQ administrator password" } }, { "name": "rabbitmq-erlang-cookie", "type": "requiredSecrets", "required": true, "details": { "keys": [ "rabbitmq-erlang-cookie" ], "name": "rabbitmq-erlang-cookie", "namespace": "rabbitmq", "purpose": "RabbitMQ Erlang cookie for node clustering" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "rabbitmq/rabbitmq-auth", "origin": "base", "type": "target-fact", "detail": "RabbitMQ administrator password" }, { "id": "rabbitmq/rabbitmq-erlang-cookie", "origin": "base", "type": "target-fact", "detail": "RabbitMQ Erlang cookie for node clustering" } ], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "rabbitmq-password" ], "name": "rabbitmq-auth", "namespace": "rabbitmq", "purpose": "RabbitMQ administrator password" }, { "keys": [ "rabbitmq-erlang-cookie" ], "name": "rabbitmq-erlang-cookie", "namespace": "rabbitmq", "purpose": "RabbitMQ Erlang cookie for node clustering" } ] }, "requirementRefs": [ "rabbitmq/rabbitmq-auth", "rabbitmq/rabbitmq-erlang-cookie" ], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "rabbitmq/rabbitmq-auth", "rabbitmq/rabbitmq-erlang-cookie" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-rabbitmq-16-0-14-static-passwords", "labels": { "sourceType": "helm", "component": "bitnami/rabbitmq", "sourceVersion": "16.0.14", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "bitnami/rabbitmq", "version": "16.0.14", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-rabbitmq:16.0.14@sha256:fbdec937aa01df18d8cedc10a9dbd9b76f78cb209de1e6133f2118e92930fba9", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "cae600fba031e510fe5c5f8f33b2a610cfbf4ade184c52040affb1e6365fd14c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "81187ce4367f5196ddbaa35ea55b972698f8a474d78a2cdc2908b12290c89f31", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "81187ce4367f5196ddbaa35ea55b972698f8a474d78a2cdc2908b12290c89f31", "record": "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/rabbitmq@16.0.14/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/rabbitmq/16.0.14/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml", "recipes/bitnami/rabbitmq/16.0.14/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/rabbitmq", "version=16.0.14", "base=static-passwords", "valuesProfile=recipes/bitnami/rabbitmq/16.0.14/effective-values.yaml", "namespace=rabbitmq", "releaseName=rabbitmq", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-rabbitmq-16-0-14-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-redis-25-5-3-default", "labels": { "sourceType": "helm", "component": "bitnami/redis", "sourceVersion": "25.5.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/redis", "version": "25.5.3", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:25.5.3@sha256:a216ce212424e05b341ef5000f1798e6014b72b8bc3dce9f315285871037af2a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b72dbea967a115c140b00b124ac7facf66178d27383041e0938b11df75ab58d4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/redis/25.5.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 14, "digest": "175caf404c4a005708398d2facd696a8500ef4280c47c682b7bae6273a91272e", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/redis/25.5.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "175caf404c4a005708398d2facd696a8500ef4280c47c682b7bae6273a91272e", "record": "recipes/bitnami/redis/25.5.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/redis@25.5.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/redis/25.5.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml", "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/redis/25.5.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml", "recipes/bitnami/redis/25.5.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/redis", "version=25.5.3", "base=default", "valuesProfile=recipes/bitnami/redis/25.5.3/effective-values.yaml", "namespace=redis", "releaseName=redis", "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-redis-25-5-3-reuse-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/redis", "sourceVersion": "25.5.3", "base": "reuse-existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/redis", "version": "25.5.3", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:25.5.3@sha256:a216ce212424e05b341ef5000f1798e6014b72b8bc3dce9f315285871037af2a", "selection": { "name": "reuse-existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" } }, "baseVariant": { "name": "reuse-existing-secret", "revision": "r001", "digest": "a530dc8e393021275a35a9d16ac3ec69408c3a644f0899c4cbd05ffb0f3d404a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 13, "digest": "55f424589dfd8581580a51659cdf46e52180961ddbf9f6b7b244d0aacc42546f", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "55f424589dfd8581580a51659cdf46e52180961ddbf9f6b7b244d0aacc42546f", "record": "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/redis@25.5.3/reuse-existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/redis/25.5.3/publication/flattening-safety-verdict-reuse-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml", "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml", "recipes/bitnami/redis/25.5.3/revisions/reuse-existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/redis", "version=25.5.3", "base=reuse-existing-secret", "valuesProfile=recipes/bitnami/redis/25.5.3/effective-values-reuse-existing-secret.yaml", "namespace=redis", "releaseName=redis", "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}" ], "installTime": [ { "name": "redis-existing-secret", "type": "requiredSecrets", "required": true, "details": { "keys": [ "redis-password" ], "name": "redis-existing-secret", "namespace": "redis", "purpose": "Redis authentication password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "redis/redis-existing-secret", "origin": "base", "type": "target-fact", "detail": "Redis authentication password" } ], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "redis-password" ], "name": "redis-existing-secret", "namespace": "redis", "purpose": "Redis authentication password" } ] }, "requirementRefs": [ "redis/redis-existing-secret" ], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "redis/redis-existing-secret" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-25-5-3-reuse-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-redis-27-0-0-default", "labels": { "sourceType": "helm", "component": "bitnami/redis", "sourceVersion": "27.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/redis", "version": "27.0.0", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:27.0.0@sha256:d38f3fecadcc4c4cb26d9fb6c1fc58402c7dfa1cf08673afe7b00041c7614ae6", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "c71b893f899415dca9fa8b243e383e39b9b8d7ec3215aa2a9ddb8a9226cccd6f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/redis/27.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 14, "digest": "758467319ec109764b55ee730ba51a37a2196744f45f5c064f212bfc176178f0", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/redis/27.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "758467319ec109764b55ee730ba51a37a2196744f45f5c064f212bfc176178f0", "record": "recipes/bitnami/redis/27.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/redis@27.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/redis/27.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml", "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/redis/27.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml", "recipes/bitnami/redis/27.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/redis", "version=27.0.0", "base=default", "valuesProfile=recipes/bitnami/redis/27.0.0/effective-values.yaml", "namespace=redis", "releaseName=redis", "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-redis-27-0-0-reuse-existing-secret", "labels": { "sourceType": "helm", "component": "bitnami/redis", "sourceVersion": "27.0.0", "base": "reuse-existing-secret" } }, "spec": { "source": { "type": "helm", "name": "bitnami/redis", "version": "27.0.0", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:27.0.0@sha256:d38f3fecadcc4c4cb26d9fb6c1fc58402c7dfa1cf08673afe7b00041c7614ae6", "selection": { "name": "reuse-existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" } }, "baseVariant": { "name": "reuse-existing-secret", "revision": "r001", "digest": "89862d028836ff635863dee8bef479ee0e3c7e788d8bac7516a6d932f722187c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 13, "digest": "ff3e9532687b0826784a329dd1b10afea3a7bfd355bced74d5fa9064f7908eb4", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ff3e9532687b0826784a329dd1b10afea3a7bfd355bced74d5fa9064f7908eb4", "record": "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/redis@27.0.0/reuse-existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/redis/27.0.0/publication/flattening-safety-verdict-reuse-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml", "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/release-objects.yaml", "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml", "recipes/bitnami/redis/27.0.0/revisions/reuse-existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/redis", "version=27.0.0", "base=reuse-existing-secret", "valuesProfile=recipes/bitnami/redis/27.0.0/effective-values-reuse-existing-secret.yaml", "namespace=redis", "releaseName=redis", "capabilityProfile={\"apiVersions\":[],\"catalog\":\"../../../../data/capability-profiles/catalog.yaml\",\"digest\":\"sha256:c1f8a4eb20154228a391f2a61565160634fbeb5dcf1079065543dd0a2ff3dfbf\",\"kubeVersion\":\"1.30.0\",\"name\":\"k8s-1.30-default\"}" ], "installTime": [ { "name": "redis-existing-secret", "type": "requiredSecrets", "required": true, "details": { "keys": [ "redis-password" ], "name": "redis-existing-secret", "namespace": "redis", "purpose": "Redis authentication password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "redis/redis-existing-secret", "origin": "base", "type": "target-fact", "detail": "Redis authentication password" } ], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "redis-password" ], "name": "redis-existing-secret", "namespace": "redis", "purpose": "Redis authentication password" } ] }, "requirementRefs": [ "redis/redis-existing-secret" ], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "redis/redis-existing-secret" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-redis-27-0-0-reuse-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-spark-10-0-3-default", "labels": { "sourceType": "helm", "component": "bitnami/spark", "sourceVersion": "10.0.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/spark", "version": "10.0.3", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3@sha256:2a4082e995d3f9a1573a9db34b55487982a621afbdf6c45bc58ab12666a6b0a8", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "f38b69257036d8bd6d2d255d7cf1685b6ec1d23fea1325550c832be705640bdd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "bec034832a7f2a6c1d2f05aa7bfcf0ce4562dbb274e7b760170df3e80e1ced55", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bec034832a7f2a6c1d2f05aa7bfcf0ce4562dbb274e7b760170df3e80e1ced55", "record": "recipes/bitnami/spark/10.0.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/spark@10.0.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/spark/10.0.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml", "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/spark/10.0.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml", "recipes/bitnami/spark/10.0.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/spark", "version=10.0.3", "base=default", "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values.yaml", "namespace=default", "releaseName=spark", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-spark-10-0-3-ha", "labels": { "sourceType": "helm", "component": "bitnami/spark", "sourceVersion": "10.0.3", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "bitnami/spark", "version": "10.0.3", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3@sha256:2a4082e995d3f9a1573a9db34b55487982a621afbdf6c45bc58ab12666a6b0a8", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "55b44c0927f07867cba166634cbf1440028df42dabc48870953a2ddc6c2fbe75", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "55b44c0927f07867cba166634cbf1440028df42dabc48870953a2ddc6c2fbe75", "record": "recipes/bitnami/spark/10.0.3/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/spark@10.0.3/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/spark/10.0.3/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml", "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/release-objects.yaml", "recipes/bitnami/spark/10.0.3/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml", "recipes/bitnami/spark/10.0.3/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/spark", "version=10.0.3", "base=ha", "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values-ha.yaml", "namespace=default", "releaseName=spark", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-spark-10-0-3-legacy", "labels": { "sourceType": "helm", "component": "bitnami/spark", "sourceVersion": "10.0.3", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/spark", "version": "10.0.3", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-spark:10.0.3@sha256:2a4082e995d3f9a1573a9db34b55487982a621afbdf6c45bc58ab12666a6b0a8", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "05921876ce0d142a26b495df363557abefd1d460251b66c4777370838f8c9373", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "05921876ce0d142a26b495df363557abefd1d460251b66c4777370838f8c9373", "record": "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/spark@10.0.3/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/spark/10.0.3/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml", "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml", "recipes/bitnami/spark/10.0.3/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/spark", "version=10.0.3", "base=legacy", "valuesProfile=recipes/bitnami/spark/10.0.3/effective-values.yaml", "namespace=default", "releaseName=spark", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-spark-10-0-3-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-zookeeper-13-8-7-default", "labels": { "sourceType": "helm", "component": "bitnami/zookeeper", "sourceVersion": "13.8.7", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "bitnami/zookeeper", "version": "13.8.7", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7@sha256:bdae202754e9af6bf276216c3002b4bae869988024ef8db33e792b90fa7bb5c0", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "2016aa05828162ac062e268af8a992ab41e7687d5d6144eacd7c8eb9e4521f50", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "67672a9bfa85db38f8485736cd19f80ccec599fc17c2c5bb154e3c2feeb54bdb", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "67672a9bfa85db38f8485736cd19f80ccec599fc17c2c5bb154e3c2feeb54bdb", "record": "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "bitnami/zookeeper@13.8.7/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/zookeeper/13.8.7/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/release-objects.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/zookeeper", "version=13.8.7", "base=default", "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values.yaml", "namespace=default", "releaseName=zookeeper", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-zookeeper-13-8-7-ha", "labels": { "sourceType": "helm", "component": "bitnami/zookeeper", "sourceVersion": "13.8.7", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "bitnami/zookeeper", "version": "13.8.7", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7@sha256:bdae202754e9af6bf276216c3002b4bae869988024ef8db33e792b90fa7bb5c0", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "ac9d09d452d221cb673fcdbc07767e7440402161c0e3a41811db20192768b01f", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ac9d09d452d221cb673fcdbc07767e7440402161c0e3a41811db20192768b01f", "record": "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/zookeeper@13.8.7/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/zookeeper/13.8.7/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/release-objects.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/zookeeper", "version=13.8.7", "base=ha", "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values-ha.yaml", "namespace=default", "releaseName=zookeeper", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "bitnami-zookeeper-13-8-7-legacy", "labels": { "sourceType": "helm", "component": "bitnami/zookeeper", "sourceVersion": "13.8.7", "base": "legacy" } }, "spec": { "source": { "type": "helm", "name": "bitnami/zookeeper", "version": "13.8.7", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-zookeeper:13.8.7@sha256:bdae202754e9af6bf276216c3002b4bae869988024ef8db33e792b90fa7bb5c0", "selection": { "name": "legacy", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" } }, "baseVariant": { "name": "legacy", "revision": "r001", "digest": "cb29752cc67f9a42d2102362e58cc12df82ce623562b2732ab857e923c670977", "digestRole": "helm-variant-revision", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "98d1db5810c626fce54ff8a5b297cd7c50102367e064eb0610bb418072944260", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "98d1db5810c626fce54ff8a5b297cd7c50102367e064eb0610bb418072944260", "record": "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "bitnami/zookeeper@13.8.7/legacy; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/bitnami/zookeeper/13.8.7/publication/flattening-safety-verdict-legacy.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/release-objects.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml", "recipes/bitnami/zookeeper/13.8.7/revisions/legacy/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=bitnami/zookeeper", "version=13.8.7", "base=legacy", "valuesProfile=recipes/bitnami/zookeeper/13.8.7/effective-values.yaml", "namespace=default", "releaseName=zookeeper", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/bitnami-zookeeper-13-8-7-legacy.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cloudnative-pg-cloudnative-pg-0-28-2-default", "labels": { "sourceType": "helm", "component": "cloudnative-pg/cloudnative-pg", "sourceVersion": "0.28.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "cloudnative-pg/cloudnative-pg", "version": "0.28.2", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudnative-pg-cloudnative-pg:0.28.2@sha256:30cfcee4ff1d5467c4df45d8223d2b98e9a8d316fa5ec9978533d9ffdcff8dc2", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4d7ff0bf073976ebdefa3cf56e5ab45d27e6a6517e003b7f760221b33103d90d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 21, "digest": "67190a176fe9539df56c63c033cfffb1538a06bc47d8624532a0a980fe50bd46", "digestRole": "canonical-object-set", "digestRecord": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "67190a176fe9539df56c63c033cfffb1538a06bc47d8624532a0a980fe50bd46", "record": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "cloudnative-pg/cloudnative-pg@0.28.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=cloudnative-pg/cloudnative-pg", "version=0.28.2", "base=default", "valuesProfile=recipes/cloudnative-pg/cloudnative-pg/0.28.2/effective-values.yaml", "namespace=default", "releaseName=cloudnative-pg", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cloudnative-pg-cloudnative-pg-0-28-2-no-crds", "labels": { "sourceType": "helm", "component": "cloudnative-pg/cloudnative-pg", "sourceVersion": "0.28.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "cloudnative-pg/cloudnative-pg", "version": "0.28.2", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudnative-pg-cloudnative-pg:0.28.2@sha256:30cfcee4ff1d5467c4df45d8223d2b98e9a8d316fa5ec9978533d9ffdcff8dc2", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "2b48d08cac37e72b6840cff94c0f89c31721c9fa5c124ec2c671614f904b849d", "digestRole": "canonical-object-set", "digestRecord": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2b48d08cac37e72b6840cff94c0f89c31721c9fa5c124ec2c671614f904b849d", "record": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "cloudnative-pg/cloudnative-pg@0.28.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/cloudnative-pg/cloudnative-pg/0.28.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml", "recipes/cloudnative-pg/cloudnative-pg/0.28.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=cloudnative-pg/cloudnative-pg", "version=0.28.2", "base=no-crds", "valuesProfile=recipes/cloudnative-pg/cloudnative-pg/0.28.2/effective-values-no-crds.yaml", "namespace=default", "releaseName=cloudnative-pg", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "backups.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "backups.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterimagecatalogs.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterimagecatalogs.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusters.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusters.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "databases.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "databases.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "failoverquorums.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "failoverquorums.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "imagecatalogs.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "imagecatalogs.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "poolers.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "poolers.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "publications.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "publications.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "scheduledbackups.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scheduledbackups.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "subscriptions.postgresql.cnpg.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "subscriptions.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "cnpg-webhook-cert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "cnpg-webhook-cert", "namespace": "default", "purpose": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "backups.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "clusterimagecatalogs.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "clusters.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "databases.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "failoverquorums.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "imagecatalogs.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "poolers.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "publications.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "scheduledbackups.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "subscriptions.postgresql.cnpg.io", "origin": "base", "type": "target-fact", "detail": "CloudNativePG CRD managed outside this no-crds base" }, { "id": "default/cnpg-webhook-cert", "origin": "base", "type": "target-fact", "detail": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready" } ], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "backups.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterimagecatalogs.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusters.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "databases.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "failoverquorums.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "imagecatalogs.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "poolers.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "publications.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scheduledbackups.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "subscriptions.postgresql.cnpg.io", "purpose": "CloudNativePG CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/cloudnative-pg/cloudnative-pg/0.28.2/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "cnpg-webhook-cert", "namespace": "default", "purpose": "CloudNativePG admission webhook TLS material required before the no-crds operator pod can become ready" } ] }, "requirementRefs": [ "backups.postgresql.cnpg.io", "clusterimagecatalogs.postgresql.cnpg.io", "clusters.postgresql.cnpg.io", "databases.postgresql.cnpg.io", "failoverquorums.postgresql.cnpg.io", "imagecatalogs.postgresql.cnpg.io", "poolers.postgresql.cnpg.io", "publications.postgresql.cnpg.io", "scheduledbackups.postgresql.cnpg.io", "subscriptions.postgresql.cnpg.io", "default/cnpg-webhook-cert" ], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "backups.postgresql.cnpg.io", "clusterimagecatalogs.postgresql.cnpg.io", "clusters.postgresql.cnpg.io", "databases.postgresql.cnpg.io", "failoverquorums.postgresql.cnpg.io", "imagecatalogs.postgresql.cnpg.io", "poolers.postgresql.cnpg.io", "publications.postgresql.cnpg.io", "scheduledbackups.postgresql.cnpg.io", "subscriptions.postgresql.cnpg.io", "default/cnpg-webhook-cert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/cloudnative-pg-cloudnative-pg-0-28-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cloudpirates-nginx-0-16-1-default", "labels": { "sourceType": "helm", "component": "cloudpirates/nginx", "sourceVersion": "0.16.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "cloudpirates/nginx", "version": "0.16.1", "record": "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudpirates-nginx:0.16.1@sha256:1a036db1dcd66cd0a75e8496bd0310d853b98b4e5c16103956de5e620909b183", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "0f318847ab3e7aa8b3532596256c87d9fe2a58772551fa7fad93878dc5a6566a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "0ab5bf40e30391f43bb673d8e3f97c3d427ae2b2dda8d007dfd38464ad820e9b", "digestRole": "canonical-object-set", "digestRecord": "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "0ab5bf40e30391f43bb673d8e3f97c3d427ae2b2dda8d007dfd38464ad820e9b", "record": "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "cloudpirates/nginx@0.16.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml", "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml", "recipes/cloudpirates/nginx/0.16.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=cloudpirates/nginx", "version=0.16.1", "base=default", "valuesProfile=recipes/cloudpirates/nginx/0.16.1/effective-values.yaml", "namespace=default", "releaseName=nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/cloudpirates-nginx-0-16-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cloudpirates-rabbitmq-0-21-13-default", "labels": { "sourceType": "helm", "component": "cloudpirates/rabbitmq", "sourceVersion": "0.21.13", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "cloudpirates/rabbitmq", "version": "0.21.13", "record": "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudpirates-rabbitmq:0.21.13@sha256:76f078d77d8b5b713c03d7515504dae9f24c2b5679a9b755fe85ef22920a119f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "00273cc4f0bd67bdef5c6258d15e602cefe259299231ac9dedcb023537e376ce", "digestRole": "helm-variant-revision", "digestRecord": "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "ada74ec4e4df444071b63172777c84c055018a602978642ae044453ae74a30df", "digestRole": "canonical-object-set", "digestRecord": "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ada74ec4e4df444071b63172777c84c055018a602978642ae044453ae74a30df", "record": "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "cloudpirates/rabbitmq@0.21.13/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml", "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/rendered/release-objects.yaml", "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml", "recipes/cloudpirates/rabbitmq/0.21.13/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=cloudpirates/rabbitmq", "version=0.21.13", "base=default", "valuesProfile=recipes/cloudpirates/rabbitmq/0.21.13/effective-values.yaml", "namespace=default", "releaseName=rabbitmq", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/cloudpirates-rabbitmq-0-21-13-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cloudpirates-redis-0-34-11-default", "labels": { "sourceType": "helm", "component": "cloudpirates/redis", "sourceVersion": "0.34.11", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "cloudpirates/redis", "version": "0.34.11", "record": "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/cloudpirates-redis:0.34.11@sha256:29a96a9f6b3e2cedfe30cefe20c51e46cbcb1e363c69c45c58f9118530099333", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "5d394f10b8724a14b52fdc999257004d46364509c8a35abc54cdf92874030fdd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "e7bfebc49e68cd2a4baa080a6376fd9d5c2c3b0deaa3363abbbbbdec1c134935", "digestRole": "canonical-object-set", "digestRecord": "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e7bfebc49e68cd2a4baa080a6376fd9d5c2c3b0deaa3363abbbbbdec1c134935", "record": "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "cloudpirates/redis@0.34.11/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml", "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/rendered/release-objects.yaml", "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml", "recipes/cloudpirates/redis/0.34.11/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=cloudpirates/redis", "version=0.34.11", "base=default", "valuesProfile=recipes/cloudpirates/redis/0.34.11/effective-values.yaml", "namespace=default", "releaseName=redis", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/cloudpirates-redis-0-34-11-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "configuration-oci-nginx-replicas-4", "labels": { "sourceType": "configuration-oci", "component": "existing-oci-nginx", "sourceVersion": "sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "base": "replicas-4" } }, "spec": { "source": { "type": "configuration-oci", "name": "nginx-replicas-4", "version": "sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "record": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nginx-replicas-4@sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "selection": { "name": "replicas-4", "kind": "literal-input", "provider": "Configuration owner", "record": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" } }, "baseVariant": { "name": "replicas-4", "revision": "reviewed-r001", "digest": "aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "digestRole": "literal-configuration-oci-manifest", "digestRecord": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "examples/anonymous-oci-transform/reviewed-output/manifests/release-objects.yaml", "inventory": "runs/existing-oci-upload-proof/receipt.yaml", "objectCount": 5, "digest": "b39636429c375b7c458b1b2cc844a00479aee23cb7442daa3342c79562179340", "digestRole": "canonical-object-set", "digestRecord": "runs/existing-oci-upload-proof/receipt.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" }, "materialization": { "method": "read-literal-configuration", "status": "recorded-no-op", "outputDigest": "b39636429c375b7c458b1b2cc844a00479aee23cb7442daa3342c79562179340", "record": "runs/existing-oci-upload-proof/receipt.yaml" }, "flattening": { "status": "decided", "verdict": "born-flattened", "action": "retain-exact-objects", "scope": "nginx-replicas-4@sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518/replicas-4; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" }, "boundaries": [ "The source already contains exact Kubernetes objects; parsing and canonicalization do not change their meaning." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Read and compare the exact Kubernetes objects and their digest without running a source processor.", "requiredInputs": [ "The literal configuration OCI and its object inventory" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml", "examples/anonymous-oci-transform/reviewed-output/manifests/release-objects.yaml", "runs/existing-oci-upload-proof/receipt.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "This source already contains exact Kubernetes objects. Reading and fingerprinting them is the recorded materialization step.", "requiredInputs": [ "The literal configuration OCI; no source processor is required" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml", "runs/existing-oci-upload-proof/receipt.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "runs/anonymous-oci-transform-proof/receipt.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "source=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nginx-replicas-4@sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "artifactType=application/vnd.confighub.kubernetes.config.v1", "change=Deployment/nginx spec.replicas 3 -> 4" ], "installTime": [ { "category": "secret", "name": "nginx/ai-provider-credentials", "purpose": "The Deployment references this Secret; the credential is not stored in the public OCI." } ], "installTimeStatus": "one target-owned Secret recorded" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "nginx/ai-provider-credentials", "origin": "base", "type": "target-fact", "detail": "Supply the referenced AI provider credentials before the Deployment starts." } ], "records": [ "runs/anonymous-oci-transform-proof/receipt.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "runs/anonymous-oci-transform-proof/receipt.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "namespace": "nginx", "name": "ai-provider-credentials" } ] }, "requirementRefs": [ "nginx/ai-provider-credentials" ], "records": [ "runs/anonymous-oci-transform-proof/receipt.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [ "nginx/ai-provider-credentials" ], "deliveryProtected": [], "records": [ "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "public-anonymous-pull-proved", "reference": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nginx-replicas-4@sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "digest": "sha256:aa58e2a9d120d09f029fdef80596225f8c44d0aa629b18766fe8b6694659f518", "receipt": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml" }, "configHubUpload": { "status": "pass", "space": "existing-oci-nginx-replicas-4", "objectSetSha256": "b39636429c375b7c458b1b2cc844a00479aee23cb7442daa3342c79562179340", "receipt": "runs/existing-oci-upload-proof/receipt.yaml" }, "configHubReleaseOci": { "status": "not-run-for-this-base" }, "argoCd": "not-run-for-this-base", "flux": "not-run-for-this-base", "direct": "not-run-for-this-base" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "publicOci": "runs/anonymous-oci-transform-proof/public-oci-receipt.yaml", "transformation": "runs/anonymous-oci-transform-proof/receipt.yaml", "configHubUpload": "runs/existing-oci-upload-proof/receipt.yaml" }, "operations": { "resourceClass": "user-workload", "ownerClass": "application-team", "changeCadence": "application-release" } }, "status": { "level": "available", "claim": "The public literal configuration OCI contains five exact Kubernetes objects, pulls without registry credentials, and imports into ConfigHub without rerendering Helm.", "limits": [ "The target must supply nginx/ai-provider-credentials.", "This record proves publication, anonymous pull, checks, and ConfigHub import. It does not claim delivery or workload health." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "coredns-coredns-1-45-2-default", "labels": { "sourceType": "helm", "component": "coredns/coredns", "sourceVersion": "1.45.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "coredns/coredns", "version": "1.45.2", "record": "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/coredns-coredns:1.45.2@sha256:2e99a7e9923a5365c803e3ffaede5b97731ac209423d8572f4d373274f4b31bc", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "a47a5e89780ae851620bf6d227f5f5dfe79afbdf5771e6fea3c8f8ed2445e631", "digestRole": "helm-variant-revision", "digestRecord": "recipes/coredns/coredns/1.45.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "e9d0e20ceb7a6ec8e8189aa63d5fcba50be11360c7b734e57b84ad0556b1ca34", "digestRole": "canonical-object-set", "digestRecord": "recipes/coredns/coredns/1.45.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e9d0e20ceb7a6ec8e8189aa63d5fcba50be11360c7b734e57b84ad0556b1ca34", "record": "recipes/coredns/coredns/1.45.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "coredns/coredns@1.45.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/coredns/coredns/1.45.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml", "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/coredns/coredns/1.45.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml", "recipes/coredns/coredns/1.45.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=coredns/coredns", "version=1.45.2", "base=default", "valuesProfile=recipes/coredns/coredns/1.45.2/effective-values.yaml", "namespace=default", "releaseName=coredns", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/coredns-coredns-1-45-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "crossplane-stable-crossplane-2-3-1-default", "labels": { "sourceType": "helm", "component": "crossplane-stable/crossplane", "sourceVersion": "2.3.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "crossplane-stable/crossplane", "version": "2.3.1", "record": "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/crossplane-stable-crossplane:2.3.1@sha256:fe65a685251072dfacd02537aaea511371f70117324c5c6151bceb919756a616", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "0bf41f4414f233ce8e995637c500d2e46c326af789b84ee8be23bd62ad1cf1c4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 23, "digest": "917b3dc2a52c16f26cefebe2b580889944e23461d95d1fbe912e0c7a451fd996", "digestRole": "canonical-object-set", "digestRecord": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "917b3dc2a52c16f26cefebe2b580889944e23461d95d1fbe912e0c7a451fd996", "record": "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "crossplane-stable/crossplane@2.3.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/crossplane-stable/crossplane/2.3.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml", "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml", "recipes/crossplane-stable/crossplane/2.3.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=crossplane-stable/crossplane", "version=2.3.1", "base=default", "valuesProfile=recipes/crossplane-stable/crossplane/2.3.1/effective-values.yaml", "namespace=default", "releaseName=crossplane", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/crossplane-stable-crossplane-2-3-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "cub-installer-bitnami-nginx-24-0-2-http-clusterip", "labels": { "sourceType": "cub-installer", "component": "bitnami/nginx", "sourceVersion": "24.0.2", "base": "http-clusterip" } }, "spec": { "source": { "type": "cub-installer", "name": "bitnami/nginx", "version": "24.0.2", "record": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2", "selection": { "name": "http-clusterip", "kind": "package-base", "provider": "Config Workshop", "record": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml" } }, "baseVariant": { "name": "http-clusterip", "revision": "r001", "digest": "7cf08c0348a32d577ffa0e16069ec6c2510ce773b372008d25b938f9546c5f67", "digestRole": "source-package-oci-manifest", "digestRecord": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml", "inventory": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba", "digestRole": "canonical-object-set", "digestRecord": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml" }, "materialization": { "method": "source-oci-processor", "status": "captured", "outputDigest": "7fb28597f2eea8113612fa9e67ac84760cba1e72c42a4c59e4c25d284e0a94ba", "record": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "bitnami/nginx@24.0.2/http-clusterip; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "The source OCI is an input package. Its declared processor produces the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the cub-installer source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The installer package OCI or its unpacked files" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/release-objects.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded source OCI processing step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The installer package OCI, selected base, and supported install-time inputs" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml", "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "A related runtime path has evidence, but it differs from this exact base or package output and must not be treated as identical.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "completed", "resultState": "watch", "records": [ "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml" ], "nextAction": "Run the live check for this exact configuration before making a base-specific runtime claim." } ] }, "inputs": { "fixedAtBuildTime": [ "sourcePackage=oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2@sha256:7cf08c0348a32d577ffa0e16069ec6c2510ce773b372008d25b938f9546c5f67", "preset=http-clusterip", "releaseName=nginx", "namespace=nginx", "kubeVersion=1.30.0" ], "installTime": [], "installTimeStatus": "target facts require review before delivery" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "public", "reference": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-nginx:24.0.2", "digest": "sha256:7cf08c0348a32d577ffa0e16069ec6c2510ce773b372008d25b938f9546c5f67", "receipt": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml" }, "literalConfigOci": { "status": "not-published-for-this-five-object-base" }, "configHubReleaseOci": { "status": "separately-proved-with-an-added-Namespace" }, "argoCd": "separately-proved-with-an-added-Namespace", "flux": "separately-proved-with-an-added-Namespace", "direct": "separately-proved-with-an-added-Namespace", "receipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "packagePublication": "runs/installer-oci/bitnami-nginx/24.0.2/installer-package-publication-receipt.yaml", "packageDefinition": "packages/bitnami/nginx/24.0.2/installer.yaml", "selectedIntent": "data/helm-render-intents/intents/bitnami-nginx-24-0-2-http-clusterip.yaml", "selectedRevision": "recipes/bitnami/nginx/24.0.2/revisions/http-clusterip/r001/variant-revision.yaml", "deliveryReceipt": "runs/catalog-oci-delivery-proof/bitnami-nginx-24-0-2-http-clusterip.yaml" }, "operations": { "resourceClass": "user-workload", "ownerClass": "application-team", "changeCadence": "application-release" } }, "status": { "level": "partial", "claim": "The public cub installer package selects the http-clusterip preset and reproduces its five recorded Kubernetes objects without ConfigHub Server.", "limits": [ "The three-consumer delivery receipt adds the requested Namespace, so its six-object digest is separate from this five-object base digest.", "The source package is public. A separate literal configuration OCI for this exact five-object result is not recorded.", "Target facts remain an explicit Catalog gap for this preset." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "descheduler-descheduler-0-36-0-default", "labels": { "sourceType": "helm", "component": "descheduler/descheduler", "sourceVersion": "0.36.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "descheduler/descheduler", "version": "0.36.0", "record": "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/descheduler-descheduler:0.36.0@sha256:3d1b7443b1e8ea2d011c2d1791a7ab984f848c70157aed1ef15b2562a11416d2", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "7400d88f184e1896809aa20a1392a7c9676bdb107de45c7b03966f262d348987", "digestRole": "helm-variant-revision", "digestRecord": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "23cfd1f815897db367d88feb42f54c765ed17f435cb779cd8dec5ecb196da707", "digestRole": "canonical-object-set", "digestRecord": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "23cfd1f815897db367d88feb42f54c765ed17f435cb779cd8dec5ecb196da707", "record": "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "descheduler/descheduler@0.36.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/descheduler/descheduler/0.36.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml", "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml", "recipes/descheduler/descheduler/0.36.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=descheduler/descheduler", "version=0.36.0", "base=default", "valuesProfile=recipes/descheduler/descheduler/0.36.0/effective-values.yaml", "namespace=default", "releaseName=descheduler", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/descheduler-descheduler-0-36-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "dex-dex-0-24-0-default", "labels": { "sourceType": "helm", "component": "dex/dex", "sourceVersion": "0.24.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "dex/dex", "version": "0.24.0", "record": "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/dex-dex:0.24.0@sha256:0e2e1b873d9ce8f43b51023f3fe28131b3a021b7718e57d6250462421245793f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "fb339bfb08d5effaac5f67c80dc1c55679d4de02059e10a9b28bbdbb8d52bebb", "digestRole": "helm-variant-revision", "digestRecord": "recipes/dex/dex/0.24.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "5461ff32d1a2a157fd54a958809a06aa73938f52efc8c97f40e866cbc070b2f5", "digestRole": "canonical-object-set", "digestRecord": "recipes/dex/dex/0.24.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5461ff32d1a2a157fd54a958809a06aa73938f52efc8c97f40e866cbc070b2f5", "record": "recipes/dex/dex/0.24.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "dex/dex@0.24.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/dex/dex/0.24.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml", "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/dex/dex/0.24.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml", "recipes/dex/dex/0.24.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=dex/dex", "version=0.24.0", "base=default", "valuesProfile=recipes/dex/dex/0.24.0/effective-values.yaml", "namespace=default", "releaseName=dex", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/dex-dex-0-24-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-eck-operator-3-4-0-default", "labels": { "sourceType": "helm", "component": "elastic/eck-operator", "sourceVersion": "3.4.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "elastic/eck-operator", "version": "3.4.0", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0@sha256:267c9f2d73b62188edc6f1ef32891327bd3d69a6386d997309c3b5dcccacba0a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e438fa78c3d1d5409957800533d207317b82ac4c36ee0c4a314196c8c9d6d53e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 22, "digest": "11bd8f291f9da0611bf6795dbbbe41a9e4e5ae9fe4cd58e9bad69dd883aee278", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "11bd8f291f9da0611bf6795dbbbe41a9e4e5ae9fe4cd58e9bad69dd883aee278", "record": "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "elastic/eck-operator@3.4.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/eck-operator/3.4.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/eck-operator", "version=3.4.0", "base=default", "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values.yaml", "namespace=default", "releaseName=eck-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-eck-operator-3-4-0-ha", "labels": { "sourceType": "helm", "component": "elastic/eck-operator", "sourceVersion": "3.4.0", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "elastic/eck-operator", "version": "3.4.0", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0@sha256:267c9f2d73b62188edc6f1ef32891327bd3d69a6386d997309c3b5dcccacba0a", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "20bc4c9cdd28f35aa9c1f646c0af7bc092faac39f8ce3e3606861b98789ee54a", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "20bc4c9cdd28f35aa9c1f646c0af7bc092faac39f8ce3e3606861b98789ee54a", "record": "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "elastic/eck-operator@3.4.0/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/eck-operator/3.4.0/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/release-objects.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/eck-operator", "version=3.4.0", "base=ha", "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values-ha.yaml", "namespace=default", "releaseName=eck-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-eck-operator-3-4-0-no-crds", "labels": { "sourceType": "helm", "component": "elastic/eck-operator", "sourceVersion": "3.4.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "elastic/eck-operator", "version": "3.4.0", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-eck-operator:3.4.0@sha256:267c9f2d73b62188edc6f1ef32891327bd3d69a6386d997309c3b5dcccacba0a", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "6da1150ac5e27b67009e5c20dddf061a5a92af72adfc4551a866fa0d28e23a87", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6da1150ac5e27b67009e5c20dddf061a5a92af72adfc4551a866fa0d28e23a87", "record": "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "elastic/eck-operator@3.4.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/eck-operator/3.4.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml", "recipes/elastic/eck-operator/3.4.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/eck-operator", "version=3.4.0", "base=no-crds", "valuesProfile=recipes/elastic/eck-operator/3.4.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=eck-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-eck-operator-3-4-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-filebeat-8-5-1-default", "labels": { "sourceType": "helm", "component": "elastic/filebeat", "sourceVersion": "8.5.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "elastic/filebeat", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-filebeat:8.5.1@sha256:16db362566c51934e9807a7f2f2f57dfc20df88318658f5e7106d0f45bca2e47", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e3ad3faa059c6954bdb36f5b7708287b356f34f789fa86df6934e89bd8592d10", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "690fcc3d2e2d1019f35b7d9ec64ba0783b4dc445a2060c400d49dae6a251e020", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "690fcc3d2e2d1019f35b7d9ec64ba0783b4dc445a2060c400d49dae6a251e020", "record": "recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "elastic/filebeat@8.5.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/filebeat/8.5.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml", "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/elastic/filebeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml", "recipes/elastic/filebeat/8.5.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/filebeat", "version=8.5.1", "base=default", "valuesProfile=recipes/elastic/filebeat/8.5.1/effective-values.yaml", "namespace=default", "releaseName=filebeat", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "elasticsearch-master-certs", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" } }, { "name": "elasticsearch-master-credentials", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Filebeat container", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/elasticsearch-master-certs", "origin": "base", "type": "target-fact", "detail": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection" }, { "id": "default/elasticsearch-master-credentials", "origin": "base", "type": "target-fact", "detail": "Elasticsearch username and password read by the Filebeat container" } ], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-default/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-default/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Filebeat container", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } ] }, "requirementRefs": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-filebeat-8-5-1-node-or-cluster-collector", "labels": { "sourceType": "helm", "component": "elastic/filebeat", "sourceVersion": "8.5.1", "base": "node-or-cluster-collector" } }, "spec": { "source": { "type": "helm", "name": "elastic/filebeat", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-filebeat:8.5.1@sha256:16db362566c51934e9807a7f2f2f57dfc20df88318658f5e7106d0f45bca2e47", "selection": { "name": "node-or-cluster-collector", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" } }, "baseVariant": { "name": "node-or-cluster-collector", "revision": "r001", "digest": "7682debd6c360ad39daf54d962a5f2be5dae84683c6e0631412093803dc4e972", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "690fcc3d2e2d1019f35b7d9ec64ba0783b4dc445a2060c400d49dae6a251e020", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "690fcc3d2e2d1019f35b7d9ec64ba0783b4dc445a2060c400d49dae6a251e020", "record": "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "elastic/filebeat@8.5.1/node-or-cluster-collector; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/filebeat/8.5.1/publication/flattening-safety-verdict-node-or-cluster-collector.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml", "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/release-objects.yaml", "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml", "recipes/elastic/filebeat/8.5.1/revisions/node-or-cluster-collector/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/filebeat", "version=8.5.1", "base=node-or-cluster-collector", "valuesProfile=recipes/elastic/filebeat/8.5.1/effective-values.yaml", "namespace=default", "releaseName=filebeat", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "elasticsearch-master-certs", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" } }, { "name": "elasticsearch-master-credentials", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Filebeat container", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/elasticsearch-master-certs", "origin": "base", "type": "target-fact", "detail": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection" }, { "id": "default/elasticsearch-master-credentials", "origin": "base", "type": "target-fact", "detail": "Elasticsearch username and password read by the Filebeat container" } ], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Filebeat DaemonSet for its Elasticsearch connection", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-filebeat-node-or-cluster-collector/receipt.yaml", "runs/live-kind-parity/elastic-filebeat-node-or-cluster-collector/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Filebeat container", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } ] }, "requirementRefs": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-filebeat-8-5-1-node-or-cluster-collector.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-kibana-8-5-1-default", "labels": { "sourceType": "helm", "component": "elastic/kibana", "sourceVersion": "8.5.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "elastic/kibana", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-kibana:8.5.1@sha256:ad45602eaac23f5e9ec2ebef4c00f9cf7a99dee5173755234f598b22df30c9a6", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "666d47b71fb1f9cfe3e5197e5884044c8b93609ff9ca07d1a800f9d235dfdea4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/kibana/8.5.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 2, "digest": "3c0e03c571ed6c5635edd63244a0085634a30bd73e011e2db802c9d1c63b0cb3", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/kibana/8.5.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3c0e03c571ed6c5635edd63244a0085634a30bd73e011e2db802c9d1c63b0cb3", "record": "recipes/elastic/kibana/8.5.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "elastic/kibana@8.5.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/kibana/8.5.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml", "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/elastic/kibana/8.5.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml", "recipes/elastic/kibana/8.5.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/kibana", "version=8.5.1", "base=default", "valuesProfile=recipes/elastic/kibana/8.5.1/effective-values.yaml", "namespace=default", "releaseName=kibana", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-kibana-8-5-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-logstash-8-5-1-default", "labels": { "sourceType": "helm", "component": "elastic/logstash", "sourceVersion": "8.5.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "elastic/logstash", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-logstash:8.5.1@sha256:fd909b18b84b947213f291f209e93f75dcd94dc25324a28211b2afd8960895b3", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "193c1ae729570ac87f0f0987283a2cbb552c02f82a99fba0aeb906175a88c7bb", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/logstash/8.5.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "1bb5971d54f2bb9fd05ffe69b339261a9c31e8b81eeba48064a9dbc337fe5ecd", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/logstash/8.5.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "1bb5971d54f2bb9fd05ffe69b339261a9c31e8b81eeba48064a9dbc337fe5ecd", "record": "recipes/elastic/logstash/8.5.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "elastic/logstash@8.5.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/logstash/8.5.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml", "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/elastic/logstash/8.5.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml", "recipes/elastic/logstash/8.5.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/logstash", "version=8.5.1", "base=default", "valuesProfile=recipes/elastic/logstash/8.5.1/effective-values.yaml", "namespace=default", "releaseName=logstash", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-logstash-8-5-1-ha", "labels": { "sourceType": "helm", "component": "elastic/logstash", "sourceVersion": "8.5.1", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "elastic/logstash", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-logstash:8.5.1@sha256:fd909b18b84b947213f291f209e93f75dcd94dc25324a28211b2afd8960895b3", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "d65903a7c75f9e3cdaed333b6a2daddcca45d3cc7f80ff09e6b7972a90c3aa70", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d65903a7c75f9e3cdaed333b6a2daddcca45d3cc7f80ff09e6b7972a90c3aa70", "record": "recipes/elastic/logstash/8.5.1/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "elastic/logstash@8.5.1/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/logstash/8.5.1/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml", "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/release-objects.yaml", "recipes/elastic/logstash/8.5.1/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml", "recipes/elastic/logstash/8.5.1/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/logstash", "version=8.5.1", "base=ha", "valuesProfile=recipes/elastic/logstash/8.5.1/effective-values-ha.yaml", "namespace=default", "releaseName=logstash", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubOciArgo" ], "minimumSchedulableNodes": 3, "purpose": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname." } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname." } ], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredTopology": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubOciArgo" ], "minimumSchedulableNodes": 3, "purpose": "Logstash HA renders three replicas with required pod anti-affinity across kubernetes.io/hostname." } }, "requirementRefs": [ "target topology" ], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "target topology" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-logstash-8-5-1-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "elastic-metricbeat-8-5-1-default", "labels": { "sourceType": "helm", "component": "elastic/metricbeat", "sourceVersion": "8.5.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "elastic/metricbeat", "version": "8.5.1", "record": "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/elastic-metricbeat:8.5.1@sha256:228176a6c17e791d85afb63c678068aa3b284f6c3515b4c2512c23ebfbd67d9c", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ace18fc8d71b8f719d7cb3374613766f39a6ed935d3b7cd4fcdf67a917d8424a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 14, "digest": "805a258f07a07f1cdef0ee45ee427a06e28cc18380e52368840efeb7b672e939", "digestRole": "canonical-object-set", "digestRecord": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "805a258f07a07f1cdef0ee45ee427a06e28cc18380e52368840efeb7b672e939", "record": "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "elastic/metricbeat@8.5.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/elastic/metricbeat/8.5.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml", "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml", "recipes/elastic/metricbeat/8.5.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=elastic/metricbeat", "version=8.5.1", "base=default", "valuesProfile=recipes/elastic/metricbeat/8.5.1/effective-values.yaml", "namespace=default", "releaseName=metricbeat", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "elasticsearch-master-certs", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml", "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection", "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" } }, { "name": "elasticsearch-master-credentials", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml", "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Metricbeat workloads", "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/elasticsearch-master-certs", "origin": "base", "type": "target-fact", "detail": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection" }, { "id": "default/elasticsearch-master-credentials", "origin": "base", "type": "target-fact", "detail": "Elasticsearch username and password read by the Metricbeat workloads" } ], "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml", "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml" ], "name": "elasticsearch-master-certs", "namespace": "default", "purpose": "CA certificate material mounted by the Metricbeat workloads for their Elasticsearch connection", "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-certs --from-file=ca.crt=" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/elastic-metricbeat-default/receipt.yaml", "runs/live-kind-parity/elastic-metricbeat-default/receipt.yaml" ], "keys": [ "username", "password" ], "name": "elasticsearch-master-credentials", "namespace": "default", "purpose": "Elasticsearch username and password read by the Metricbeat workloads", "sourcePath": "../../revisions/default/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl -n default create secret generic elasticsearch-master-credentials --from-literal=username= --from-literal=password=" } ] }, "requirementRefs": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/elasticsearch-master-certs", "default/elasticsearch-master-credentials" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/elastic-metricbeat-8-5-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-dns-external-dns-1-21-1-default", "labels": { "sourceType": "helm", "component": "external-dns/external-dns", "sourceVersion": "1.21.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "external-dns/external-dns", "version": "1.21.1", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1@sha256:7683722340b073403d7fbb313f139f44d7e01e03f1fbb1606283758876d33bf9", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4a96813e25ba4ec15c68c47d0640ea940551e63f4785243e381f041a49dc2cb8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "764caa006e0e36ed1ad27659090d71a9ca5ff4d671962684b49500971c57ee74", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "764caa006e0e36ed1ad27659090d71a9ca5ff4d671962684b49500971c57ee74", "record": "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-dns/external-dns@1.21.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-dns/external-dns/1.21.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-dns/external-dns", "version=1.21.1", "base=default", "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values.yaml", "namespace=default", "releaseName=external-dns", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-dns-external-dns-1-21-1-dry-run-txt-registry", "labels": { "sourceType": "helm", "component": "external-dns/external-dns", "sourceVersion": "1.21.1", "base": "dry-run-txt-registry" } }, "spec": { "source": { "type": "helm", "name": "external-dns/external-dns", "version": "1.21.1", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1@sha256:7683722340b073403d7fbb313f139f44d7e01e03f1fbb1606283758876d33bf9", "selection": { "name": "dry-run-txt-registry", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" } }, "baseVariant": { "name": "dry-run-txt-registry", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/release-objects.yaml", "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "8e3b831abefa8ca2b8754e4beb16fbc1e369965dc95b8f83e1de76cd8f2a3e62", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "8e3b831abefa8ca2b8754e4beb16fbc1e369965dc95b8f83e1de76cd8f2a3e62", "record": "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-dns/external-dns@1.21.1/dry-run-txt-registry; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-dns/external-dns/1.21.1/publication/flattening-safety-verdict-dry-run-txt-registry.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/release-objects.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/dry-run-txt-registry/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-dns/external-dns", "version=1.21.1", "base=dry-run-txt-registry", "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values-dry-run-txt-registry.yaml", "namespace=default", "releaseName=external-dns", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-dry-run-txt-registry.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-dns-external-dns-1-21-1-no-crds", "labels": { "sourceType": "helm", "component": "external-dns/external-dns", "sourceVersion": "1.21.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "external-dns/external-dns", "version": "1.21.1", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-dns-external-dns:1.21.1@sha256:7683722340b073403d7fbb313f139f44d7e01e03f1fbb1606283758876d33bf9", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "1479961761882b58c3cfcb955197ae178c15def12065e35b72023c25ac1dd7cf", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "1479961761882b58c3cfcb955197ae178c15def12065e35b72023c25ac1dd7cf", "record": "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "external-dns/external-dns@1.21.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-dns/external-dns/1.21.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml", "recipes/external-dns/external-dns/1.21.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-dns/external-dns", "version=1.21.1", "base=no-crds", "valuesProfile=recipes/external-dns/external-dns/1.21.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=external-dns", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-dns-external-dns-1-21-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-5-0-default", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.5.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.5.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.5.0@sha256:3360d8a7d2d83748808b0f4a66969feaa33b305312dcb8bbe956fec08407b001", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "cde00fd0f20069be91d607e11360ee418bc49ecf61e4d319d2e37af3130d8e8e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 42, "digest": "f1c832a9af788c9d2a7a0b066d76a7d8af253d83f5b0fa39c1aa91271230d3db", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f1c832a9af788c9d2a7a0b066d76a7d8af253d83f5b0fa39c1aa91271230d3db", "record": "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.5.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.5.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.5.0", "base=default", "valuesProfile=recipes/external-secrets/external-secrets/2.5.0/effective-values.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "no", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-5-0-no-crds", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.5.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.5.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.5.0@sha256:3360d8a7d2d83748808b0f4a66969feaa33b305312dcb8bbe956fec08407b001", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "bec9b5454faba0fd70ba4db15ccf25a5f560b72e6c73bf1228d5c7df307cbb3b", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "da5857fba93e0394594d7e072b31e3cf28985392b5cc0443730a23b722d7670b", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "da5857fba93e0394594d7e072b31e3cf28985392b5cc0443730a23b722d7670b", "record": "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.5.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.5.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.5.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.5.0", "base=no-crds", "valuesProfile=recipes/external-secrets/external-secrets/2.5.0/effective-values-no-crds.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "acraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "cloudsmithaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterexternalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustergenerators.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterpushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustersecretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "ecrauthorizationtokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "externalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "fakes.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "gcraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "generatorstates.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "githubaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "grafanas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "mfas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "passwords.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "pushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "quayaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "secretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "sshkeys.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "stssessiontokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "uuids.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "vaultdynamicsecrets.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "webhooks.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "acraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "cloudsmithaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterexternalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustergenerators.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterpushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustersecretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "ecrauthorizationtokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "externalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "fakes.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "gcraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "generatorstates.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "githubaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "grafanas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "mfas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "passwords.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "pushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "quayaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "secretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "sshkeys.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "stssessiontokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "uuids.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "vaultdynamicsecrets.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "webhooks.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/external-secrets/external-secrets/2.5.0/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "acraccesstokens.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "acraccesstokens.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-5-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "no", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-7-0-default", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.7.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.7.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.7.0@sha256:053f6e17323888a20473408f9310168abdbce7b19682d3b9ed7ddb6cc5097a34", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "3664ff583f62445868945f0ce66e2eedd5d301d45e0ba5852be20bad5858a2fb", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 43, "digest": "33f0d74470d5f0a3affc7589a1929d5dc6cd1a30b557ccfb624545820a0a0d11", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "33f0d74470d5f0a3affc7589a1929d5dc6cd1a30b557ccfb624545820a0a0d11", "record": "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.7.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.7.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.7.0", "base=default", "valuesProfile=recipes/external-secrets/external-secrets/2.7.0/effective-values.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-7-0-no-crds", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.7.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.7.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.7.0@sha256:053f6e17323888a20473408f9310168abdbce7b19682d3b9ed7ddb6cc5097a34", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "8181602390f2016ee037317a4e288b6dab4155c1578b2419e768915f7e66ca9e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "63eae27464b7c2c352d5b4fd8c1c7aa21c6e04cf024ca530206b0f6b2d9819d1", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "63eae27464b7c2c352d5b4fd8c1c7aa21c6e04cf024ca530206b0f6b2d9819d1", "record": "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.7.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.7.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.7.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.7.0", "base=no-crds", "valuesProfile=recipes/external-secrets/external-secrets/2.7.0/effective-values-no-crds.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "acraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "cloudsmithaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clusterexternalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clustergenerators.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clusterpushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clustersecretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "ecrauthorizationtokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "externalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "fakes.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "gcraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "generatorstates.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "githubaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "grafanas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "mfas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "passwords.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "pushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "quayaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "secretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "sshkeys.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "stssessiontokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "uuids.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "vaultdynamicsecrets.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "webhooks.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "acraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "cloudsmithaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterexternalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustergenerators.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterpushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustersecretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "ecrauthorizationtokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "externalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "fakes.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "gcraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "generatorstates.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "githubaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "grafanas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "mfas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "passwords.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "pushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "quayaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "secretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "sshkeys.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "stssessiontokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "uuids.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "vaultdynamicsecrets.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "webhooks.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "acraccesstokens.generators.external-secrets.io", "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "acraccesstokens.generators.external-secrets.io", "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-7-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-8-0-default", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.8.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.8.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.8.0@sha256:3d807ceebf3de0146dddfa1de3b024139f5fac3869877a2a57ddd1d9550f228c", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "7f044d78a922a09f7cc51f6fff2409fe0ce59d903e0ae2a309eb05dd98d02df7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 44, "digest": "bb3555fb22fc50b3cebf8a96068d20a887fcf58fc52cb3785704928cdaf40be3", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bb3555fb22fc50b3cebf8a96068d20a887fcf58fc52cb3785704928cdaf40be3", "record": "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.8.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.8.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.8.0", "base=default", "valuesProfile=recipes/external-secrets/external-secrets/2.8.0/effective-values.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "external-secrets-external-secrets-2-8-0-no-crds", "labels": { "sourceType": "helm", "component": "external-secrets/external-secrets", "sourceVersion": "2.8.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "external-secrets/external-secrets", "version": "2.8.0", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/external-secrets-external-secrets:2.8.0@sha256:3d807ceebf3de0146dddfa1de3b024139f5fac3869877a2a57ddd1d9550f228c", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "c00c2f981b20e702bbbd37d8622a9d5fb7de408b3ce8e3e101aaf437c3e7eab5", "digestRole": "helm-variant-revision", "digestRecord": "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "75ce0bfaa1c4ed14044edbd406eaa256987967a395676e2902a280e9abfa3304", "digestRole": "canonical-object-set", "digestRecord": "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "75ce0bfaa1c4ed14044edbd406eaa256987967a395676e2902a280e9abfa3304", "record": "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "external-secrets/external-secrets@2.8.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/external-secrets/external-secrets/2.8.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml", "recipes/external-secrets/external-secrets/2.8.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=external-secrets/external-secrets", "version=2.8.0", "base=no-crds", "valuesProfile=recipes/external-secrets/external-secrets/2.8.0/effective-values-no-crds.yaml", "namespace=external-secrets", "releaseName=external-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "acraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "cloudsmithaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clusterexternalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clustergenerators.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clusterpushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "clustersecretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "ecrauthorizationtokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "externalsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "fakes.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "gcraccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "generatorstates.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "githubaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "gitlabdeploytokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gitlabdeploytokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "grafanas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "mfas.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "passwords.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "pushsecrets.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "quayaccesstokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "secretstores.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "sshkeys.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "stssessiontokens.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "uuids.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "vaultdynamicsecrets.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "webhooks.generators.external-secrets.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } }, { "name": "external-secrets-webhook", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "acraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "cloudsmithaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterexternalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustergenerators.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clusterpushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "clustersecretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "ecrauthorizationtokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "externalsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "fakes.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "gcraccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "generatorstates.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "githubaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "gitlabdeploytokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "grafanas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "mfas.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "passwords.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "pushsecrets.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "quayaccesstokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "secretstores.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "sshkeys.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "stssessiontokens.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "uuids.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "vaultdynamicsecrets.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "webhooks.generators.external-secrets.io", "origin": "base", "type": "target-fact", "detail": "External Secrets CRD managed outside this no-crds base" }, { "id": "external-secrets/external-secrets-webhook", "origin": "base", "type": "target-fact", "detail": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply" } ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "acraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudsmithaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterexternalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustergenerators.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustersecretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ecrauthorizationtokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "externalsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "fakes.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gcraccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatorstates.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "githubaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "gitlabdeploytokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "grafanas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mfas.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "passwords.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pushsecrets.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "quayaccesstokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "secretstores.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "sshkeys.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "stssessiontokens.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "uuids.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "vaultdynamicsecrets.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "webhooks.generators.external-secrets.io", "purpose": "External Secrets CRD managed outside this no-crds base", "sourceVariant": "default" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [], "name": "external-secrets-webhook", "namespace": "external-secrets", "purpose": "Rendered webhook Secret separated by installer and populated by the cert-controller after apply", "sourceVariant": "default", "suggestedSource": "kubectl -n external-secrets apply -f /out/secrets/secret-external-secrets-external-secrets-webhook.yaml" } ] }, "requirementRefs": [ "acraccesstokens.generators.external-secrets.io", "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "gitlabdeploytokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "acraccesstokens.generators.external-secrets.io", "beyondtrustworkloadcredentialsdynamicsecrets.generators.external-secrets.io", "cloudsmithaccesstokens.generators.external-secrets.io", "clusterexternalsecrets.external-secrets.io", "clustergenerators.generators.external-secrets.io", "clusterpushsecrets.external-secrets.io", "clustersecretstores.external-secrets.io", "ecrauthorizationtokens.generators.external-secrets.io", "externalsecrets.external-secrets.io", "fakes.generators.external-secrets.io", "gcraccesstokens.generators.external-secrets.io", "generatorstates.generators.external-secrets.io", "githubaccesstokens.generators.external-secrets.io", "gitlabdeploytokens.generators.external-secrets.io", "grafanas.generators.external-secrets.io", "mfas.generators.external-secrets.io", "passwords.generators.external-secrets.io", "pushsecrets.external-secrets.io", "quayaccesstokens.generators.external-secrets.io", "secretstores.external-secrets.io", "sshkeys.generators.external-secrets.io", "stssessiontokens.generators.external-secrets.io", "uuids.generators.external-secrets.io", "vaultdynamicsecrets.generators.external-secrets.io", "webhooks.generators.external-secrets.io", "external-secrets/external-secrets-webhook" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/external-secrets-external-secrets-2-8-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "fairwinds-stable-goldilocks-10-3-0-default", "labels": { "sourceType": "helm", "component": "fairwinds-stable/goldilocks", "sourceVersion": "10.3.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "fairwinds-stable/goldilocks", "version": "10.3.0", "record": "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-goldilocks:10.3.0@sha256:b16c4fca4bf8fa04db89891d03a0e4122715e3cfdc9356ef4bed6cd191199852", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "fb050d20cf8af09d730bffb1e7fe169792fdf653396cdafbe29947586920f25c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "5939f53dfe4e6c888630fc4c30fcc478e4786a56cb0092139c418510da17d7a5", "digestRole": "canonical-object-set", "digestRecord": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5939f53dfe4e6c888630fc4c30fcc478e4786a56cb0092139c418510da17d7a5", "record": "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "fairwinds-stable/goldilocks@10.3.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml", "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml", "recipes/fairwinds-stable/goldilocks/10.3.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=fairwinds-stable/goldilocks", "version=10.3.0", "base=default", "valuesProfile=recipes/fairwinds-stable/goldilocks/10.3.0/effective-values.yaml", "namespace=default", "releaseName=goldilocks", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-goldilocks-10-3-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "fairwinds-stable-vpa-4-11-0-default", "labels": { "sourceType": "helm", "component": "fairwinds-stable/vpa", "sourceVersion": "4.11.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "fairwinds-stable/vpa", "version": "4.11.0", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-vpa:4.11.0@sha256:449c4a96412aaf799622daab235efd8800f9700c0bd5b36c9523d95756e9fc8f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b50a13250baea58dab9c39e8399f938139565c13e076f0aa85b91b7b9bda6b44", "digestRole": "helm-variant-revision", "digestRecord": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 28, "digest": "9fc49375853347271950b87624ed5215a97a56370dc361b14d22f7efb157a48b", "digestRole": "canonical-object-set", "digestRecord": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9fc49375853347271950b87624ed5215a97a56370dc361b14d22f7efb157a48b", "record": "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "fairwinds-stable/vpa@4.11.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=fairwinds-stable/vpa", "version=4.11.0", "base=default", "valuesProfile=recipes/fairwinds-stable/vpa/4.11.0/effective-values.yaml", "namespace=default", "releaseName=vpa", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "vpa-tls-secret", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-secret", "namespace": "default", "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/vpa-tls-secret", "origin": "base", "type": "target-fact", "detail": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } ], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-secret", "namespace": "default", "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } ] }, "requirementRefs": [ "default/vpa-tls-secret" ], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/vpa-tls-secret" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "fairwinds-stable-vpa-4-11-0-no-crds", "labels": { "sourceType": "helm", "component": "fairwinds-stable/vpa", "sourceVersion": "4.11.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "fairwinds-stable/vpa", "version": "4.11.0", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fairwinds-stable-vpa:4.11.0@sha256:449c4a96412aaf799622daab235efd8800f9700c0bd5b36c9523d95756e9fc8f", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "bf99b3e1df92e9ba5da5ab284c98749da9618c5c55358dff3021639057119187", "digestRole": "canonical-object-set", "digestRecord": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bf99b3e1df92e9ba5da5ab284c98749da9618c5c55358dff3021639057119187", "record": "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "fairwinds-stable/vpa@4.11.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml", "recipes/fairwinds-stable/vpa/4.11.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=fairwinds-stable/vpa", "version=4.11.0", "base=no-crds", "valuesProfile=recipes/fairwinds-stable/vpa/4.11.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=vpa", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "purpose": "VPA CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "verticalpodautoscalers.autoscaling.k8s.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "verticalpodautoscalers.autoscaling.k8s.io", "purpose": "VPA CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "vpa-tls-secret", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-secret", "namespace": "default", "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "origin": "base", "type": "target-fact", "detail": "VPA CRD managed outside this no-crds base" }, { "id": "verticalpodautoscalers.autoscaling.k8s.io", "origin": "base", "type": "target-fact", "detail": "VPA CRD managed outside this no-crds base" }, { "id": "default/vpa-tls-secret", "origin": "base", "type": "target-fact", "detail": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } ], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "purpose": "VPA CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "verticalpodautoscalers.autoscaling.k8s.io", "purpose": "VPA CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/fairwinds-stable/vpa/4.11.0/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "vpa-tls-secret", "namespace": "default", "purpose": "VPA admission controller webhook TLS material normally created by Helm hook lifecycle" } ] }, "requirementRefs": [ "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "verticalpodautoscalers.autoscaling.k8s.io", "default/vpa-tls-secret" ], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "verticalpodautoscalercheckpoints.autoscaling.k8s.io", "verticalpodautoscalers.autoscaling.k8s.io", "default/vpa-tls-secret" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/fairwinds-stable-vpa-4-11-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "falcosecurity-falco-9-0-0-default", "labels": { "sourceType": "helm", "component": "falcosecurity/falco", "sourceVersion": "9.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "falcosecurity/falco", "version": "9.0.0", "record": "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/falcosecurity-falco:9.0.0@sha256:0a17c36c302c5e5fb8cd13ced42c8c72f6ed5c59fa06ab78b63c5e9a9fb32bcf", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "6af7e1db0ab2bbc67fd71782b8925f2fbf40ef47382a46f68010f1d1a452da27", "digestRole": "helm-variant-revision", "digestRecord": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "e417f53227667413d5d51b89157f00c603af2cd613e282816c27df69408f7648", "digestRole": "canonical-object-set", "digestRecord": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e417f53227667413d5d51b89157f00c603af2cd613e282816c27df69408f7648", "record": "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "falcosecurity/falco@9.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/falcosecurity/falco/9.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml", "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml", "recipes/falcosecurity/falco/9.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=falcosecurity/falco", "version=9.0.0", "base=default", "valuesProfile=recipes/falcosecurity/falco/9.0.0/effective-values.yaml", "namespace=default", "releaseName=falco", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falco-9-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "falcosecurity-falcosidekick-0-13-1-default", "labels": { "sourceType": "helm", "component": "falcosecurity/falcosidekick", "sourceVersion": "0.13.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "falcosecurity/falcosidekick", "version": "0.13.1", "record": "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/falcosecurity-falcosidekick:0.13.1@sha256:7fb6d41ff5721ca4df26959bda2c80022a2a3cc70b0e4e4cc8f8f878f7cc11d5", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "6953bde8326fa3418454da01f94d4433ff0f4ba9a2ff5e99d444fbd638537d5e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "7a657f26e36fdc7b72d0ec1ba0831010739e3f84677af99e7397a500a414d0b4", "digestRole": "canonical-object-set", "digestRecord": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "7a657f26e36fdc7b72d0ec1ba0831010739e3f84677af99e7397a500a414d0b4", "record": "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "falcosecurity/falcosidekick@0.13.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/falcosecurity/falcosidekick/0.13.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml", "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml", "recipes/falcosecurity/falcosidekick/0.13.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=falcosecurity/falcosidekick", "version=0.13.1", "base=default", "valuesProfile=recipes/falcosecurity/falcosidekick/0.13.1/effective-values.yaml", "namespace=default", "releaseName=falcosidekick", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/falcosecurity-falcosidekick-0-13-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "fluent-fluent-bit-0-57-6-default", "labels": { "sourceType": "helm", "component": "fluent/fluent-bit", "sourceVersion": "0.57.6", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "fluent/fluent-bit", "version": "0.57.6", "record": "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fluent-fluent-bit:0.57.6@sha256:f16e4d5c2df83b3ccd8629fbcab340b84a499303d5308eedac009ed8b40ef634", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "7a0afff1b91c5f0be50f51448c412666791343ae14237ff12fdee8b5dc3e3724", "digestRole": "helm-variant-revision", "digestRecord": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "464d9136c0ba9e845fd81c1dbea556e717d47930d7cb58755de67ead7f8f2a2b", "digestRole": "canonical-object-set", "digestRecord": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "464d9136c0ba9e845fd81c1dbea556e717d47930d7cb58755de67ead7f8f2a2b", "record": "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "fluent/fluent-bit@0.57.6/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/fluent/fluent-bit/0.57.6/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/release-objects.yaml", "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "recipes/fluent/fluent-bit/0.57.6/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=fluent/fluent-bit", "version=0.57.6", "base=default", "valuesProfile=recipes/fluent/fluent-bit/0.57.6/effective-values.yaml", "namespace=default", "releaseName=fluent-bit", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "hook-delete-policy" }, { "id": "explicit-test-check", "origin": "base", "type": "lifecycle-action", "detail": "Connectivity tests are checks against the installed target, not render-time behavior." } ], "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Your cluster — at uninstall, automatically", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/fluent-fluent-bit/default/latest.yaml" ] }, { "id": "explicit-test-check", "requirementRefs": [ "explicit-test-check" ], "phase": "observe", "proposedActor": "CI or operator", "proposedMechanism": "Connectivity tests are checks against the installed target, not render-time behavior.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/fluent-fluent-bit/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/fluent/fluent-bit/0.57.6/helm-pain-report.yaml", "runs/hook-lifecycle/fluent-fluent-bit/default/latest/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/fluent-fluent-bit-0-57-6-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "fluent-fluentd-0-5-3-default", "labels": { "sourceType": "helm", "component": "fluent/fluentd", "sourceVersion": "0.5.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "fluent/fluentd", "version": "0.5.3", "record": "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/fluent-fluentd:0.5.3@sha256:62d68890785b4a34ec81787fc8fb1e4d093fb0a86b7482404e91e3d44cf3513b", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "da0c89124a9c013296402d55cfce0dfe18732e5d0b166bdd81d0da8658736db0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "9d7c1ec5d0f201623aa61a0fa2adcb477bac4b7366f5a9b87d9b4a3754c2491a", "digestRole": "canonical-object-set", "digestRecord": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9d7c1ec5d0f201623aa61a0fa2adcb477bac4b7366f5a9b87d9b4a3754c2491a", "record": "recipes/fluent/fluentd/0.5.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "fluent/fluentd@0.5.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/fluent/fluentd/0.5.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml", "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/fluent/fluentd/0.5.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml", "recipes/fluent/fluentd/0.5.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=fluent/fluentd", "version=0.5.3", "base=default", "valuesProfile=recipes/fluent/fluentd/0.5.3/effective-values.yaml", "namespace=default", "releaseName=fluentd", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/fluent-fluentd-0-5-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "gatekeeper-gatekeeper-3-22-2-default", "labels": { "sourceType": "helm", "component": "gatekeeper/gatekeeper", "sourceVersion": "3.22.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "gatekeeper/gatekeeper", "version": "3.22.2", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2@sha256:ce4877c260225419e22d820f9d15652ad48ed5f205117099e88abb3f590241a5", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "57649ce2ff654a2900d594b5aac09186f35e6349fd72d333922229b7d2c6e49a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 30, "digest": "757e7fe97f5331bd964463ed228d147bdc090f3bb6d7c34b319522124efd2e5d", "digestRole": "canonical-object-set", "digestRecord": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "757e7fe97f5331bd964463ed228d147bdc090f3bb6d7c34b319522124efd2e5d", "record": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "gatekeeper/gatekeeper@3.22.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/gatekeeper/gatekeeper/3.22.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=gatekeeper/gatekeeper", "version=3.22.2", "base=default", "valuesProfile=recipes/gatekeeper/gatekeeper/3.22.2/effective-values.yaml", "namespace=default", "releaseName=gatekeeper", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "CRD and admission-webhook prerequisites must be checked before apply." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "The pinned rendered CRD route must be recorded as a target-aware operation before stronger upgrade claims." } ], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "CRD and admission-webhook prerequisites must be checked before apply.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/gatekeeper-gatekeeper/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/gatekeeper/gatekeeper/3.22.2/helm-pain-report.yaml", "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The pinned rendered CRD route must be recorded as a target-aware operation before stronger upgrade claims.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/gatekeeper-gatekeeper/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/gatekeeper/gatekeeper/3.22.2/helm-pain-report.yaml", "runs/hook-lifecycle/gatekeeper-gatekeeper/default/latest/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "gatekeeper-gatekeeper-3-22-2-no-crds", "labels": { "sourceType": "helm", "component": "gatekeeper/gatekeeper", "sourceVersion": "3.22.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "gatekeeper/gatekeeper", "version": "3.22.2", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gatekeeper-gatekeeper:3.22.2@sha256:ce4877c260225419e22d820f9d15652ad48ed5f205117099e88abb3f590241a5", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "ab5488411d047ab53e8c5c5cece3730c66ce7c8f9cb3ff9da1135d64eca97e1c", "digestRole": "canonical-object-set", "digestRecord": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ab5488411d047ab53e8c5c5cece3730c66ce7c8f9cb3ff9da1135d64eca97e1c", "record": "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "gatekeeper/gatekeeper@3.22.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/gatekeeper/gatekeeper/3.22.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml", "recipes/gatekeeper/gatekeeper/3.22.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=gatekeeper/gatekeeper", "version=3.22.2", "base=no-crds", "valuesProfile=recipes/gatekeeper/gatekeeper/3.22.2/effective-values-no-crds.yaml", "namespace=default", "releaseName=gatekeeper", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "assign.mutations.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assign.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "assignimage.mutations.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assignimage.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "assignmetadata.mutations.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assignmetadata.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "configs.config.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "configs.config.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "configpodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "configpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "connections.connection.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "connections.connection.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "connectionpodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "connectionpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "constraintpodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constraintpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "constrainttemplates.templates.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constrainttemplates.templates.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "constrainttemplatepodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constrainttemplatepodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "expansiontemplate.expansion.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "expansiontemplate.expansion.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "expansiontemplatepodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "expansiontemplatepodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "modifyset.mutations.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "modifyset.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "mutatorpodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mutatorpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "providers.externaldata.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "providers.externaldata.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "providerpodstatuses.status.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "providerpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "syncsets.syncset.gatekeeper.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "syncsets.syncset.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "assign.mutations.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "assignimage.mutations.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "assignmetadata.mutations.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "configs.config.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "configpodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "connections.connection.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "connectionpodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "constraintpodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "constrainttemplates.templates.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "constrainttemplatepodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "expansiontemplate.expansion.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "expansiontemplatepodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "modifyset.mutations.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "mutatorpodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "providers.externaldata.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "providerpodstatuses.status.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" }, { "id": "syncsets.syncset.gatekeeper.sh", "origin": "base", "type": "target-fact", "detail": "Gatekeeper CRD managed outside this no-crds base" } ], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assign.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assignimage.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "assignmetadata.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "configs.config.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "configpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "connections.connection.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "connectionpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constraintpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constrainttemplates.templates.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "constrainttemplatepodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "expansiontemplate.expansion.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "expansiontemplatepodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "modifyset.mutations.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mutatorpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "providers.externaldata.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "providerpodstatuses.status.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "syncsets.syncset.gatekeeper.sh", "purpose": "Gatekeeper CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install Gatekeeper CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/gatekeeper/gatekeeper/3.22.2/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "assign.mutations.gatekeeper.sh", "assignimage.mutations.gatekeeper.sh", "assignmetadata.mutations.gatekeeper.sh", "configs.config.gatekeeper.sh", "configpodstatuses.status.gatekeeper.sh", "connections.connection.gatekeeper.sh", "connectionpodstatuses.status.gatekeeper.sh", "constraintpodstatuses.status.gatekeeper.sh", "constrainttemplates.templates.gatekeeper.sh", "constrainttemplatepodstatuses.status.gatekeeper.sh", "expansiontemplate.expansion.gatekeeper.sh", "expansiontemplatepodstatuses.status.gatekeeper.sh", "modifyset.mutations.gatekeeper.sh", "mutatorpodstatuses.status.gatekeeper.sh", "providers.externaldata.gatekeeper.sh", "providerpodstatuses.status.gatekeeper.sh", "syncsets.syncset.gatekeeper.sh" ], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "assign.mutations.gatekeeper.sh", "assignimage.mutations.gatekeeper.sh", "assignmetadata.mutations.gatekeeper.sh", "configs.config.gatekeeper.sh", "configpodstatuses.status.gatekeeper.sh", "connections.connection.gatekeeper.sh", "connectionpodstatuses.status.gatekeeper.sh", "constraintpodstatuses.status.gatekeeper.sh", "constrainttemplates.templates.gatekeeper.sh", "constrainttemplatepodstatuses.status.gatekeeper.sh", "expansiontemplate.expansion.gatekeeper.sh", "expansiontemplatepodstatuses.status.gatekeeper.sh", "modifyset.mutations.gatekeeper.sh", "mutatorpodstatuses.status.gatekeeper.sh", "providers.externaldata.gatekeeper.sh", "providerpodstatuses.status.gatekeeper.sh", "syncsets.syncset.gatekeeper.sh" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/gatekeeper-gatekeeper-3-22-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "gitlab-gitlab-runner-0-89-0-default", "labels": { "sourceType": "helm", "component": "gitlab/gitlab-runner", "sourceVersion": "0.89.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "gitlab/gitlab-runner", "version": "0.89.0", "record": "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/gitlab-gitlab-runner:0.89.0@sha256:859e448412141120ea26e90c4d80fb772755dd6bc5f579a70ddd3c321da5fa7a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4bc2da6b8dd76be52d58a638724a529d7dd3be4a787933bf7c0bbe3d0ecbbc7a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 2, "digest": "ad0d78b72ba8c9c6d896ee2faf620db82e9c52d2794f3dbbcbe6f3705c43d95e", "digestRole": "canonical-object-set", "digestRecord": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ad0d78b72ba8c9c6d896ee2faf620db82e9c52d2794f3dbbcbe6f3705c43d95e", "record": "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "gitlab/gitlab-runner@0.89.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/gitlab/gitlab-runner/0.89.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml", "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml", "recipes/gitlab/gitlab-runner/0.89.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=gitlab/gitlab-runner", "version=0.89.0", "base=default", "valuesProfile=recipes/gitlab/gitlab-runner/0.89.0/effective-values.yaml", "namespace=default", "releaseName=gitlab-runner", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/gitlab-gitlab-runner-0-89-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "watch", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-alloy-1-11-0-default", "labels": { "sourceType": "helm", "component": "grafana/alloy", "sourceVersion": "1.11.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/alloy", "version": "1.11.0", "record": "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-alloy:1.11.0@sha256:01110b6ce36bc7f75b9c638d85b49ffc86fe7989016966092b19f3bd04ae8808", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "6e47e2887d21ca5b66d17a96cd520fe3e7bf486c0bc2d566f8ed0fc0ff34929a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/alloy/1.11.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/alloy/1.11.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/alloy/1.11.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "d6e75fca48c764892e27664e0137148e30e34428763f411ef4eca669720e2ba6", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/alloy/1.11.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d6e75fca48c764892e27664e0137148e30e34428763f411ef4eca669720e2ba6", "record": "recipes/grafana/alloy/1.11.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "grafana/alloy@1.11.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/alloy/1.11.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml", "recipes/grafana/alloy/1.11.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/alloy/1.11.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml", "recipes/grafana/alloy/1.11.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/alloy", "version=1.11.0", "base=default", "valuesProfile=recipes/grafana/alloy/1.11.0/effective-values.yaml", "namespace=alloy", "releaseName=alloy", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-11-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-alloy-1-8-2-default", "labels": { "sourceType": "helm", "component": "grafana/alloy", "sourceVersion": "1.8.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/alloy", "version": "1.8.2", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-alloy:1.8.2@sha256:cc9dcba1e9400579cac0968b166baf86e98b80d3394993171616ea8374eeb314", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "2a3257cb0501718709370f54310d6de3ef9a411225df0165eb2599ac90b51b8c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/alloy/1.8.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "984319325f620b099f091df4c45ef851f0dd7593526f146d5271dbf477f7f37b", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/alloy/1.8.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "984319325f620b099f091df4c45ef851f0dd7593526f146d5271dbf477f7f37b", "record": "recipes/grafana/alloy/1.8.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "grafana/alloy@1.8.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/alloy/1.8.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml", "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/alloy/1.8.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml", "recipes/grafana/alloy/1.8.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/alloy", "version=1.8.2", "base=default", "valuesProfile=recipes/grafana/alloy/1.8.2/effective-values.yaml", "namespace=default", "releaseName=alloy", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "blocked" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-alloy-1-8-2-no-crds", "labels": { "sourceType": "helm", "component": "grafana/alloy", "sourceVersion": "1.8.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "grafana/alloy", "version": "1.8.2", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-alloy:1.8.2@sha256:cc9dcba1e9400579cac0968b166baf86e98b80d3394993171616ea8374eeb314", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "3284915e4cee6101e8279e10a5ef11937e6d860b01b95549079d809f64a17e22", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3284915e4cee6101e8279e10a5ef11937e6d860b01b95549079d809f64a17e22", "record": "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "grafana/alloy@1.8.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/alloy/1.8.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml", "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml", "recipes/grafana/alloy/1.8.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/alloy", "version=1.8.2", "base=no-crds", "valuesProfile=recipes/grafana/alloy/1.8.2/effective-values-no-crds.yaml", "namespace=default", "releaseName=alloy", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-alloy-1-8-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "blocked" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-grafana-10-5-15-existing-secret-ingress", "labels": { "sourceType": "helm", "component": "grafana/grafana", "sourceVersion": "10.5.15", "base": "existing-secret-ingress" } }, "spec": { "source": { "type": "helm", "name": "grafana/grafana", "version": "10.5.15", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-grafana:10.5.15@sha256:fc038da08ab8544cdf8d3c08fd981e542de4d5e0f8ae61e21f163a9eb9956cc3", "selection": { "name": "existing-secret-ingress", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" } }, "baseVariant": { "name": "existing-secret-ingress", "revision": "r001", "digest": "e09cf943695cd0a968513386e745382ef0dc99be69991e6021ed56c9d0bf1488", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "04b1fc4abd47d12c2eef1e06e7f4dc7cb2dd6ffd639a7a8967bda1c98a00fb60", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "04b1fc4abd47d12c2eef1e06e7f4dc7cb2dd6ffd639a7a8967bda1c98a00fb60", "record": "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/grafana@10.5.15/existing-secret-ingress; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/grafana/10.5.15/publication/flattening-safety-verdict-existing-secret-ingress.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml", "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/release-objects.yaml", "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml", "recipes/grafana/grafana/10.5.15/revisions/existing-secret-ingress/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/grafana", "version=10.5.15", "base=existing-secret-ingress", "valuesProfile=recipes/grafana/grafana/10.5.15/effective-values-existing-secret-ingress.yaml", "namespace=grafana", "releaseName=grafana", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "grafana-admin", "type": "requiredSecrets", "required": true, "details": { "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin", "namespace": "grafana", "purpose": "Grafana administrator username and password" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "grafana/grafana-admin", "origin": "base", "type": "target-fact", "detail": "Grafana administrator username and password" } ], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin", "namespace": "grafana", "purpose": "Grafana administrator username and password" } ] }, "requirementRefs": [ "grafana/grafana-admin" ], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "grafana/grafana-admin" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-existing-secret-ingress.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-grafana-10-5-15-static-passwords", "labels": { "sourceType": "helm", "component": "grafana/grafana", "sourceVersion": "10.5.15", "base": "static-passwords" } }, "spec": { "source": { "type": "helm", "name": "grafana/grafana", "version": "10.5.15", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-grafana:10.5.15@sha256:fc038da08ab8544cdf8d3c08fd981e542de4d5e0f8ae61e21f163a9eb9956cc3", "selection": { "name": "static-passwords", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" } }, "baseVariant": { "name": "static-passwords", "revision": "r001", "digest": "af8b2f7687eba631899ec64b6b64fc05422e5402eaad15f698cfe883f90a9b4e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "893351c9b8cad0a10b0176a946bf514a76c5895bdb2d88a31bdd53a94288066d", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "893351c9b8cad0a10b0176a946bf514a76c5895bdb2d88a31bdd53a94288066d", "record": "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/grafana@10.5.15/static-passwords; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/grafana/10.5.15/publication/flattening-safety-verdict-static-passwords.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml", "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/release-objects.yaml", "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml", "recipes/grafana/grafana/10.5.15/revisions/static-passwords/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/grafana", "version=10.5.15", "base=static-passwords", "valuesProfile=recipes/grafana/grafana/10.5.15/effective-values.yaml", "namespace=grafana", "releaseName=grafana", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-grafana-10-5-15-static-passwords.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven-with-watch" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-loki-7-0-0-simple-scalable-minio", "labels": { "sourceType": "helm", "component": "grafana/loki", "sourceVersion": "7.0.0", "base": "simple-scalable-minio" } }, "spec": { "source": { "type": "helm", "name": "grafana/loki", "version": "7.0.0", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-loki:7.0.0@sha256:c89f127344879cdb6c7e4033735bcde8eaca3257d5c16bdcca89aad2a0f602da", "selection": { "name": "simple-scalable-minio", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" } }, "baseVariant": { "name": "simple-scalable-minio", "revision": "r001", "digest": "8fbbaca079a979957bd8a1788f3a4f493432dfd5fb133d8e9ae05000cbd13140", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/object-inventory.yaml", "objectCount": 33, "digest": "91787d0999a776a5b32de6fa06264eb4ba43bc520a66f82234a07cdf94c2f207", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "91787d0999a776a5b32de6fa06264eb4ba43bc520a66f82234a07cdf94c2f207", "record": "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/loki@7.0.0/simple-scalable-minio; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/loki/7.0.0/publication/flattening-safety-verdict-simple-scalable-minio.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml", "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/release-objects.yaml", "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml", "recipes/grafana/loki/7.0.0/revisions/simple-scalable-minio/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/loki", "version=7.0.0", "base=simple-scalable-minio", "valuesProfile=recipes/grafana/loki/7.0.0/effective-values-simple-scalable-minio.yaml", "namespace=loki", "releaseName=loki", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-simple-scalable-minio.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-loki-7-0-0-single-binary-filesystem", "labels": { "sourceType": "helm", "component": "grafana/loki", "sourceVersion": "7.0.0", "base": "single-binary-filesystem" } }, "spec": { "source": { "type": "helm", "name": "grafana/loki", "version": "7.0.0", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-loki:7.0.0@sha256:c89f127344879cdb6c7e4033735bcde8eaca3257d5c16bdcca89aad2a0f602da", "selection": { "name": "single-binary-filesystem", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" } }, "baseVariant": { "name": "single-binary-filesystem", "revision": "r001", "digest": "2021a326aa0034593a1eadecce34863923ca5c5f4a76c57c21bde36800033040", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "6c1e4c38271f2c48cb66ac6e39be8643524e774fec8cf363875c66bf3ea2bb30", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6c1e4c38271f2c48cb66ac6e39be8643524e774fec8cf363875c66bf3ea2bb30", "record": "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/loki@7.0.0/single-binary-filesystem; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/loki/7.0.0/publication/flattening-safety-verdict-single-binary-filesystem.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml", "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/release-objects.yaml", "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml", "recipes/grafana/loki/7.0.0/revisions/single-binary-filesystem/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/loki", "version=7.0.0", "base=single-binary-filesystem", "valuesProfile=recipes/grafana/loki/7.0.0/effective-values.yaml", "namespace=loki", "releaseName=loki", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-0-0-single-binary-filesystem.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-loki-7-1-0-default", "labels": { "sourceType": "helm", "component": "grafana/loki", "sourceVersion": "7.1.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/loki", "version": "7.1.0", "record": "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-loki:7.1.0@sha256:339ccdc3af897709b0749b5d5e197dec640081870b4f369fd3a5ca0617bd7ce6", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ee7141e2859713740d0d88e971d2d5970b967841311fc67ce39cdf94f2af0e2e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/loki/7.1.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/loki/7.1.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/loki/7.1.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 19, "digest": "2e25c21e656867877b5211bfb1914d335806e76df455a78f72e7ec7f8bd8b9ff", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/loki/7.1.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2e25c21e656867877b5211bfb1914d335806e76df455a78f72e7ec7f8bd8b9ff", "record": "recipes/grafana/loki/7.1.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/loki@7.1.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/loki/7.1.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml", "recipes/grafana/loki/7.1.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/loki/7.1.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml", "recipes/grafana/loki/7.1.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/loki", "version=7.1.0", "base=default", "valuesProfile=recipes/grafana/loki/7.1.0/effective-values-single-binary-filesystem.yaml", "namespace=loki", "releaseName=loki", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-loki-7-1-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-promtail-6-17-1-default", "labels": { "sourceType": "helm", "component": "grafana/promtail", "sourceVersion": "6.17.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/promtail", "version": "6.17.1", "record": "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-promtail:6.17.1@sha256:94c1d1c38ab69b006974816eded3380ec3e3a6a042398f8214615d42fb79f647", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "1e6ae5d174e1afc3eb7fe873f759fa33355584538d34b30327736f6a384ce430", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/promtail/6.17.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "06ff3623536aeca2cb083040a0b0c22d6627e57cd6600f3f3482dd1e7d56eb35", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/promtail/6.17.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "06ff3623536aeca2cb083040a0b0c22d6627e57cd6600f3f3482dd1e7d56eb35", "record": "recipes/grafana/promtail/6.17.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "grafana/promtail@6.17.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/promtail/6.17.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml", "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/promtail/6.17.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml", "recipes/grafana/promtail/6.17.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/promtail", "version=6.17.1", "base=default", "valuesProfile=recipes/grafana/promtail/6.17.1/effective-values.yaml", "namespace=default", "releaseName=promtail", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-promtail-6-17-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-pyroscope-2-0-2-default", "labels": { "sourceType": "helm", "component": "grafana/pyroscope", "sourceVersion": "2.0.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/pyroscope", "version": "2.0.2", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2@sha256:e62d4337c210afe39b013694e528b68cc15b98e9cd3735dbcf40535b11874fab", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b997f5f154951092ba2d583bce6a1f00e8ff89ae2c0dfd28b096df2fbfe99945", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "24d78308d5476731eefba9ac71cee442cf9aeb21f16443557d9a6d9574449df5", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "24d78308d5476731eefba9ac71cee442cf9aeb21f16443557d9a6d9574449df5", "record": "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/pyroscope@2.0.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/pyroscope/2.0.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/pyroscope", "version=2.0.2", "base=default", "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values.yaml", "namespace=default", "releaseName=pyroscope", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-pyroscope-2-0-2-ha", "labels": { "sourceType": "helm", "component": "grafana/pyroscope", "sourceVersion": "2.0.2", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "grafana/pyroscope", "version": "2.0.2", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2@sha256:e62d4337c210afe39b013694e528b68cc15b98e9cd3735dbcf40535b11874fab", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "4525b9a04718d1de62dbc12a161ec2f0cd119a36d68f69c0f481400d43e031cf", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4525b9a04718d1de62dbc12a161ec2f0cd119a36d68f69c0f481400d43e031cf", "record": "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/pyroscope@2.0.2/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/pyroscope/2.0.2/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/release-objects.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/pyroscope", "version=2.0.2", "base=ha", "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values-ha.yaml", "namespace=default", "releaseName=pyroscope", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-pyroscope-2-0-2-no-crds", "labels": { "sourceType": "helm", "component": "grafana/pyroscope", "sourceVersion": "2.0.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "grafana/pyroscope", "version": "2.0.2", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-pyroscope:2.0.2@sha256:e62d4337c210afe39b013694e528b68cc15b98e9cd3735dbcf40535b11874fab", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "bd128b8d66e06802da2e56a74216e817033ebe8ed59abe878df05886ec008086", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bd128b8d66e06802da2e56a74216e817033ebe8ed59abe878df05886ec008086", "record": "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "grafana/pyroscope@2.0.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/pyroscope/2.0.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml", "recipes/grafana/pyroscope/2.0.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/pyroscope", "version=2.0.2", "base=no-crds", "valuesProfile=recipes/grafana/pyroscope/2.0.2/effective-values-no-crds.yaml", "namespace=default", "releaseName=pyroscope", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-pyroscope-2-0-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-rollout-operator-0-49-0-default", "labels": { "sourceType": "helm", "component": "grafana/rollout-operator", "sourceVersion": "0.49.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "grafana/rollout-operator", "version": "0.49.0", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-rollout-operator:0.49.0@sha256:c52e103a893728c2d18971206a6452034d3b8f2c820f94942c0b54240214fa6d", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b608def0b2aa3fb67360e919b132e0552bae164c60a54ab270f1945ba6e8d1b6", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 15, "digest": "dc6b652767aec075b147247c38dbce391bb86750a54e749a45576fd6791d4763", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "dc6b652767aec075b147247c38dbce391bb86750a54e749a45576fd6791d4763", "record": "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "grafana/rollout-operator@0.49.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/rollout-operator/0.49.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/rollout-operator", "version=0.49.0", "base=default", "valuesProfile=recipes/grafana/rollout-operator/0.49.0/effective-values.yaml", "namespace=default", "releaseName=rollout-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-rollout-operator-0-49-0-no-crds", "labels": { "sourceType": "helm", "component": "grafana/rollout-operator", "sourceVersion": "0.49.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "grafana/rollout-operator", "version": "0.49.0", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-rollout-operator:0.49.0@sha256:c52e103a893728c2d18971206a6452034d3b8f2c820f94942c0b54240214fa6d", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "ae6b9000b84edf8a5ad01c4399619b76ad28b808486d623fc482035ed5e3b403", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ae6b9000b84edf8a5ad01c4399619b76ad28b808486d623fc482035ed5e3b403", "record": "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "grafana/rollout-operator@0.49.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/rollout-operator/0.49.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml", "recipes/grafana/rollout-operator/0.49.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/rollout-operator", "version=0.49.0", "base=no-crds", "valuesProfile=recipes/grafana/rollout-operator/0.49.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=rollout-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "replicatemplates.rollout-operator.grafana.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "replicatemplates.rollout-operator.grafana.com", "purpose": "ReplicaTemplate CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com", "purpose": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "replicatemplates.rollout-operator.grafana.com", "origin": "base", "type": "target-fact", "detail": "ReplicaTemplate CRD managed outside this no-crds preset" }, { "id": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com", "origin": "base", "type": "target-fact", "detail": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset" } ], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "replicatemplates.rollout-operator.grafana.com", "purpose": "ReplicaTemplate CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com", "purpose": "ZoneAwarePodDisruptionBudget CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/grafana/rollout-operator/0.49.0/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "replicatemplates.rollout-operator.grafana.com", "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com" ], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "replicatemplates.rollout-operator.grafana.com", "zoneawarepoddisruptionbudgets.rollout-operator.grafana.com" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-rollout-operator-0-49-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-tempo-1-24-4-local-persistent", "labels": { "sourceType": "helm", "component": "grafana/tempo", "sourceVersion": "1.24.4", "base": "local-persistent" } }, "spec": { "source": { "type": "helm", "name": "grafana/tempo", "version": "1.24.4", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-tempo:1.24.4@sha256:bdeba9d642d10538e41f72eb96bd59f62428a6d0bc395111c74a7bcb8c1e7e12", "selection": { "name": "local-persistent", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" } }, "baseVariant": { "name": "local-persistent", "revision": "r001", "digest": "75c99c0e86a430f8ff1c9967da77a5fc59f5bad8498961eb024cdac68be36cc8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "df7ce7b40425eef8d057bdd80416ea3ae781ababe7ce6a154db74990c0f07905", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "df7ce7b40425eef8d057bdd80416ea3ae781ababe7ce6a154db74990c0f07905", "record": "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "grafana/tempo@1.24.4/local-persistent; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/tempo/1.24.4/publication/flattening-safety-verdict-local-persistent.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml", "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/release-objects.yaml", "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml", "recipes/grafana/tempo/1.24.4/revisions/local-persistent/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/tempo", "version=1.24.4", "base=local-persistent", "valuesProfile=recipes/grafana/tempo/1.24.4/effective-values.yaml", "namespace=tempo", "releaseName=tempo", "capabilityProfile={\"apiVersions\":[\"networking.k8s.io/v1\"],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-local-persistent.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "grafana-tempo-1-24-4-s3-query-observability", "labels": { "sourceType": "helm", "component": "grafana/tempo", "sourceVersion": "1.24.4", "base": "s3-query-observability" } }, "spec": { "source": { "type": "helm", "name": "grafana/tempo", "version": "1.24.4", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/grafana-tempo:1.24.4@sha256:bdeba9d642d10538e41f72eb96bd59f62428a6d0bc395111c74a7bcb8c1e7e12", "selection": { "name": "s3-query-observability", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" } }, "baseVariant": { "name": "s3-query-observability", "revision": "r001", "digest": "7b0f4953c927613a0fe94df67ae5ec22b62672da793f0dd65f123536e7a24ed6", "digestRole": "helm-variant-revision", "digestRecord": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/release-objects.yaml", "inventory": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "4e981336df773cdd82b2551d35d27d61f4b39e6a3df0a9a693ac81fd0d3cf8ed", "digestRole": "canonical-object-set", "digestRecord": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4e981336df773cdd82b2551d35d27d61f4b39e6a3df0a9a693ac81fd0d3cf8ed", "record": "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "grafana/tempo@1.24.4/s3-query-observability; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/grafana/tempo/1.24.4/publication/flattening-safety-verdict-s3-query-observability.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml", "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/release-objects.yaml", "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml", "recipes/grafana/tempo/1.24.4/revisions/s3-query-observability/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=grafana/tempo", "version=1.24.4", "base=s3-query-observability", "valuesProfile=recipes/grafana/tempo/1.24.4/effective-values-s3-query-observability.yaml", "namespace=tempo", "releaseName=tempo", "capabilityProfile={\"apiVersions\":[\"networking.k8s.io/v1\",\"monitoring.coreos.com/v1\"],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object", "sourcePath": "../../../prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "prometheus-community/kube-prometheus-stack@85.3.3/default", "packageSource": "package://prerequisites/target-facts/s3-query-observability-crds.yaml", "packagePath": "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml" } }, { "name": "tempo-object-store", "type": "requiredObjectStores", "required": true, "details": { "bucket": "tempo-traces", "credentialsSecret": { "accessKey": "access_key", "name": "tempo-s3-credentials", "secretKey": "secret_key" }, "deliveryLanes": [ "regularHelm", "cubInstallerApply" ], "endpoint": "tempo-object-store.tempo.svc.cluster.local:9000", "kind": "S3CompatibleObjectStore", "name": "tempo-object-store", "namespace": "tempo", "purpose": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists", "serviceName": "tempo-object-store" } }, { "name": "tempo-s3-credentials", "type": "requiredSecrets", "required": true, "details": { "keys": [ "access_key", "secret_key" ], "name": "tempo-s3-credentials", "namespace": "tempo", "purpose": "S3 access credentials referenced by Tempo environment variables" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.endpoint", "purpose": "S3-compatible endpoint that Tempo will write traces to", "stage": "pre-render" } }, { "name": "requiredValues-2", "type": "requiredValues", "required": true, "details": { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.bucket", "purpose": "Existing bucket for Tempo trace blocks", "stage": "pre-render" } }, { "name": "requiredValues-3", "type": "requiredValues", "required": true, "details": { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.region", "purpose": "Object-store region used with the selected endpoint and bucket", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object" }, { "id": "tempo-object-store", "origin": "base", "type": "target-fact", "detail": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists" }, { "id": "tempo/tempo-s3-credentials", "origin": "base", "type": "target-fact", "detail": "S3 access credentials referenced by Tempo environment variables" }, { "id": "tempo.storage.trace.s3.endpoint", "origin": "base", "type": "target-fact", "detail": "S3-compatible endpoint that Tempo will write traces to" }, { "id": "tempo.storage.trace.s3.bucket", "origin": "base", "type": "target-fact", "detail": "Existing bucket for Tempo trace blocks" }, { "id": "tempo.storage.trace.s3.region", "origin": "base", "type": "target-fact", "detail": "Object-store region used with the selected endpoint and bucket" } ], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator ServiceMonitor CRD required by Tempo's ServiceMonitor object", "sourcePath": "../../../prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "prometheus-community/kube-prometheus-stack@85.3.3/default", "packageSource": "package://prerequisites/target-facts/s3-query-observability-crds.yaml", "packagePath": "packages/grafana/tempo/1.24.4/prerequisites/target-facts/s3-query-observability-crds.yaml" } ], "requiredObjectStores": [ { "bucket": "tempo-traces", "credentialsSecret": { "accessKey": "access_key", "name": "tempo-s3-credentials", "secretKey": "secret_key" }, "deliveryLanes": [ "regularHelm", "cubInstallerApply" ], "endpoint": "tempo-object-store.tempo.svc.cluster.local:9000", "kind": "S3CompatibleObjectStore", "name": "tempo-object-store", "namespace": "tempo", "purpose": "Local S3-compatible object-store fixture used to prove the S3 base can become ready when its target prerequisite exists", "serviceName": "tempo-object-store" } ], "requiredSecrets": [ { "keys": [ "access_key", "secret_key" ], "name": "tempo-s3-credentials", "namespace": "tempo", "purpose": "S3 access credentials referenced by Tempo environment variables" } ], "requiredValues": [ { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.endpoint", "purpose": "S3-compatible endpoint that Tempo will write traces to", "stage": "pre-render" }, { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.bucket", "purpose": "Existing bucket for Tempo trace blocks", "stage": "pre-render" }, { "deliveryLanes": [ "recipe" ], "path": "tempo.storage.trace.s3.region", "purpose": "Object-store region used with the selected endpoint and bucket", "stage": "pre-render" } ] }, "requirementRefs": [ "servicemonitors.monitoring.coreos.com", "tempo-object-store", "tempo/tempo-s3-credentials", "tempo.storage.trace.s3.endpoint", "tempo.storage.trace.s3.bucket", "tempo.storage.trace.s3.region" ], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "servicemonitors.monitoring.coreos.com", "tempo-object-store", "tempo/tempo-s3-credentials", "tempo.storage.trace.s3.endpoint", "tempo.storage.trace.s3.bucket", "tempo.storage.trace.s3.region" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/grafana-tempo-1-24-4-s3-query-observability.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "haproxytech-kubernetes-ingress-1-52-0-default", "labels": { "sourceType": "helm", "component": "haproxytech/kubernetes-ingress", "sourceVersion": "1.52.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "haproxytech/kubernetes-ingress", "version": "1.52.0", "record": "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/haproxytech-kubernetes-ingress:1.52.0@sha256:11f127344006f2e249cac8f7e4aa58d844246322b2e48f90343221eb20118a38", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "3e41229b4e62ca37c89acc31102d97429ca55671d8b90fc507bc982ae5043cf0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "d04b79ade525cfe276e761918d319794e8e662ef896ae3418a42e7c781ded544", "digestRole": "canonical-object-set", "digestRecord": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d04b79ade525cfe276e761918d319794e8e662ef896ae3418a42e7c781ded544", "record": "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "haproxytech/kubernetes-ingress@1.52.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/haproxytech/kubernetes-ingress/1.52.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml", "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml", "recipes/haproxytech/kubernetes-ingress/1.52.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=haproxytech/kubernetes-ingress", "version=1.52.0", "base=default", "valuesProfile=recipes/haproxytech/kubernetes-ingress/1.52.0/effective-values.yaml", "namespace=default", "releaseName=kubernetes-ingress", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/haproxytech-kubernetes-ingress-1-52-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-consul-2-0-0-default-control-plane", "labels": { "sourceType": "helm", "component": "hashicorp/consul", "sourceVersion": "2.0.0", "base": "default-control-plane" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/consul", "version": "2.0.0", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0@sha256:eec0c002730d44e10c1c807aaf9f02fe8d1454e54e3ec6024956e2e079b5a2a5", "selection": { "name": "default-control-plane", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" } }, "baseVariant": { "name": "default-control-plane", "revision": "r001", "digest": "b83c19e0fd112cd7ef9080d42a3a16d6b3b22c5b2021c5a30a93372d1ff3f0de", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/object-inventory.yaml", "objectCount": 68, "digest": "7efa3e8b59c702c8b8fa744a0ff91198e09ad8ba0fb93a86b50c3fd9e39d29f7", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "7efa3e8b59c702c8b8fa744a0ff91198e09ad8ba0fb93a86b50c3fd9e39d29f7", "record": "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "hashicorp/consul@2.0.0/default-control-plane; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/consul/2.0.0/publication/flattening-safety-verdict-default-control-plane.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml", "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/release-objects.yaml", "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml", "recipes/hashicorp/consul/2.0.0/revisions/default-control-plane/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/consul", "version=2.0.0", "base=default-control-plane", "valuesProfile=recipes/hashicorp/consul/2.0.0/effective-values.yaml", "namespace=consul", "releaseName=consul", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-default-control-plane.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-consul-2-0-0-secure-mesh-existing-secrets", "labels": { "sourceType": "helm", "component": "hashicorp/consul", "sourceVersion": "2.0.0", "base": "secure-mesh-existing-secrets" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/consul", "version": "2.0.0", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0@sha256:eec0c002730d44e10c1c807aaf9f02fe8d1454e54e3ec6024956e2e079b5a2a5", "selection": { "name": "secure-mesh-existing-secrets", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" } }, "baseVariant": { "name": "secure-mesh-existing-secrets", "revision": "r001", "digest": "f1c903c0195ac960a1108142730b10044eeba6c0ad8649c743b483a4c88976d3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/object-inventory.yaml", "objectCount": 97, "digest": "0acc8c339c2965446b754c3a9c948c4f154ca6e47b074ddc3b8d315e2cb7c468", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "0acc8c339c2965446b754c3a9c948c4f154ca6e47b074ddc3b8d315e2cb7c468", "record": "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "hashicorp/consul@2.0.0/secure-mesh-existing-secrets; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/consul/2.0.0/publication/flattening-safety-verdict-secure-mesh-existing-secrets.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml", "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/release-objects.yaml", "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml", "recipes/hashicorp/consul/2.0.0/revisions/secure-mesh-existing-secrets/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/consul", "version=2.0.0", "base=secure-mesh-existing-secrets", "valuesProfile=recipes/hashicorp/consul/2.0.0/effective-values-secure-mesh-existing-secrets.yaml", "namespace=consul", "releaseName=consul", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "consul-ca-cert", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt" ], "name": "consul-ca-cert", "namespace": "consul", "purpose": "Consul TLS CA certificate; must sign consul-server-cert" } }, { "name": "consul-server-cert", "type": "requiredSecrets", "required": true, "details": { "caSecretName": "consul-ca-cert", "keys": [ "tls.crt", "tls.key" ], "name": "consul-server-cert", "namespace": "consul", "purpose": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names", "requiredDNSNames": [ "server.dc1.consul", "consul-consul-server", "consul-consul-server.consul", "consul-consul-server.consul.svc", "consul-consul-server.consul-helm", "consul-consul-server.consul-helm.svc", "consul-consul-server.consul-apply", "consul-consul-server.consul-apply.svc", "consul-consul-server.consul-oci", "consul-consul-server.consul-oci.svc" ] } }, { "name": "consul-gossip-encryption-key", "type": "requiredSecrets", "required": true, "details": { "keys": [ "key" ], "name": "consul-gossip-encryption-key", "namespace": "consul", "purpose": "Consul gossip encryption key" } }, { "name": "consul-bootstrap-acl-token", "type": "requiredSecrets", "required": true, "details": { "keys": [ "token" ], "name": "consul-bootstrap-acl-token", "namespace": "consul", "purpose": "Consul ACL bootstrap token" } }, { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply" ], "minimumSchedulableNodes": 3, "purpose": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads." } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "consul/consul-ca-cert", "origin": "base", "type": "target-fact", "detail": "Consul TLS CA certificate; must sign consul-server-cert" }, { "id": "consul/consul-server-cert", "origin": "base", "type": "target-fact", "detail": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names" }, { "id": "consul/consul-gossip-encryption-key", "origin": "base", "type": "target-fact", "detail": "Consul gossip encryption key" }, { "id": "consul/consul-bootstrap-acl-token", "origin": "base", "type": "target-fact", "detail": "Consul ACL bootstrap token" }, { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads." } ], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt" ], "name": "consul-ca-cert", "namespace": "consul", "purpose": "Consul TLS CA certificate; must sign consul-server-cert" }, { "caSecretName": "consul-ca-cert", "keys": [ "tls.crt", "tls.key" ], "name": "consul-server-cert", "namespace": "consul", "purpose": "Consul server TLS certificate and private key; certificate SANs must cover server.dc1.consul and rendered consul-consul-server service DNS names", "requiredDNSNames": [ "server.dc1.consul", "consul-consul-server", "consul-consul-server.consul", "consul-consul-server.consul.svc", "consul-consul-server.consul-helm", "consul-consul-server.consul-helm.svc", "consul-consul-server.consul-apply", "consul-consul-server.consul-apply.svc", "consul-consul-server.consul-oci", "consul-consul-server.consul-oci.svc" ] }, { "keys": [ "key" ], "name": "consul-gossip-encryption-key", "namespace": "consul", "purpose": "Consul gossip encryption key" }, { "keys": [ "token" ], "name": "consul-bootstrap-acl-token", "namespace": "consul", "purpose": "Consul ACL bootstrap token" } ], "requiredTopology": { "deliveryLanes": [ "regularHelm", "cubInstallerApply" ], "minimumSchedulableNodes": 3, "purpose": "Consul secure mesh renders three server replicas with anti-affinity and gateway workloads." } }, "requirementRefs": [ "consul/consul-ca-cert", "consul/consul-server-cert", "consul/consul-gossip-encryption-key", "consul/consul-bootstrap-acl-token", "target topology" ], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "consul/consul-ca-cert", "consul/consul-server-cert", "consul/consul-gossip-encryption-key", "consul/consul-bootstrap-acl-token", "target topology" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-consul-2-0-0-secure-mesh-existing-secrets.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "no", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-terraform-1-1-2-default", "labels": { "sourceType": "helm", "component": "hashicorp/terraform", "sourceVersion": "1.1.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/terraform", "version": "1.1.2", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2@sha256:0e51444dda2d64c54e8d09b63fbb8076e1da39681f996968f90d8c7145d778b9", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "40c409175a95558a0683036dc80b3b7877540cfc68ea6eceeae017c731fd5b95", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5cc2a190066cc639af6f8856b1ff8e28a40e61546d53cd04f19c5b14d6c37d3b", "record": "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "hashicorp/terraform@1.1.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/terraform/1.1.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/terraform", "version=1.1.2", "base=default", "valuesProfile=recipes/hashicorp/terraform/1.1.2/effective-values.yaml", "namespace=default", "releaseName=terraform", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "terraformrc", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml" ], "keys": [ "credentials" ], "name": "terraformrc", "namespace": "default", "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=" } }, { "name": "workspacesecrets", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml" ], "name": "workspacesecrets", "namespace": "default", "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default apply -f " } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "default/terraformrc", "origin": "base", "type": "target-fact", "detail": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc" }, { "id": "default/workspacesecrets", "origin": "base", "type": "target-fact", "detail": "Sensitive Terraform workspace variables mounted at /tmp/secrets" } ], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml" ], "keys": [ "credentials" ], "name": "terraformrc", "namespace": "default", "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-default/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-default/receipt.yaml" ], "name": "workspacesecrets", "namespace": "default", "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default apply -f " } ] }, "requirementRefs": [ "default/terraformrc", "default/workspacesecrets" ], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "default/terraformrc", "default/workspacesecrets" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-terraform-1-1-2-no-crds", "labels": { "sourceType": "helm", "component": "hashicorp/terraform", "sourceVersion": "1.1.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/terraform", "version": "1.1.2", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-terraform:1.1.2@sha256:0e51444dda2d64c54e8d09b63fbb8076e1da39681f996968f90d8c7145d778b9", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a8b9e5e6ce83d71e19d70e4695bdda1a2cb28c26e094a0f28b70b58a3fc6a50a", "record": "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "hashicorp/terraform@1.1.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/terraform/1.1.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml", "recipes/hashicorp/terraform/1.1.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/terraform", "version=1.1.2", "base=no-crds", "valuesProfile=recipes/hashicorp/terraform/1.1.2/effective-values-no-crds.yaml", "namespace=default", "releaseName=terraform", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "workspaces.app.terraform.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml" ], "name": "workspaces.app.terraform.io", "purpose": "Terraform Workspace CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "terraformrc", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml" ], "keys": [ "credentials" ], "name": "terraformrc", "namespace": "default", "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=" } }, { "name": "workspacesecrets", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml" ], "name": "workspacesecrets", "namespace": "default", "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default apply -f " } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "workspaces.app.terraform.io", "origin": "base", "type": "target-fact", "detail": "Terraform Workspace CRD managed outside this no-crds preset" }, { "id": "default/terraformrc", "origin": "base", "type": "target-fact", "detail": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc" }, { "id": "default/workspacesecrets", "origin": "base", "type": "target-fact", "detail": "Sensitive Terraform workspace variables mounted at /tmp/secrets" } ], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "recipes/hashicorp/terraform/1.1.2/revisions/default/r001/rendered/release-objects.yaml" ], "name": "workspaces.app.terraform.io", "purpose": "Terraform Workspace CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/hashicorp/terraform/1.1.2/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml" ], "keys": [ "credentials" ], "name": "terraformrc", "namespace": "default", "purpose": "Terraform CLI credentials mounted at /etc/terraform/.terraformrc", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default create secret generic terraformrc --from-file=credentials=" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/hashicorp-terraform-no-crds/receipt.yaml", "runs/live-kind-parity/hashicorp-terraform-no-crds/receipt.yaml" ], "name": "workspacesecrets", "namespace": "default", "purpose": "Sensitive Terraform workspace variables mounted at /tmp/secrets", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl -n default apply -f " } ] }, "requirementRefs": [ "workspaces.app.terraform.io", "default/terraformrc", "default/workspacesecrets" ], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "workspaces.app.terraform.io", "default/terraformrc", "default/workspacesecrets" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-terraform-1-1-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-vault-0-32-0-default", "labels": { "sourceType": "helm", "component": "hashicorp/vault", "sourceVersion": "0.32.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/vault", "version": "0.32.0", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0@sha256:7216f8cbbb3e2dafe3ed987f1e4b6fa962de60b2bf5ba7d2d0b7eb45eb138292", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9ffbc08ecd91c99f37e8428ea8ff3b9a3c32709b7c0d524e99d08fd7cfcbf7d6", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 12, "digest": "6de2d61c8de0c21faa951e89ec16658bcdff22e69d78075fdd394d895a5e6978", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6de2d61c8de0c21faa951e89ec16658bcdff22e69d78075fdd394d895a5e6978", "record": "recipes/hashicorp/vault/0.32.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "hashicorp/vault@0.32.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/vault/0.32.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml", "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/hashicorp/vault/0.32.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml", "recipes/hashicorp/vault/0.32.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/vault", "version=0.32.0", "base=default", "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values.yaml", "namespace=vault", "releaseName=vault", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-vault-0-32-0-dev-mode", "labels": { "sourceType": "helm", "component": "hashicorp/vault", "sourceVersion": "0.32.0", "base": "dev-mode" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/vault", "version": "0.32.0", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0@sha256:7216f8cbbb3e2dafe3ed987f1e4b6fa962de60b2bf5ba7d2d0b7eb45eb138292", "selection": { "name": "dev-mode", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" } }, "baseVariant": { "name": "dev-mode", "revision": "r001", "digest": "d12dc23745e26709b232036d5899853314a71a907746284d01041a1f59a7c937", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "f07ae80c317a1156f1f6ae6dc849300de0ba4683eb3ffae67cdcfcd6e8072955", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f07ae80c317a1156f1f6ae6dc849300de0ba4683eb3ffae67cdcfcd6e8072955", "record": "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "hashicorp/vault@0.32.0/dev-mode; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/vault/0.32.0/publication/flattening-safety-verdict-dev-mode.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml", "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/release-objects.yaml", "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml", "recipes/hashicorp/vault/0.32.0/revisions/dev-mode/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/vault", "version=0.32.0", "base=dev-mode", "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values-dev-mode.yaml", "namespace=vault", "releaseName=vault", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-dev-mode.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "hashicorp-vault-0-32-0-ha-raft-ui", "labels": { "sourceType": "helm", "component": "hashicorp/vault", "sourceVersion": "0.32.0", "base": "ha-raft-ui" } }, "spec": { "source": { "type": "helm", "name": "hashicorp/vault", "version": "0.32.0", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-vault:0.32.0@sha256:7216f8cbbb3e2dafe3ed987f1e4b6fa962de60b2bf5ba7d2d0b7eb45eb138292", "selection": { "name": "ha-raft-ui", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" } }, "baseVariant": { "name": "ha-raft-ui", "revision": "r001", "digest": "8961fc7dfc008815d652289b9591f2c4ec407ff9f9869d6a91f835d72476c6be", "digestRole": "helm-variant-revision", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/release-objects.yaml", "inventory": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "734a212cbb2e8d11ed288d32bc8b709e859248ef5587090b04e0fa407b248b5f", "digestRole": "canonical-object-set", "digestRecord": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "734a212cbb2e8d11ed288d32bc8b709e859248ef5587090b04e0fa407b248b5f", "record": "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "hashicorp/vault@0.32.0/ha-raft-ui; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/hashicorp/vault/0.32.0/publication/flattening-safety-verdict-ha-raft-ui.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml", "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/release-objects.yaml", "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml", "recipes/hashicorp/vault/0.32.0/revisions/ha-raft-ui/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=hashicorp/vault", "version=0.32.0", "base=ha-raft-ui", "valuesProfile=recipes/hashicorp/vault/0.32.0/effective-values-ha-raft-ui.yaml", "namespace=vault", "releaseName=vault", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "minimumSchedulableNodes": 3, "purpose": "schedule the three Vault server replicas rendered by the HA Raft base" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "schedule the three Vault server replicas rendered by the HA Raft base" } ], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredTopology": { "minimumSchedulableNodes": 3, "purpose": "schedule the three Vault server replicas rendered by the HA Raft base" } }, "requirementRefs": [ "target topology" ], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "target topology" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/hashicorp-vault-0-32-0-ha-raft-ui.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "ingress-nginx-ingress-nginx-4-15-1-admission-disabled", "labels": { "sourceType": "helm", "component": "ingress-nginx/ingress-nginx", "sourceVersion": "4.15.1", "base": "admission-disabled" } }, "spec": { "source": { "type": "helm", "name": "ingress-nginx/ingress-nginx", "version": "4.15.1", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1@sha256:dc0f6c1a8158230957c1cae1b26073339b009b220c79cff0e3df31e9f21c73e4", "selection": { "name": "admission-disabled", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" } }, "baseVariant": { "name": "admission-disabled", "revision": "r001", "digest": "c559f8547f3716cddff683df312790c09786c8bff4284023d7ad59ad6139e7b7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/release-objects.yaml", "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "ad133758fa1985241f9dd1fe766f6ca9f17e199bf7562e37b3c2834a6588c25e", "digestRole": "canonical-object-set", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ad133758fa1985241f9dd1fe766f6ca9f17e199bf7562e37b3c2834a6588c25e", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "ingress-nginx/ingress-nginx@4.15.1/admission-disabled; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/publication/flattening-safety-verdict-admission-disabled.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/release-objects.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/admission-disabled/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=ingress-nginx/ingress-nginx", "version=4.15.1", "base=admission-disabled", "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values-admission-disabled.yaml", "namespace=ingress-nginx", "releaseName=ingress-nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-admission-disabled.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "ingress-nginx-ingress-nginx-4-15-1-default", "labels": { "sourceType": "helm", "component": "ingress-nginx/ingress-nginx", "sourceVersion": "4.15.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "ingress-nginx/ingress-nginx", "version": "4.15.1", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1@sha256:dc0f6c1a8158230957c1cae1b26073339b009b220c79cff0e3df31e9f21c73e4", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "fcb4d06cd9078d87226aad3c100f9e80ced6398e0a358f54334b5bd45a4f26d8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "257503d94cea6b1d59e1564805f03a59c5a2d8fdf2de2b340676df03c295a80d", "digestRole": "canonical-object-set", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "257503d94cea6b1d59e1564805f03a59c5a2d8fdf2de2b340676df03c295a80d", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "ingress-nginx/ingress-nginx@4.15.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=ingress-nginx/ingress-nginx", "version=4.15.1", "base=default", "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values.yaml", "namespace=ingress-nginx", "releaseName=ingress-nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "ingress-nginx-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "cert", "key", "ca" ], "name": "ingress-nginx-admission", "namespace": "ingress-nginx", "purpose": "admission webhook certificate normally created by Helm hook jobs" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "ingress-nginx/ingress-nginx-admission", "origin": "base", "type": "target-fact", "detail": "admission webhook certificate normally created by Helm hook jobs" } ], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply" ], "keys": [ "cert", "key", "ca" ], "name": "ingress-nginx-admission", "namespace": "ingress-nginx", "purpose": "admission webhook certificate normally created by Helm hook jobs" } ] }, "requirementRefs": [ "ingress-nginx/ingress-nginx-admission" ], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "ingress-nginx/ingress-nginx-admission" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "ingress-nginx-ingress-nginx-4-15-1-internal-clusterip", "labels": { "sourceType": "helm", "component": "ingress-nginx/ingress-nginx", "sourceVersion": "4.15.1", "base": "internal-clusterip" } }, "spec": { "source": { "type": "helm", "name": "ingress-nginx/ingress-nginx", "version": "4.15.1", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/ingress-nginx-ingress-nginx:4.15.1@sha256:dc0f6c1a8158230957c1cae1b26073339b009b220c79cff0e3df31e9f21c73e4", "selection": { "name": "internal-clusterip", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" } }, "baseVariant": { "name": "internal-clusterip", "revision": "r001", "digest": "7083577d9a18c7d732a95318c6fa9aa5619f0603d2217394f805dbefcf3600cc", "digestRole": "helm-variant-revision", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/release-objects.yaml", "inventory": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "a94ba2b56636baf7e732766c12c98d808b57c276156fa7a3a752b4137bf5f46a", "digestRole": "canonical-object-set", "digestRecord": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a94ba2b56636baf7e732766c12c98d808b57c276156fa7a3a752b4137bf5f46a", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "ingress-nginx/ingress-nginx@4.15.1/internal-clusterip; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/ingress-nginx/ingress-nginx/4.15.1/publication/flattening-safety-verdict-internal-clusterip.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/release-objects.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml", "recipes/ingress-nginx/ingress-nginx/4.15.1/revisions/internal-clusterip/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=ingress-nginx/ingress-nginx", "version=4.15.1", "base=internal-clusterip", "valuesProfile=recipes/ingress-nginx/ingress-nginx/4.15.1/effective-values-internal-clusterip.yaml", "namespace=ingress-nginx", "releaseName=ingress-nginx", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/ingress-nginx-ingress-nginx-4-15-1-internal-clusterip.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "istio-gateway-1-30-0-controller-default-reviewed", "labels": { "sourceType": "helm", "component": "istio/gateway", "sourceVersion": "1.30.0", "base": "controller-default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "istio/gateway", "version": "1.30.0", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-gateway:1.30.0@sha256:1c26ebf6dc73c2c3952755668886b33606cdbd62494776e4237e5e8402803b69", "selection": { "name": "controller-default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" } }, "baseVariant": { "name": "controller-default-reviewed", "revision": "r001", "digest": "e0f999321bc8f539b567f66392c0573dd4727ab7533d95b2701180b598207011", "digestRole": "helm-variant-revision", "digestRecord": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "07b3cb11d265a7b857b231a347be2c71742e5bc1eeb02efddd7ce71ecc1c7afc", "digestRole": "canonical-object-set", "digestRecord": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "07b3cb11d265a7b857b231a347be2c71742e5bc1eeb02efddd7ce71ecc1c7afc", "record": "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "istio/gateway@1.30.0/controller-default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/istio/gateway/1.30.0/publication/flattening-safety-verdict-controller-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml", "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml", "recipes/istio/gateway/1.30.0/revisions/controller-default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=istio/gateway", "version=1.30.0", "base=controller-default-reviewed", "valuesProfile=recipes/istio/gateway/1.30.0/effective-values.yaml", "namespace=default", "releaseName=gateway", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-controller-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "istio-gateway-1-30-0-default", "labels": { "sourceType": "helm", "component": "istio/gateway", "sourceVersion": "1.30.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "istio/gateway", "version": "1.30.0", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-gateway:1.30.0@sha256:1c26ebf6dc73c2c3952755668886b33606cdbd62494776e4237e5e8402803b69", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "1841f26edd8ff88a49ae40776f75e6901eab32ac85193401669e046737c3f208", "digestRole": "helm-variant-revision", "digestRecord": "recipes/istio/gateway/1.30.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "07b3cb11d265a7b857b231a347be2c71742e5bc1eeb02efddd7ce71ecc1c7afc", "digestRole": "canonical-object-set", "digestRecord": "recipes/istio/gateway/1.30.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "07b3cb11d265a7b857b231a347be2c71742e5bc1eeb02efddd7ce71ecc1c7afc", "record": "recipes/istio/gateway/1.30.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "istio/gateway@1.30.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/istio/gateway/1.30.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml", "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/istio/gateway/1.30.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml", "recipes/istio/gateway/1.30.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=istio/gateway", "version=1.30.0", "base=default", "valuesProfile=recipes/istio/gateway/1.30.0/effective-values.yaml", "namespace=default", "releaseName=gateway", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/istio-gateway-1-30-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "istio-istiod-1-30-0-default", "labels": { "sourceType": "helm", "component": "istio/istiod", "sourceVersion": "1.30.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "istio/istiod", "version": "1.30.0", "record": "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/istio-istiod:1.30.0@sha256:ecb9f9cbd9dc89bb7707cdc98c61797f51ddf08c155f43955d3f4372ac2e5476", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "add9fe5f59c4bee135be299995f91da3b8411969240948dcf387d04cbde45663", "digestRole": "helm-variant-revision", "digestRecord": "recipes/istio/istiod/1.30.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 17, "digest": "53385181293dd9a8228f37a370148dde3cc77acecf5a3a8539fa1b8eb0f9afdf", "digestRole": "canonical-object-set", "digestRecord": "recipes/istio/istiod/1.30.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "53385181293dd9a8228f37a370148dde3cc77acecf5a3a8539fa1b8eb0f9afdf", "record": "recipes/istio/istiod/1.30.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "istio/istiod@1.30.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/istio/istiod/1.30.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml", "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/istio/istiod/1.30.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml", "recipes/istio/istiod/1.30.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=istio/istiod", "version=1.30.0", "base=default", "valuesProfile=recipes/istio/istiod/1.30.0/effective-values.yaml", "namespace=default", "releaseName=istiod", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "istio-system", "type": "requiredNamespaces", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml", "runs/live-kind-parity/istio-istiod-default/receipt.yaml" ], "name": "istio-system", "purpose": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent.", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "istio-system", "origin": "base", "type": "target-fact", "detail": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent." } ], "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredNamespaces": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/istio-istiod-default/receipt.yaml", "runs/live-kind-parity/istio-istiod-default/receipt.yaml" ], "name": "istio-system", "purpose": "The chart renders service-account and RBAC objects into istio-system, and Helm blocks when the namespace is absent.", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl create namespace istio-system --dry-run=client -o yaml | kubectl apply -f -" } ] }, "requirementRefs": [ "istio-system" ], "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "istio-system" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/istio-istiod-1-30-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jaegertracing-jaeger-4-8-0-default", "labels": { "sourceType": "helm", "component": "jaegertracing/jaeger", "sourceVersion": "4.8.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jaegertracing/jaeger", "version": "4.8.0", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger:4.8.0@sha256:d4646d2cd4c0e3d64842737a0d8434b2663e65314a40ffeecb5f9943c19438a9", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "756f8eb6e6899bcd4715a437f077dbffe440daf5bf7cf86c40a7f890f226dd0b", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "da24b2c05d1c43492627f3d01b0d675ea01bb2acb38017a18dec5a70c55b7939", "digestRole": "canonical-object-set", "digestRecord": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "da24b2c05d1c43492627f3d01b0d675ea01bb2acb38017a18dec5a70c55b7939", "record": "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "jaegertracing/jaeger@4.8.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jaegertracing/jaeger/4.8.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml", "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml", "recipes/jaegertracing/jaeger/4.8.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jaegertracing/jaeger", "version=4.8.0", "base=default", "valuesProfile=recipes/jaegertracing/jaeger/4.8.0/effective-values.yaml", "namespace=default", "releaseName=jaeger", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-4-8-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jaegertracing-jaeger-operator-2-57-0-default", "labels": { "sourceType": "helm", "component": "jaegertracing/jaeger-operator", "sourceVersion": "2.57.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jaegertracing/jaeger-operator", "version": "2.57.0", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger-operator:2.57.0@sha256:bb116910eabb89bdf97436c27d495e5dd80d36840847594b284e28a0fe36f3db", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "7ae3130bd89242695bc77f2336fb4f939f2b384e97e934359cc79ec035787983", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "c17323ac7d71b000b42732323a79731fe3d9244ba4e641d8349a73a71b8807ab", "digestRole": "canonical-object-set", "digestRecord": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c17323ac7d71b000b42732323a79731fe3d9244ba4e641d8349a73a71b8807ab", "record": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jaegertracing/jaeger-operator@2.57.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jaegertracing/jaeger-operator/2.57.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jaegertracing/jaeger-operator", "version=2.57.0", "base=default", "valuesProfile=recipes/jaegertracing/jaeger-operator/2.57.0/effective-values.yaml", "namespace=default", "releaseName=jaeger-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml", "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml" ], "name": "certificates.cert-manager.io", "purpose": "The chart renders a cert-manager Certificate for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml", "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml" ], "name": "issuers.cert-manager.io", "purpose": "The chart renders a cert-manager Issuer for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "The chart renders a cert-manager Certificate for the Jaeger admission webhook." }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "The chart renders a cert-manager Issuer for the Jaeger admission webhook." } ], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml", "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml" ], "name": "certificates.cert-manager.io", "purpose": "The chart renders a cert-manager Certificate for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-default/receipt.yaml", "runs/live-kind-parity/jaegertracing-jaeger-operator-default/receipt.yaml" ], "name": "issuers.cert-manager.io", "purpose": "The chart renders a cert-manager Issuer for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/default-crds.yaml" } ] }, "requirementRefs": [ "certificates.cert-manager.io", "issuers.cert-manager.io" ], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "certificates.cert-manager.io", "issuers.cert-manager.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jaegertracing-jaeger-operator-2-57-0-no-crds", "labels": { "sourceType": "helm", "component": "jaegertracing/jaeger-operator", "sourceVersion": "2.57.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "jaegertracing/jaeger-operator", "version": "2.57.0", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jaegertracing-jaeger-operator:2.57.0@sha256:bb116910eabb89bdf97436c27d495e5dd80d36840847594b284e28a0fe36f3db", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "14755312bc08dd5aad02a12a16f32a04e54adad141a93cb28ff42b2e49066975", "digestRole": "canonical-object-set", "digestRecord": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "14755312bc08dd5aad02a12a16f32a04e54adad141a93cb28ff42b2e49066975", "record": "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jaegertracing/jaeger-operator@2.57.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jaegertracing/jaeger-operator/2.57.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml", "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jaegertracing/jaeger-operator", "version=2.57.0", "base=no-crds", "valuesProfile=recipes/jaegertracing/jaeger-operator/2.57.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=jaeger-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "jaegers.jaegertracing.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml" ], "name": "jaegers.jaegertracing.io", "purpose": "Jaeger CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml" ], "name": "certificates.cert-manager.io", "purpose": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml" ], "name": "issuers.cert-manager.io", "purpose": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "jaegers.jaegertracing.io", "origin": "base", "type": "target-fact", "detail": "Jaeger CRD managed outside this no-crds preset" }, { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook." }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook." } ], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "recipes/jaegertracing/jaeger-operator/2.57.0/revisions/default/r001/rendered/release-objects.yaml" ], "name": "jaegers.jaegertracing.io", "purpose": "Jaeger CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml" ], "name": "certificates.cert-manager.io", "purpose": "The no-crds preset still renders a cert-manager Certificate for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/jaegertracing-jaeger-operator-no-crds/receipt.yaml" ], "name": "issuers.cert-manager.io", "purpose": "The no-crds preset still renders a cert-manager Issuer for the Jaeger admission webhook.", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jaegertracing/jaeger-operator/2.57.0/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "jaegers.jaegertracing.io", "certificates.cert-manager.io", "issuers.cert-manager.io" ], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "jaegers.jaegertracing.io", "certificates.cert-manager.io", "issuers.cert-manager.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jaegertracing-jaeger-operator-2-57-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-cert-manager-csi-driver-v0-14-0-default", "labels": { "sourceType": "helm", "component": "jetstack/cert-manager-csi-driver", "sourceVersion": "v0.14.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jetstack/cert-manager-csi-driver", "version": "v0.14.0", "record": "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager-csi-driver:v0.14.0@sha256:d9ced09488420f77b3a073f2457a81dfdd498453f0597656c6d27713b0ad7999", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9d14ba2db88889bbef70caf5419a3ad88e80c0a32fd95198904165b8cb5ff6cb", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "2fa28f4f4c912710babcc4f46818889df3c51396a400dbce6c0245afc20056f3", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2fa28f4f4c912710babcc4f46818889df3c51396a400dbce6c0245afc20056f3", "record": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "jetstack/cert-manager-csi-driver@v0.14.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/cert-manager-csi-driver/v0.14.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml", "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml", "recipes/jetstack/cert-manager-csi-driver/v0.14.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/cert-manager-csi-driver", "version=v0.14.0", "base=default", "valuesProfile=recipes/jetstack/cert-manager-csi-driver/v0.14.0/effective-values.yaml", "namespace=default", "releaseName=cert-manager-csi-driver", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-csi-driver-v0-14-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-cert-manager-v1-20-2-crds-enabled", "labels": { "sourceType": "helm", "component": "jetstack/cert-manager", "sourceVersion": "v1.20.2", "base": "crds-enabled" } }, "spec": { "source": { "type": "helm", "name": "jetstack/cert-manager", "version": "v1.20.2", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.20.2@sha256:b688d5ef7ae759bd73d2970528a7192e14058bc593a8601b6af12157270c6d2c", "selection": { "name": "crds-enabled", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" } }, "baseVariant": { "name": "crds-enabled", "revision": "r001", "digest": "6e697e31c685743b784066bf67a2959b4f1f7226cc7b4f2a0c5bdd24c7359e20", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/object-inventory.yaml", "objectCount": 48, "digest": "e288b2413bd1919173bee6afcd823be61399f101cfe2cf61f8e0df56740fefe0", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e288b2413bd1919173bee6afcd823be61399f101cfe2cf61f8e0df56740fefe0", "record": "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/cert-manager@v1.20.2/crds-enabled; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/cert-manager/v1.20.2/publication/flattening-safety-verdict-crds-enabled.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/cert-manager", "version=v1.20.2", "base=crds-enabled", "valuesProfile=recipes/jetstack/cert-manager/v1.20.2/effective-values-crds-enabled.yaml", "namespace=cert-manager", "releaseName=cert-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-crds-enabled.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-cert-manager-v1-20-2-default", "labels": { "sourceType": "helm", "component": "jetstack/cert-manager", "sourceVersion": "v1.20.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jetstack/cert-manager", "version": "v1.20.2", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.20.2@sha256:b688d5ef7ae759bd73d2970528a7192e14058bc593a8601b6af12157270c6d2c", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e747dfea1ea7cbe63b36e863857beb23c20f2cce59285b6f2d1e0d1c48579ed2", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 42, "digest": "45029db19d75e578bec74b82a0476a6580d1f7193239a210bf4873156ac725ce", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "45029db19d75e578bec74b82a0476a6580d1f7193239a210bf4873156ac725ce", "record": "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/cert-manager@v1.20.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/cert-manager/v1.20.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml", "recipes/jetstack/cert-manager/v1.20.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/cert-manager", "version=v1.20.2", "base=default", "valuesProfile=recipes/jetstack/cert-manager/v1.20.2/effective-values.yaml", "namespace=cert-manager", "releaseName=cert-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "challenges.acme.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "challenges.acme.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } }, { "name": "orders.acme.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "orders.acme.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } }, { "name": "certificaterequests.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "certificaterequests.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } }, { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "certificates.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } }, { "name": "clusterissuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "clusterissuers.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "name": "issuers.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "challenges.acme.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" }, { "id": "orders.acme.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" }, { "id": "certificaterequests.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" }, { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" }, { "id": "clusterissuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD managed outside this default base" } ], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "name": "challenges.acme.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" }, { "name": "orders.acme.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" }, { "name": "certificaterequests.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" }, { "name": "certificates.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" }, { "name": "clusterissuers.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" }, { "name": "issuers.cert-manager.io", "purpose": "cert-manager CRD managed outside this default base", "sourcePath": "revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "crds-enabled", "suggestedSource": "Apply the crds-enabled base CRDs or install cert-manager CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/cert-manager/v1.20.2/prerequisites/target-facts/default-crds.yaml" } ] }, "requirementRefs": [ "challenges.acme.cert-manager.io", "orders.acme.cert-manager.io", "certificaterequests.cert-manager.io", "certificates.cert-manager.io", "clusterissuers.cert-manager.io", "issuers.cert-manager.io" ], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "challenges.acme.cert-manager.io", "orders.acme.cert-manager.io", "certificaterequests.cert-manager.io", "certificates.cert-manager.io", "clusterissuers.cert-manager.io", "issuers.cert-manager.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-20-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-cert-manager-v1-21-0-crds-enabled", "labels": { "sourceType": "helm", "component": "jetstack/cert-manager", "sourceVersion": "v1.21.0", "base": "crds-enabled" } }, "spec": { "source": { "type": "helm", "name": "jetstack/cert-manager", "version": "v1.21.0", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.21.0@sha256:c6ebd798984a15a6bf3e856b02cc1f3806c48cb2ee714d655ea3dd312c939ecc", "selection": { "name": "crds-enabled", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" } }, "baseVariant": { "name": "crds-enabled", "revision": "r001", "digest": "6a20eb804503d1208b2bc49fef6c802e21ee03b82fc87af980e36c1328f34e2d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/rendered/object-inventory.yaml", "objectCount": 46, "digest": "ce9f3596a16fd6af0ef68f3c292349bd4174cff361bdc2e1318901396d8f6967", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ce9f3596a16fd6af0ef68f3c292349bd4174cff361bdc2e1318901396d8f6967", "record": "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/cert-manager@v1.21.0/crds-enabled; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/cert-manager/v1.21.0/publication/flattening-safety-verdict-crds-enabled.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/rendered/release-objects.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/crds-enabled/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/cert-manager", "version=v1.21.0", "base=crds-enabled", "valuesProfile=recipes/jetstack/cert-manager/v1.21.0/effective-values-crds-enabled.yaml", "namespace=cert-manager", "releaseName=cert-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-crds-enabled.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-cert-manager-v1-21-0-default", "labels": { "sourceType": "helm", "component": "jetstack/cert-manager", "sourceVersion": "v1.21.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jetstack/cert-manager", "version": "v1.21.0", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-cert-manager:v1.21.0@sha256:c6ebd798984a15a6bf3e856b02cc1f3806c48cb2ee714d655ea3dd312c939ecc", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "c3dedfcbf2d36b27af8f68c292d2855528829af889986bb6d58da16bbd9d8544", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 40, "digest": "9e9b6442f769b8a02974ae801946207452f7f4990e873e007e4d32ec88d9cc09", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9e9b6442f769b8a02974ae801946207452f7f4990e873e007e4d32ec88d9cc09", "record": "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/cert-manager@v1.21.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/cert-manager/v1.21.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml", "recipes/jetstack/cert-manager/v1.21.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/cert-manager", "version=v1.21.0", "base=default", "valuesProfile=recipes/jetstack/cert-manager/v1.21.0/effective-values.yaml", "namespace=cert-manager", "releaseName=cert-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "challenges.acme.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "challenges.acme.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } }, { "name": "orders.acme.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "orders.acme.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } }, { "name": "certificaterequests.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificaterequests.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } }, { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } }, { "name": "clusterissuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterissuers.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "challenges.acme.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" }, { "id": "orders.acme.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" }, { "id": "certificaterequests.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" }, { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" }, { "id": "clusterissuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager CRD staged before the default chart and its startup API check" } ], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "challenges.acme.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" }, { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "orders.acme.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" }, { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificaterequests.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" }, { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" }, { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterissuers.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" }, { "applyMode": "server-side", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager CRD staged before the default chart and its startup API check", "sourceVariant": "crds-enabled" } ] }, "requirementRefs": [ "challenges.acme.cert-manager.io", "orders.acme.cert-manager.io", "certificaterequests.cert-manager.io", "certificates.cert-manager.io", "clusterissuers.cert-manager.io", "issuers.cert-manager.io" ], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "challenges.acme.cert-manager.io", "orders.acme.cert-manager.io", "certificaterequests.cert-manager.io", "certificates.cert-manager.io", "clusterissuers.cert-manager.io", "issuers.cert-manager.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-cert-manager-v1-21-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-trust-manager-v0-22-1-default", "labels": { "sourceType": "helm", "component": "jetstack/trust-manager", "sourceVersion": "v0.22.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "jetstack/trust-manager", "version": "v0.22.1", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1@sha256:dbdd2e3fbce82f520467f23eb6e0f10d745fd608b3f3a1e117f3238ea41f104e", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b2230146b96c81c8d8d8f7f031d90a72915b599d62d8dcf4ef304a08b290cb57", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 14, "digest": "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "50eb2239a5db07734497711c4e812eb111d231852c2f614e5b0a1faec7bab683", "record": "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/trust-manager@v0.22.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/trust-manager/v0.22.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/trust-manager", "version=v0.22.1", "base=default", "valuesProfile=recipes/jetstack/trust-manager/v0.22.1/effective-values.yaml", "namespace=default", "releaseName=trust-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cert-manager", "type": "requiredNamespaces", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cert-manager", "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base" } }, { "name": "trust-manager-tls", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "trust-manager-tls", "namespace": "default", "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Certificate CRD required by trust-manager certificate.yaml" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Issuer CRD required by trust-manager certificate.yaml" }, { "id": "cert-manager", "origin": "base", "type": "target-fact", "detail": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base" }, { "id": "default/trust-manager-tls", "origin": "base", "type": "target-fact", "detail": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } ], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/default-crds.yaml" } ], "requiredNamespaces": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cert-manager", "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for this base" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "trust-manager-tls", "namespace": "default", "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } ] }, "requirementRefs": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "cert-manager", "default/trust-manager-tls" ], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "cert-manager", "default/trust-manager-tls" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "jetstack-trust-manager-v0-22-1-no-crds", "labels": { "sourceType": "helm", "component": "jetstack/trust-manager", "sourceVersion": "v0.22.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "jetstack/trust-manager", "version": "v0.22.1", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/jetstack-trust-manager:v0.22.1@sha256:dbdd2e3fbce82f520467f23eb6e0f10d745fd608b3f3a1e117f3238ea41f104e", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250", "digestRole": "canonical-object-set", "digestRecord": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5d0b08f8abda179089de0d4acead48bd8a3752c16766ed8ef1b95478065e9250", "record": "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "jetstack/trust-manager@v0.22.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/jetstack/trust-manager/v0.22.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml", "recipes/jetstack/trust-manager/v0.22.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=jetstack/trust-manager", "version=v0.22.1", "base=no-crds", "valuesProfile=recipes/jetstack/trust-manager/v0.22.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=trust-manager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "bundles.trust.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "bundles.trust.cert-manager.io", "purpose": "trust-manager CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "cert-manager", "type": "requiredNamespaces", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cert-manager", "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base" } }, { "name": "trust-manager-tls", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "trust-manager-tls", "namespace": "default", "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "bundles.trust.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "trust-manager CRD managed outside this no-crds base" }, { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Certificate CRD required by trust-manager certificate.yaml" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Issuer CRD required by trust-manager certificate.yaml" }, { "id": "cert-manager", "origin": "base", "type": "target-fact", "detail": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base" }, { "id": "default/trust-manager-tls", "origin": "base", "type": "target-fact", "detail": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } ], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "bundles.trust.cert-manager.io", "purpose": "trust-manager CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by trust-manager certificate.yaml", "sourcePath": "../../cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/jetstack/trust-manager/v0.22.1/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredNamespaces": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cert-manager", "purpose": "trust-manager uses cert-manager as the default trust namespace and regular Helm does not create it for the no-crds base" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "trust-manager-tls", "namespace": "default", "purpose": "trust-manager admission webhook TLS material normally produced by the rendered cert-manager Certificate lifecycle" } ] }, "requirementRefs": [ "bundles.trust.cert-manager.io", "certificates.cert-manager.io", "issuers.cert-manager.io", "cert-manager", "default/trust-manager-tls" ], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "bundles.trust.cert-manager.io", "certificates.cert-manager.io", "issuers.cert-manager.io", "cert-manager", "default/trust-manager-tls" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/jetstack-trust-manager-v0-22-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "karpenter-karpenter-1-14-0-crds-managed", "labels": { "sourceType": "helm", "component": "karpenter/karpenter", "sourceVersion": "1.14.0", "base": "crds-managed" } }, "spec": { "source": { "type": "helm", "name": "karpenter/karpenter", "version": "1.14.0", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/karpenter-karpenter:1.14.0@sha256:9df71774cdd0dec1b03d8f417d28176833a14f1bb3d094e01502f46101e777cc", "selection": { "name": "crds-managed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" } }, "baseVariant": { "name": "crds-managed", "revision": "r001", "digest": "ec3a3490afa349cacdcbccf74070272e115920148f2ac39e5e23d849af2ee4c5", "digestRole": "helm-variant-revision", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/rendered/release-objects.yaml", "inventory": "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/rendered/object-inventory.yaml", "objectCount": 13, "digest": "cdfd98d41d43445a3c5830bd8f789012c5aa2953d4c68ee39c86490025d244cb", "digestRole": "canonical-object-set", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "cdfd98d41d43445a3c5830bd8f789012c5aa2953d4c68ee39c86490025d244cb", "record": "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "karpenter/karpenter@1.14.0/crds-managed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/karpenter/karpenter/1.14.0/publication/flattening-safety-verdict-crds-managed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/rendered/release-objects.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/crds-managed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=karpenter/karpenter", "version=1.14.0", "base=crds-managed", "valuesProfile=recipes/karpenter/karpenter/1.14.0/effective-values-crds-managed.yaml", "namespace=kube-system", "releaseName=karpenter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "capacitybuffers.autoscaling.x-k8s.io", "type": "requiredCRDs", "required": true, "details": { "name": "capacitybuffers.autoscaling.x-k8s.io", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } }, { "name": "ec2nodeclasses.karpenter.k8s.aws", "type": "requiredCRDs", "required": true, "details": { "name": "ec2nodeclasses.karpenter.k8s.aws", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } }, { "name": "nodeclaims.karpenter.sh", "type": "requiredCRDs", "required": true, "details": { "name": "nodeclaims.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } }, { "name": "nodeoverlays.karpenter.sh", "type": "requiredCRDs", "required": true, "details": { "name": "nodeoverlays.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } }, { "name": "nodepools.karpenter.sh", "type": "requiredCRDs", "required": true, "details": { "name": "nodepools.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } }, { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "minimumSchedulableNodes": 1, "purpose": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "awsRegion", "path": "controller.env[AWS_REGION]", "purpose": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup", "source": "platform-profile", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "capacitybuffers.autoscaling.x-k8s.io", "origin": "base", "type": "target-fact", "detail": "CRD capacitybuffers.autoscaling.x-k8s.io must exist before apply." }, { "id": "ec2nodeclasses.karpenter.k8s.aws", "origin": "base", "type": "target-fact", "detail": "CRD ec2nodeclasses.karpenter.k8s.aws must exist before apply." }, { "id": "nodeclaims.karpenter.sh", "origin": "base", "type": "target-fact", "detail": "CRD nodeclaims.karpenter.sh must exist before apply." }, { "id": "nodeoverlays.karpenter.sh", "origin": "base", "type": "target-fact", "detail": "CRD nodeoverlays.karpenter.sh must exist before apply." }, { "id": "nodepools.karpenter.sh", "origin": "base", "type": "target-fact", "detail": "CRD nodepools.karpenter.sh must exist before apply." }, { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" }, { "id": "controller.env[AWS_REGION]", "origin": "base", "type": "target-fact", "detail": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup" } ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "name": "capacitybuffers.autoscaling.x-k8s.io", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" }, { "name": "ec2nodeclasses.karpenter.k8s.aws", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" }, { "name": "nodeclaims.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" }, { "name": "nodeoverlays.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" }, { "name": "nodepools.karpenter.sh", "suggestedSource": "helm install karpenter-crd oci://public.ecr.aws/karpenter/karpenter-crd --version 1.14.0 --namespace kube-system", "packageSource": "package://prerequisites/target-facts/crds-managed-crds.yaml", "packagePath": "packages/karpenter/karpenter/1.14.0/prerequisites/target-facts/crds-managed-crds.yaml" } ], "requiredTopology": { "minimumSchedulableNodes": 1, "purpose": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" }, "requiredValues": [ { "installerInput": "awsRegion", "path": "controller.env[AWS_REGION]", "purpose": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup", "source": "platform-profile", "stage": "pre-render" } ] }, "requirementRefs": [ "capacitybuffers.autoscaling.x-k8s.io", "ec2nodeclasses.karpenter.k8s.aws", "nodeclaims.karpenter.sh", "nodeoverlays.karpenter.sh", "nodepools.karpenter.sh", "target topology", "controller.env[AWS_REGION]" ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "capacitybuffers.autoscaling.x-k8s.io", "ec2nodeclasses.karpenter.k8s.aws", "nodeclaims.karpenter.sh", "nodeoverlays.karpenter.sh", "nodepools.karpenter.sh", "target topology", "controller.env[AWS_REGION]" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-crds-managed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "karpenter-karpenter-1-14-0-default", "labels": { "sourceType": "helm", "component": "karpenter/karpenter", "sourceVersion": "1.14.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "karpenter/karpenter", "version": "1.14.0", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/karpenter-karpenter:1.14.0@sha256:9df71774cdd0dec1b03d8f417d28176833a14f1bb3d094e01502f46101e777cc", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ecb946809732af8bbe4f7fc3c03d19f6b1d81fd92ebd6c8a4af65c56bd41f14b", "digestRole": "helm-variant-revision", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "c38230e2c3415465b9369ba43943b2f5c33fd5082b836eea705af7546383e381", "digestRole": "canonical-object-set", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c38230e2c3415465b9369ba43943b2f5c33fd5082b836eea705af7546383e381", "record": "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "karpenter/karpenter@1.14.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/karpenter/karpenter/1.14.0/publication/flattening-safety-verdict-default.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=karpenter/karpenter", "version=1.14.0", "base=default", "valuesProfile=recipes/karpenter/karpenter/1.14.0/effective-values.yaml", "namespace=kube-system", "releaseName=karpenter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "minimumSchedulableNodes": 2, "purpose": "replicas 2 with the chart-default required pod anti-affinity needs two schedulable non-Karpenter nodes" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "clusterName", "path": "settings.clusterName", "purpose": "EKS cluster name; required with no chart default, the deployment template refuses to render without it", "source": "platform-profile", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "replicas 2 with the chart-default required pod anti-affinity needs two schedulable non-Karpenter nodes" }, { "id": "settings.clusterName", "origin": "base", "type": "target-fact", "detail": "EKS cluster name; required with no chart default, the deployment template refuses to render without it" } ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredTopology": { "minimumSchedulableNodes": 2, "purpose": "replicas 2 with the chart-default required pod anti-affinity needs two schedulable non-Karpenter nodes" }, "requiredValues": [ { "installerInput": "clusterName", "path": "settings.clusterName", "purpose": "EKS cluster name; required with no chart default, the deployment template refuses to render without it", "source": "platform-profile", "stage": "pre-render" } ] }, "requirementRefs": [ "target topology", "settings.clusterName" ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "target topology", "settings.clusterName" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "karpenter-karpenter-1-14-0-eks-inference", "labels": { "sourceType": "helm", "component": "karpenter/karpenter", "sourceVersion": "1.14.0", "base": "eks-inference" } }, "spec": { "source": { "type": "helm", "name": "karpenter/karpenter", "version": "1.14.0", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/karpenter-karpenter:1.14.0@sha256:9df71774cdd0dec1b03d8f417d28176833a14f1bb3d094e01502f46101e777cc", "selection": { "name": "eks-inference", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" } }, "baseVariant": { "name": "eks-inference", "revision": "r001", "digest": "1cb9f238a15e453a6f6d71bf79dc53596a541f27a72985c922787fc0dab3aff3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/rendered/release-objects.yaml", "inventory": "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/rendered/object-inventory.yaml", "objectCount": 18, "digest": "27259c2a0af970cd3b87623fa209ccd9d1e37dec693f1d6b0f0bc904958db64c", "digestRole": "canonical-object-set", "digestRecord": "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "27259c2a0af970cd3b87623fa209ccd9d1e37dec693f1d6b0f0bc904958db64c", "record": "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "karpenter/karpenter@1.14.0/eks-inference; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/karpenter/karpenter/1.14.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/rendered/release-objects.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml", "recipes/karpenter/karpenter/1.14.0/revisions/eks-inference/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=karpenter/karpenter", "version=1.14.0", "base=eks-inference", "valuesProfile=recipes/karpenter/karpenter/1.14.0/effective-values-eks-inference.yaml", "namespace=kube-system", "releaseName=karpenter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [ { "name": "requiredTopology-1", "type": "requiredTopology", "required": true, "details": { "minimumSchedulableNodes": 1, "purpose": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "awsRegion", "path": "controller.env[AWS_REGION]", "purpose": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup", "source": "platform-profile", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "target topology", "origin": "base", "type": "target-fact", "detail": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" }, { "id": "controller.env[AWS_REGION]", "origin": "base", "type": "target-fact", "detail": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup" } ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredTopology": { "minimumSchedulableNodes": 1, "purpose": "replicas 1 needs one schedulable non-Karpenter node on the system nodegroup" }, "requiredValues": [ { "installerInput": "awsRegion", "path": "controller.env[AWS_REGION]", "purpose": "AWS region for the controller; the chart supplies nothing and EKS Pod Identity does not inject it, so an absent value panics the controller at startup", "source": "platform-profile", "stage": "pre-render" } ] }, "requirementRefs": [ "target topology", "controller.env[AWS_REGION]" ], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "target topology", "controller.env[AWS_REGION]" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/karpenter-karpenter-1-14-0-eks-inference.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kedacore-keda-2-19-0-default", "labels": { "sourceType": "helm", "component": "kedacore/keda", "sourceVersion": "2.19.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "kedacore/keda", "version": "2.19.0", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kedacore-keda:2.19.0@sha256:69335ae19106baebe131e86d2e409df6965f8f855927396d5079622d01ab7ba9", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b18f3e4598cc6e873ce132e0af29ca9ec651675e832423de0a05d74f22eb5c69", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kedacore/keda/2.19.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 29, "digest": "95bac2eeb03cdf4d0392ed7d66c37c81db91beeba346752f932abef73d26db1f", "digestRole": "canonical-object-set", "digestRecord": "recipes/kedacore/keda/2.19.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "95bac2eeb03cdf4d0392ed7d66c37c81db91beeba346752f932abef73d26db1f", "record": "recipes/kedacore/keda/2.19.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "kedacore/keda@2.19.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kedacore/keda/2.19.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml", "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/kedacore/keda/2.19.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml", "recipes/kedacore/keda/2.19.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kedacore/keda", "version=2.19.0", "base=default", "valuesProfile=recipes/kedacore/keda/2.19.0/effective-values.yaml", "namespace=default", "releaseName=keda", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kedacore-keda-2-19-0-no-crds", "labels": { "sourceType": "helm", "component": "kedacore/keda", "sourceVersion": "2.19.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "kedacore/keda", "version": "2.19.0", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kedacore-keda:2.19.0@sha256:69335ae19106baebe131e86d2e409df6965f8f855927396d5079622d01ab7ba9", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "c5a9b4bf0a0eb7786a206b54365e8ad632e96bb3f4796a51f41621fea1f276a7", "digestRole": "canonical-object-set", "digestRecord": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c5a9b4bf0a0eb7786a206b54365e8ad632e96bb3f4796a51f41621fea1f276a7", "record": "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "kedacore/keda@2.19.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kedacore/keda/2.19.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kedacore/keda", "version=2.19.0", "base=no-crds", "valuesProfile=recipes/kedacore/keda/2.19.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=keda", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "cloudeventsources.eventing.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudeventsources.eventing.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustercloudeventsources.eventing.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustercloudeventsources.eventing.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustertriggerauthentications.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustertriggerauthentications.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "scaledjobs.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scaledjobs.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "scaledobjects.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scaledobjects.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "triggerauthentications.keda.sh", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "triggerauthentications.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The operator mounts kedaorg-certs as optional, starts certificate rotation, and creates the Secret used by the webhook and metrics API pods." }, { "id": "cloudeventsources.eventing.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" }, { "id": "clustercloudeventsources.eventing.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" }, { "id": "clustertriggerauthentications.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" }, { "id": "scaledjobs.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" }, { "id": "scaledobjects.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" }, { "id": "triggerauthentications.keda.sh", "origin": "base", "type": "target-fact", "detail": "KEDA CRD managed outside this no-crds preset" } ], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The operator mounts kedaorg-certs as optional, starts certificate rotation, and creates the Secret used by the webhook and metrics API pods.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-route-candidates/selected-routes/kedacore-keda-no-crds.yaml", "recipes/kedacore/keda/2.19.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/kedacore/keda/2.19.0/variants/no-crds/variant.yaml", "runs/live-kind-parity/kedacore-keda-no-crds/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cloudeventsources.eventing.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustercloudeventsources.eventing.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustertriggerauthentications.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scaledjobs.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scaledobjects.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "triggerauthentications.keda.sh", "purpose": "KEDA CRD managed outside this no-crds preset", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kedacore/keda/2.19.0/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "cloudeventsources.eventing.keda.sh", "clustercloudeventsources.eventing.keda.sh", "clustertriggerauthentications.keda.sh", "scaledjobs.keda.sh", "scaledobjects.keda.sh", "triggerauthentications.keda.sh" ], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "cloudeventsources.eventing.keda.sh", "clustercloudeventsources.eventing.keda.sh", "clustertriggerauthentications.keda.sh", "scaledjobs.keda.sh", "scaledobjects.keda.sh", "triggerauthentications.keda.sh" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/kedacore-keda-2-19-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kubara-local-platform-v0-12-0-base", "labels": { "sourceType": "kubara", "component": "kubara-local-platform", "sourceVersion": "v0.12.0", "base": "base" } }, "spec": { "source": { "type": "kubara", "name": "local-platform", "version": "v0.12.0", "record": "examples/kubara/local-platform/generation-receipt.yaml", "packageOciRef": "", "selection": { "name": "base", "kind": "catalog-preset", "provider": "Config Workshop", "record": "examples/kubara/local-platform/generation-receipt.yaml" } }, "baseVariant": { "name": "base", "revision": "generated-v0.12.0", "digest": "sha256:b5cc98615a93c708870ecc80d92af488e7a7e517c8da8c8af0bc3b6ae5bfdf54", "digestRole": "literal-configuration-oci-manifest", "digestRecord": "examples/kubara/local-platform/generation-receipt.yaml" }, "configuration": { "format": "kubara-argocd-bootstrap-yaml", "objects": "examples/kubara/local-platform/rendered/release-objects.yaml", "inventory": "examples/kubara/local-platform/rendered/object-inventory.json", "objectCount": 77, "digest": "d8061dd05c290ac90542560bcb29bd49c655b03183362da0894585275ef4a5d8", "digestRole": "inventory-file", "digestRecord": "examples/kubara/local-platform/rendered/object-inventory.json" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/kubara/local-platform/generation-receipt.yaml" }, "materialization": { "method": "generator", "status": "captured", "outputDigest": "d8061dd05c290ac90542560bcb29bd49c655b03183362da0894585275ef4a5d8", "record": "examples/kubara/local-platform/rendered/object-inventory.json" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "local-platform@v0.12.0/base; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Kubara generated the exact platform bootstrap objects retained by this base.", "Referenced component sources keep their own processing and lifecycle decisions." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the kubara source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "Kubara selections, generated platform files, or the retained source record" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/kubara/local-platform/generation-receipt.yaml", "examples/kubara/local-platform/rendered/release-objects.yaml", "examples/kubara/local-platform/rendered/object-inventory.json" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded source generation step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The Kubara source, component selections, and generator inputs" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/kubara/local-platform/generation-receipt.yaml", "examples/kubara/local-platform/rendered/object-inventory.json" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "examples/kubara/local-platform/route-intent.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "cluster=test-cluster", "stage=local", "clusterType=hub", "enabledServices=argocd,cert-manager,external-secrets,homer-dashboard,kube-prometheus-stack,metrics-server,traefik", "helmKubeVersion=1.34.0", "releaseName=kubara-platform", "namespace=argocd" ], "installTime": [ "Argo CD target cluster", "External Secrets ClusterExternalSecret CRD", "ClusterSecretStore=test-cluster-local", "remote image-pull key when private images are used", "approved handling for argocd-secret and cluster-kubernetes.default.svc" ], "installTimeStatus": "declared-not-live-checked" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "argocd-crds-first", "origin": "base", "type": "lifecycle-action", "detail": "Argo CD custom resources cannot be applied until their three CRDs exist and report Established." }, { "id": "argocd-redis-secret-init", "origin": "base", "type": "lifecycle-action", "detail": "The upstream Argo CD chart marks four resources as a Helm pre-install and pre-upgrade hook so a Job can create the Redis Secret before Argo CD starts." }, { "id": "external-secrets-crd", "origin": "base", "type": "lifecycle-action", "detail": "The render contains a ClusterExternalSecret, so the External Secrets CRD must exist before that object can be applied." }, { "id": "rendered-secrets", "origin": "base", "type": "lifecycle-action", "detail": "cub variant upload does not upload rendered Secret objects, including Secrets whose current data is not sensitive." } ], "records": [ "examples/kubara/local-platform/route-intent.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "argocd-crds-first", "requirementRefs": [ "argocd-crds-first" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "apply the CRDs first and wait for Established before applying Argo CD custom resources", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-live", "supportedRuntimes": [ "Argo CD" ], "checks": [], "evidence": [] }, { "id": "argocd-redis-secret-init", "requirementRefs": [ "argocd-redis-secret-init" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "apply the hook RBAC and Job, wait for the Job to complete, record the result, then continue", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-live", "supportedRuntimes": [ "Argo CD" ], "checks": [], "evidence": [] }, { "id": "external-secrets-crd", "requirementRefs": [ "external-secrets-crd" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "check the CRD and Secret-store facts before applying the ClusterExternalSecret", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-live", "supportedRuntimes": [], "checks": [], "evidence": [] }, { "id": "rendered-secrets", "requirementRefs": [ "rendered-secrets" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "create or bind these two Secrets through the approved Secret path before applying the remaining objects", "automatic": false, "status": "requires-destination-resolution", "sourceStatus": "recorded-not-live", "supportedRuntimes": [], "checks": [], "evidence": [] } ], "records": [ "examples/kubara/local-platform/route-intent.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "clusterName": "test-cluster", "clusterType": "hub", "requiredApis": [ "apiextensions.k8s.io/v1", "external-secrets.io/v1" ], "requiredSecretStore": "test-cluster-local" }, "requirementRefs": [], "records": [ "examples/kubara/local-platform/route-intent.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "examples/kubara/local-platform/generation-receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "local-only", "localDigest": "sha256:b5cc98615a93c708870ecc80d92af488e7a7e517c8da8c8af0bc3b6ae5bfdf54", "localLayout": "examples/kubara/local-platform/oci-layout", "localPush": "pass", "localPull": "pass", "publicPush": "not-run", "publicPull": "not-run", "plannedRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kubara-local-platform-config:0.12.0" }, "configHubReleaseOci": { "status": "not-run" }, "argoCd": "not-run", "flux": "not-applicable-to-this-base" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "generationReceipt": "examples/kubara/local-platform/generation-receipt.yaml", "sourceLock": "examples/kubara/local-platform/source-lock.yaml", "generatedChecksums": "examples/kubara/local-platform/generated/checksums.txt", "renderedChecksums": "examples/kubara/local-platform/rendered/checksums.txt", "routeIntent": "examples/kubara/local-platform/route-intent.yaml", "localOciManifest": "examples/kubara/local-platform/local-config-oci-manifest.json", "configHubUploadReceipt": "examples/kubara/local-platform/confighub-upload-receipt.yaml" }, "operations": { "changeCadence": "planned-platform-release", "ownerClass": "platform-team", "resourceClass": "system-configuration", "classificationSource": "config-catalog/operational-class-examples.yaml", "classificationReason": "This configuration changes cluster-wide platform behavior, so every environment requires approval and rollout starts with one test cluster.", "liveSpace": "kubara-local-platform-v0-12-0", "target": { "ownerClass": "platform-team", "scope": "cluster", "selection": "Select one test cluster first; expand only after the platform configuration and its dependent service are healthy." }, "gates": { "normalSet": "approvalRequired", "productionSet": "approvalRequired" }, "rollout": { "limit": "One kind cluster and one downstream service passed; a multi-cluster wave has not run.", "method": "pilot-cluster-then-platform-wave", "sequence": [ "test cluster", "selected fleet wave" ], "status": "single-cluster-observed" } } }, "status": { "level": "partial", "claim": "Kubara v0.12.0 generated the committed platform source and 77 literal Argo CD bootstrap objects. The routes for 3 CRDs, 4 Helm hook resources, 2 Secrets, and the External Secrets prerequisite are recorded beside the base.", "limits": [ "The literal OCI artifact is local until the public push and anonymous pull receipts pass.", "The recorded routes have not been executed on a live target.", "No live Argo CD reconciliation or downstream platform health is claimed.", "This base records the generated Argo CD bootstrap and platform assignments; it does not claim that every downstream service chart has been flattened into this one object set." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kubernetes-yaml-acme-web-base", "labels": { "sourceType": "kubernetes-yaml", "component": "plain-yaml-acme-web", "sourceVersion": "source-r001", "base": "base" } }, "spec": { "source": { "type": "kubernetes-yaml", "name": "plain-yaml-acme-web", "version": "source-r001", "record": "runs/literal-yaml-upload-proof/receipt.yaml", "packageOciRef": "", "selection": { "name": "base", "kind": "literal-input", "provider": "Configuration owner", "record": "runs/literal-yaml-upload-proof/receipt.yaml" } }, "baseVariant": { "name": "base", "revision": "source-r001", "digest": "963bf5420b78fbbfa43be7adbb1ced299edef0b2baf0f36850992a6bf66c1926", "digestRole": "source-file-set", "digestRecord": "runs/literal-yaml-upload-proof/receipt.yaml" }, "configuration": { "format": "kubernetes-yaml-directory", "objects": "examples/plain-yaml/acme-web", "inventory": "runs/literal-yaml-upload-proof/receipt.yaml", "objectCount": 4, "digest": "963bf5420b78fbbfa43be7adbb1ced299edef0b2baf0f36850992a6bf66c1926", "digestRole": "canonical-object-set", "digestRecord": "runs/literal-yaml-upload-proof/receipt.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "runs/literal-yaml-upload-proof/receipt.yaml" }, "materialization": { "method": "read-literal-configuration", "status": "recorded-no-op", "outputDigest": "963bf5420b78fbbfa43be7adbb1ced299edef0b2baf0f36850992a6bf66c1926", "record": "runs/literal-yaml-upload-proof/receipt.yaml" }, "flattening": { "status": "decided", "verdict": "born-flattened", "action": "retain-exact-objects", "scope": "plain-yaml-acme-web@source-r001/base; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "runs/literal-yaml-upload-proof/receipt.yaml" }, "boundaries": [ "The source already contains exact Kubernetes objects; parsing and canonicalization do not change their meaning." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Read and compare the exact Kubernetes objects and their digest without running a source processor.", "requiredInputs": [ "The Kubernetes YAML files" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "runs/literal-yaml-upload-proof/receipt.yaml", "examples/plain-yaml/acme-web" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "This source already contains exact Kubernetes objects. Reading and fingerprinting them is the recorded materialization step.", "requiredInputs": [ "The literal Kubernetes YAML; no source processor is required" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "source=examples/plain-yaml/acme-web", "objectSetSha256=963bf5420b78fbbfa43be7adbb1ced299edef0b2baf0f36850992a6bf66c1926" ], "installTime": [], "installTimeStatus": "no target facts assessed" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "runs/literal-yaml-upload-proof/receipt.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-for-this-base" }, "configHubUpload": { "status": "pass", "space": "plain-yaml-acme-web-base", "objectSetSha256": "963bf5420b78fbbfa43be7adbb1ced299edef0b2baf0f36850992a6bf66c1926", "receipt": "runs/literal-yaml-upload-proof/receipt.yaml" }, "configHubReleaseOci": { "status": "not-run" }, "argoCd": "not-run", "flux": "not-run", "direct": "not-run" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "source": "examples/plain-yaml/acme-web", "configHubUpload": "runs/literal-yaml-upload-proof/receipt.yaml", "guide": "data/literal-config-examples/summary.md" }, "operations": { "resourceClass": "user-workload", "ownerClass": "application-team", "changeCadence": "application-release" } }, "status": { "level": "partial", "claim": "ConfigHub stored the four supplied Kubernetes objects unchanged, with no render step.", "limits": [ "The upload receipt does not assess lifecycle requirements or target facts, so the Catalog records that work as a gap.", "OCI publication, deployment, promotion, and live observation have not run for this base." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kyverno-kyverno-3-8-1-default", "labels": { "sourceType": "helm", "component": "kyverno/kyverno", "sourceVersion": "3.8.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "kyverno/kyverno", "version": "3.8.1", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.1@sha256:3c7560e8038b74ed7f5dd6257a11656f3e94ea4dee92768b726e50580ef3cea3", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "3bc62d1f7d56d6bbe3d8aa1b8c6d55fb4218931082e1d3a3b41620e998d674a0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 69, "digest": "00df8d584a2b69683a7895eff47d5a2bd6c1947827272bc518b0b79bbba80884", "digestRole": "canonical-object-set", "digestRecord": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "00df8d584a2b69683a7895eff47d5a2bd6c1947827272bc518b0b79bbba80884", "record": "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "kyverno/kyverno@3.8.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kyverno/kyverno/3.8.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kyverno/kyverno", "version=3.8.1", "base=default", "valuesProfile=recipes/kyverno/kyverno/3.8.1/effective-values.yaml", "namespace=default", "releaseName=kyverno", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "delete-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "Webhook and APIService cleanup belongs to delete or rollback policy." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Resource migration after upgrade must be recorded as an upgrade operation." }, { "id": "explicit-test-check", "origin": "base", "type": "lifecycle-action", "detail": "Test hooks become checks, not hidden install behavior." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "hook-weight-ordering" }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "target-facts" } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "delete-cleanup-policy", "requirementRefs": [ "delete-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Webhook and APIService cleanup belongs to delete or rollback policy.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Resource migration after upgrade must be recorded as an upgrade operation.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "explicit-test-check", "requirementRefs": [ "explicit-test-check" ], "phase": "observe", "proposedActor": "CI or operator", "proposedMechanism": "Test hooks become checks, not hidden install behavior.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "Your applier — must apply CRDs before dependent objects", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "# create the required target facts (Secret/StorageClass/etc.) before apply", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [ "delete-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kyverno-kyverno-3-8-1-no-crds", "labels": { "sourceType": "helm", "component": "kyverno/kyverno", "sourceVersion": "3.8.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "kyverno/kyverno", "version": "3.8.1", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.1@sha256:3c7560e8038b74ed7f5dd6257a11656f3e94ea4dee92768b726e50580ef3cea3", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "3a1b0dd0d65607586ee0a3ace591e776a0a13c8047cb31b43f7128febcd93227", "digestRole": "canonical-object-set", "digestRecord": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3a1b0dd0d65607586ee0a3ace591e776a0a13c8047cb31b43f7128febcd93227", "record": "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "kyverno/kyverno@3.8.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kyverno/kyverno/3.8.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "recipes/kyverno/kyverno/3.8.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kyverno/kyverno", "version=3.8.1", "base=no-crds", "valuesProfile=recipes/kyverno/kyverno/3.8.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=kyverno", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "cleanuppolicies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cleanuppolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clustercleanuppolicies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustercleanuppolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterpolicies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "globalcontextentries.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "globalcontextentries.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "policyexceptions.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyexceptions.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "updaterequests.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "updaterequests.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterephemeralreports.reports.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterephemeralreports.reports.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "ephemeralreports.reports.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ephemeralreports.reports.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "clusterpolicyreports.wgpolicyk8s.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicyreports.wgpolicyk8s.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "policyreports.wgpolicyk8s.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyreports.wgpolicyk8s.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "deletingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "deletingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "generatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "imagevalidatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "imagevalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "mutatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mutatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "namespaceddeletingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespaceddeletingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "namespacedgeneratingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedgeneratingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "namespacedimagevalidatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedimagevalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "namespacedmutatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedmutatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "namespacedvalidatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedvalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "policyexceptions.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyexceptions.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "validatingpolicies.policies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "validatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "delete-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "hook-delete-policy" }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "hook-delete-policy" }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "explicit-test-check", "origin": "base", "type": "lifecycle-action", "detail": "hook-test" }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "CRD-first ordering is not needed in a base that installs no CRDs" }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "this base needs 22 CRDs supplied before deploy (the default base installs them for you)" }, { "id": "cleanuppolicies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "clustercleanuppolicies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "clusterpolicies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "globalcontextentries.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "policyexceptions.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "updaterequests.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "clusterephemeralreports.reports.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "ephemeralreports.reports.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "clusterpolicyreports.wgpolicyk8s.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "policyreports.wgpolicyk8s.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "deletingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "generatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "imagevalidatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "mutatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "namespaceddeletingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "namespacedgeneratingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "namespacedimagevalidatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "namespacedmutatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "namespacedvalidatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "policyexceptions.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" }, { "id": "validatingpolicies.policies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno CRD managed outside this no-crds base" } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "delete-cleanup-policy", "requirementRefs": [ "delete-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Your cluster — at uninstall, automatically", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Your cluster — at uninstall, automatically", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl apply -f ; kubectl wait --for=condition=complete job/", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "explicit-test-check", "requirementRefs": [ "explicit-test-check" ], "phase": "observe", "proposedActor": "CI or operator", "proposedMechanism": "# run the chart's test/check (helm test equivalent)", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "CRD-first ordering is not needed in a base that installs no CRDs", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "this base needs 22 CRDs supplied before deploy (the default base installs them for you)", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cleanuppolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clustercleanuppolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "globalcontextentries.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyexceptions.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "updaterequests.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterephemeralreports.reports.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "ephemeralreports.reports.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicyreports.wgpolicyk8s.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyreports.wgpolicyk8s.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "deletingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "generatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "imagevalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "mutatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespaceddeletingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedgeneratingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedimagevalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedmutatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "namespacedvalidatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "policyexceptions.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "validatingpolicies.policies.kyverno.io", "purpose": "Kyverno CRD managed outside this no-crds base", "sourceVariant": "default", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/kyverno/kyverno/3.8.1/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "cleanuppolicies.kyverno.io", "clustercleanuppolicies.kyverno.io", "clusterpolicies.kyverno.io", "globalcontextentries.kyverno.io", "policies.kyverno.io", "policyexceptions.kyverno.io", "updaterequests.kyverno.io", "clusterephemeralreports.reports.kyverno.io", "ephemeralreports.reports.kyverno.io", "clusterpolicyreports.wgpolicyk8s.io", "policyreports.wgpolicyk8s.io", "deletingpolicies.policies.kyverno.io", "generatingpolicies.policies.kyverno.io", "imagevalidatingpolicies.policies.kyverno.io", "mutatingpolicies.policies.kyverno.io", "namespaceddeletingpolicies.policies.kyverno.io", "namespacedgeneratingpolicies.policies.kyverno.io", "namespacedimagevalidatingpolicies.policies.kyverno.io", "namespacedmutatingpolicies.policies.kyverno.io", "namespacedvalidatingpolicies.policies.kyverno.io", "policyexceptions.policies.kyverno.io", "validatingpolicies.policies.kyverno.io" ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "cleanuppolicies.kyverno.io", "clustercleanuppolicies.kyverno.io", "clusterpolicies.kyverno.io", "globalcontextentries.kyverno.io", "policies.kyverno.io", "policyexceptions.kyverno.io", "updaterequests.kyverno.io", "clusterephemeralreports.reports.kyverno.io", "ephemeralreports.reports.kyverno.io", "clusterpolicyreports.wgpolicyk8s.io", "policyreports.wgpolicyk8s.io", "deletingpolicies.policies.kyverno.io", "generatingpolicies.policies.kyverno.io", "imagevalidatingpolicies.policies.kyverno.io", "mutatingpolicies.policies.kyverno.io", "namespaceddeletingpolicies.policies.kyverno.io", "namespacedgeneratingpolicies.policies.kyverno.io", "namespacedimagevalidatingpolicies.policies.kyverno.io", "namespacedmutatingpolicies.policies.kyverno.io", "namespacedvalidatingpolicies.policies.kyverno.io", "policyexceptions.policies.kyverno.io", "validatingpolicies.policies.kyverno.io" ], "deliveryProtected": [ "delete-cleanup-policy", "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kyverno-kyverno-3-8-2-default", "labels": { "sourceType": "helm", "component": "kyverno/kyverno", "sourceVersion": "3.8.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "kyverno/kyverno", "version": "3.8.2", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno:3.8.2@sha256:cfaeb6df459e3b61b8c28ac9a81e63fbc38dcc17fcccb3b7c48f3e8d411266dc", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "bba363d100eb83b0a8e76c4e5519ae2d505288503bfae2243edac56b01e8f522", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 69, "digest": "1596c72d8cde36995d7cd32ff3e953830da1763a59a25459c53ae4e4d425506d", "digestRole": "canonical-object-set", "digestRecord": "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "1596c72d8cde36995d7cd32ff3e953830da1763a59a25459c53ae4e4d425506d", "record": "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "kyverno/kyverno@3.8.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kyverno/kyverno/3.8.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "recipes/kyverno/kyverno/3.8.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kyverno/kyverno", "version=3.8.2", "base=default", "valuesProfile=recipes/kyverno/kyverno/3.8.2/effective-values.yaml", "namespace=kyverno", "releaseName=kyverno", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "delete-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "Webhook and APIService cleanup belongs to delete or rollback policy." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Resource migration after upgrade must be recorded as an upgrade operation." }, { "id": "explicit-test-check", "origin": "base", "type": "lifecycle-action", "detail": "Test hooks become checks, not hidden install behavior." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "hook-weight-ordering" }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "target-facts" } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "delete-cleanup-policy", "requirementRefs": [ "delete-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Webhook and APIService cleanup belongs to delete or rollback policy.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 3.8.2 and this base", "Run this route for 3.8.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Resource migration after upgrade must be recorded as an upgrade operation.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 3.8.2 and this base", "Run this route for 3.8.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "explicit-test-check", "requirementRefs": [ "explicit-test-check" ], "phase": "observe", "proposedActor": "CI or operator", "proposedMechanism": "Test hooks become checks, not hidden install behavior.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 3.8.2 and this base", "Run this route for 3.8.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/kyverno/kyverno/3.8.1/helm-pain-report.yaml", "runs/hook-lifecycle/kyverno-kyverno/default/latest/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "Your applier — must apply CRDs before dependent objects", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 3.8.2 and this base", "Run this route for 3.8.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "# create the required target facts (Secret/StorageClass/etc.) before apply", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 3.8.2 and this base", "Run this route for 3.8.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/kyverno-kyverno/default/latest.yaml" ] } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [ "delete-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-3-8-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kyverno-kyverno-policies-3-8-0-default", "labels": { "sourceType": "helm", "component": "kyverno/kyverno-policies", "sourceVersion": "3.8.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "kyverno/kyverno-policies", "version": "3.8.0", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno-policies:3.8.0@sha256:0c781c6839fbfa001648593f415386716ce425483b491593b2338196c93988b4", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "41fb18e489d57e051cfe02a5bed5c069a2ee88396bc54557b3e46f4f03e36bc4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "e486d983f614fe17b5eb85b4a8e9088242c2b94ca3694d1e11294c44a4bc9ef9", "digestRole": "canonical-object-set", "digestRecord": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "e486d983f614fe17b5eb85b4a8e9088242c2b94ca3694d1e11294c44a4bc9ef9", "record": "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "kyverno/kyverno-policies@3.8.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kyverno/kyverno-policies/3.8.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml", "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml", "recipes/kyverno/kyverno-policies/3.8.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kyverno/kyverno-policies", "version=3.8.0", "base=default", "valuesProfile=recipes/kyverno/kyverno-policies/3.8.0/effective-values.yaml", "namespace=default", "releaseName=kyverno-policies", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "clusterpolicies.kyverno.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicies.kyverno.io", "purpose": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied", "sourcePath": "../../kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "kyverno/kyverno@3.8.1/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "clusterpolicies.kyverno.io", "origin": "base", "type": "target-fact", "detail": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied" } ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "clusterpolicies.kyverno.io", "purpose": "Kyverno ClusterPolicy CRD required before kyverno-policies ClusterPolicy objects can be applied", "sourcePath": "../../kyverno/3.8.1/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "kyverno/kyverno@3.8.1/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/kyverno/kyverno-policies/3.8.0/prerequisites/target-facts/default-crds.yaml" } ] }, "requirementRefs": [ "clusterpolicies.kyverno.io" ], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "clusterpolicies.kyverno.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "watch", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "kyverno-kyverno-policies-3-8-2-default", "labels": { "sourceType": "helm", "component": "kyverno/kyverno-policies", "sourceVersion": "3.8.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "kyverno/kyverno-policies", "version": "3.8.2", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/kyverno-kyverno-policies:3.8.2@sha256:4a26a388203645a841908db9bd558183fe169764033f5042d56bd5d598ba49d3", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "c74f343ed1067e3252ea718264e77b12c4a83db3b1717147433379c6d870d0cd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "5049b2e9cb54b8d2fa8e70cdf606a3be6ce9d13f081354067ff877c3174454f1", "digestRole": "canonical-object-set", "digestRecord": "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5049b2e9cb54b8d2fa8e70cdf606a3be6ce9d13f081354067ff877c3174454f1", "record": "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "kyverno/kyverno-policies@3.8.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/kyverno/kyverno-policies/3.8.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml", "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml", "recipes/kyverno/kyverno-policies/3.8.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=kyverno/kyverno-policies", "version=3.8.2", "base=default", "valuesProfile=recipes/kyverno/kyverno-policies/3.8.2/effective-values.yaml", "namespace=kyverno", "releaseName=kyverno-policies", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/kyverno-kyverno-policies-3-8-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "linkerd-linkerd-crds-1-8-0-default", "labels": { "sourceType": "helm", "component": "linkerd/linkerd-crds", "sourceVersion": "1.8.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "linkerd/linkerd-crds", "version": "1.8.0", "record": "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/linkerd-linkerd-crds:1.8.0@sha256:344c86888edbd4ef9b4dba594415ed4210a52fd69cdb33efef2f302d1129989c", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "13837b92c4feda268fdeeb08dfd92c1adf95a7656211f963d8ae76de3a2f94b0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "af01ee9087a17f0ffabc7b8c0d6969a8fddde7dde977264ee92e6b12cd8ea01b", "digestRole": "canonical-object-set", "digestRecord": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "af01ee9087a17f0ffabc7b8c0d6969a8fddde7dde977264ee92e6b12cd8ea01b", "record": "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "linkerd/linkerd-crds@1.8.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/linkerd/linkerd-crds/1.8.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml", "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml", "recipes/linkerd/linkerd-crds/1.8.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=linkerd/linkerd-crds", "version=1.8.0", "base=default", "valuesProfile=recipes/linkerd/linkerd-crds/1.8.0/effective-values.yaml", "namespace=default", "releaseName=linkerd-crds", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/linkerd-linkerd-crds-1-8-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "longhorn-longhorn-1-11-2-default", "labels": { "sourceType": "helm", "component": "longhorn/longhorn", "sourceVersion": "1.11.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "longhorn/longhorn", "version": "1.11.2", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9e6c451504370e5485db7acdfa4fbfc25f9df0b5a03d6f4d159a4df7dfa57fd3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 41, "digest": "4a2f739775a696f5d67db6adf1f99473c60a3f5adf308ceb3ccbf222435acd90", "digestRole": "canonical-object-set", "digestRecord": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4a2f739775a696f5d67db6adf1f99473c60a3f5adf308ceb3ccbf222435acd90", "record": "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "longhorn/longhorn@1.11.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/longhorn/longhorn/1.11.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=longhorn/longhorn", "version=1.11.2", "base=default", "valuesProfile=recipes/longhorn/longhorn/1.11.2/effective-values.yaml", "namespace=longhorn-system", "releaseName=longhorn", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "longhorn-longhorn-1-11-2-ui-ingress", "labels": { "sourceType": "helm", "component": "longhorn/longhorn", "sourceVersion": "1.11.2", "base": "ui-ingress" } }, "spec": { "source": { "type": "helm", "name": "longhorn/longhorn", "version": "1.11.2", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f", "selection": { "name": "ui-ingress", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" } }, "baseVariant": { "name": "ui-ingress", "revision": "r001", "digest": "1069fea32675f30aedba7d7678d756e05855ac2e60eeffaa673f5684e566d917", "digestRole": "helm-variant-revision", "digestRecord": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/release-objects.yaml", "inventory": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/object-inventory.yaml", "objectCount": 42, "digest": "2f6508c2bc3f2a09e1ffcb8ec71282b3e2dd52e69fe8ca80fc90ab756f9b9298", "digestRole": "canonical-object-set", "digestRecord": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2f6508c2bc3f2a09e1ffcb8ec71282b3e2dd52e69fe8ca80fc90ab756f9b9298", "record": "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "longhorn/longhorn@1.11.2/ui-ingress; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/longhorn/longhorn/1.11.2/publication/flattening-safety-verdict-ui-ingress.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/release-objects.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml", "recipes/longhorn/longhorn/1.11.2/revisions/ui-ingress/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=longhorn/longhorn", "version=1.11.2", "base=ui-ingress", "valuesProfile=recipes/longhorn/longhorn/1.11.2/effective-values-ui-ingress.yaml", "namespace=longhorn-system", "releaseName=longhorn", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-11-2-ui-ingress.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "longhorn-longhorn-1-12-0-default", "labels": { "sourceType": "helm", "component": "longhorn/longhorn", "sourceVersion": "1.12.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "longhorn/longhorn", "version": "1.12.0", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.12.0@sha256:f0ca4ef7a625739a763933ede5edd882e26c9ff6ebb0dd0ef6e500adfd4ed717", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "028aea18e9fae110273d7680d8c25e26e69818e5a52b41400a9b20058cb1f359", "digestRole": "helm-variant-revision", "digestRecord": "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 42, "digest": "5297ce7e4c7d1dcbae7404f2b3348efcb4c2d4e1b11a140de98c81eb99fe07c7", "digestRole": "canonical-object-set", "digestRecord": "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5297ce7e4c7d1dcbae7404f2b3348efcb4c2d4e1b11a140de98c81eb99fe07c7", "record": "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "longhorn/longhorn@1.12.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/longhorn/longhorn/1.12.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml", "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml", "recipes/longhorn/longhorn/1.12.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=longhorn/longhorn", "version=1.12.0", "base=default", "valuesProfile=recipes/longhorn/longhorn/1.12.0/effective-values.yaml", "namespace=longhorn-system", "releaseName=longhorn", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/longhorn-longhorn-1-12-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "metallb-metallb-0-16-1-default", "labels": { "sourceType": "helm", "component": "metallb/metallb", "sourceVersion": "0.16.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "metallb/metallb", "version": "0.16.1", "record": "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metallb-metallb:0.16.1@sha256:79b8a8a87f82e56caed0a630e46b84caf688cf50f5b18b7a7a930c7c31ba4bee", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "46502e4f01a49d8134758eb5d3764cea2d4fc1bc5b97e8400a28a438965fcbc8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/metallb/metallb/0.16.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/metallb/metallb/0.16.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/metallb/metallb/0.16.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 42, "digest": "430fb6a1ec84cd0b737106c4b87ac33d9734adb9fd337767a3161c90d7ae2d4e", "digestRole": "canonical-object-set", "digestRecord": "recipes/metallb/metallb/0.16.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "430fb6a1ec84cd0b737106c4b87ac33d9734adb9fd337767a3161c90d7ae2d4e", "record": "recipes/metallb/metallb/0.16.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "metallb/metallb@0.16.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/metallb/metallb/0.16.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml", "recipes/metallb/metallb/0.16.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/metallb/metallb/0.16.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml", "recipes/metallb/metallb/0.16.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=metallb/metallb", "version=0.16.1", "base=default", "valuesProfile=recipes/metallb/metallb/0.16.1/effective-values.yaml", "namespace=metallb-system", "releaseName=metallb", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/metallb-metallb-0-16-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "metrics-server-metrics-server-3-13-0-default", "labels": { "sourceType": "helm", "component": "metrics-server/metrics-server", "sourceVersion": "3.13.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "metrics-server/metrics-server", "version": "3.13.0", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.0@sha256:682e4610d70e6ad31dfc87c1a04ec2172cd2e5446ae3ff1e2ecaa8c6c2356127", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "952cb755c9ec6a959401b1babbd685b908f00bc16e631637323a7d03a094f277", "digestRole": "helm-variant-revision", "digestRecord": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "97514966a1917b1ae3b597ec3a32216d0a650db7cb56d472f4e722c69c869b51", "digestRole": "canonical-object-set", "digestRecord": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "97514966a1917b1ae3b597ec3a32216d0a650db7cb56d472f4e722c69c869b51", "record": "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "metrics-server/metrics-server@3.13.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/metrics-server/metrics-server/3.13.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=metrics-server/metrics-server", "version=3.13.0", "base=default", "valuesProfile=recipes/metrics-server/metrics-server/3.13.0/effective-values.yaml", "namespace=kube-system", "releaseName=metrics-server", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "metrics-server-metrics-server-3-13-0-external-tls-ca", "labels": { "sourceType": "helm", "component": "metrics-server/metrics-server", "sourceVersion": "3.13.0", "base": "external-tls-ca" } }, "spec": { "source": { "type": "helm", "name": "metrics-server/metrics-server", "version": "3.13.0", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.0@sha256:682e4610d70e6ad31dfc87c1a04ec2172cd2e5446ae3ff1e2ecaa8c6c2356127", "selection": { "name": "external-tls-ca", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" } }, "baseVariant": { "name": "external-tls-ca", "revision": "r001", "digest": "25119409096b4e7c94b8101f0f14be839252f40bb455fe6fa1a38c9b808179d1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/release-objects.yaml", "inventory": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "03497dfa266c74cd3bdbf9f884e4d255ae0f24b426a030f6290c36505a1300a4", "digestRole": "canonical-object-set", "digestRecord": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "03497dfa266c74cd3bdbf9f884e4d255ae0f24b426a030f6290c36505a1300a4", "record": "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "metrics-server/metrics-server@3.13.0/external-tls-ca; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/metrics-server/metrics-server/3.13.0/publication/flattening-safety-verdict-external-tls-ca.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/release-objects.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml", "recipes/metrics-server/metrics-server/3.13.0/revisions/external-tls-ca/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=metrics-server/metrics-server", "version=3.13.0", "base=external-tls-ca", "valuesProfile=recipes/metrics-server/metrics-server/3.13.0/effective-values-external-tls-ca.yaml", "namespace=kube-system", "releaseName=metrics-server", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "metrics-server-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key" ], "name": "metrics-server-tls", "namespace": "kube-system", "purpose": "metrics-server serving certificate" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "apiServiceCaBundle", "installerInputFormat": "base64-pem", "path": "apiService.caBundle", "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls", "regularHelmFormat": "pem", "source": "metrics-server-tls-ca", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "kube-system/metrics-server-tls", "origin": "base", "type": "target-fact", "detail": "metrics-server serving certificate" }, { "id": "apiService.caBundle", "origin": "base", "type": "target-fact", "detail": "APIService CA bundle that validates kube-system/metrics-server-tls" } ], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt", "tls.key" ], "name": "metrics-server-tls", "namespace": "kube-system", "purpose": "metrics-server serving certificate" } ], "requiredValues": [ { "installerInput": "apiServiceCaBundle", "installerInputFormat": "base64-pem", "path": "apiService.caBundle", "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls", "regularHelmFormat": "pem", "source": "metrics-server-tls-ca", "stage": "pre-render" } ] }, "requirementRefs": [ "kube-system/metrics-server-tls", "apiService.caBundle" ], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "kube-system/metrics-server-tls", "apiService.caBundle" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-0-external-tls-ca.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "metrics-server-metrics-server-3-13-1-default", "labels": { "sourceType": "helm", "component": "metrics-server/metrics-server", "sourceVersion": "3.13.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "metrics-server/metrics-server", "version": "3.13.1", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.1@sha256:ae2c7fad50add92edd4864cfe08ec92c46eb041d9e8f7014a4504a77297b409f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ad5ef093f5d0d0579de82d628033c4f9b7c03c37eee7e29d4817f4d100a527c5", "digestRole": "helm-variant-revision", "digestRecord": "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "ba425a0f2a88f25a0052c54d3cbfe143f399f5ee13e53e1d926d84f82066e93d", "digestRole": "canonical-object-set", "digestRecord": "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ba425a0f2a88f25a0052c54d3cbfe143f399f5ee13e53e1d926d84f82066e93d", "record": "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "metrics-server/metrics-server@3.13.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/metrics-server/metrics-server/3.13.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=metrics-server/metrics-server", "version=3.13.1", "base=default", "valuesProfile=recipes/metrics-server/metrics-server/3.13.1/effective-values.yaml", "namespace=kube-system", "releaseName=metrics-server", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "metrics-server-metrics-server-3-13-1-external-tls-ca", "labels": { "sourceType": "helm", "component": "metrics-server/metrics-server", "sourceVersion": "3.13.1", "base": "external-tls-ca" } }, "spec": { "source": { "type": "helm", "name": "metrics-server/metrics-server", "version": "3.13.1", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/metrics-server-metrics-server:3.13.1@sha256:ae2c7fad50add92edd4864cfe08ec92c46eb041d9e8f7014a4504a77297b409f", "selection": { "name": "external-tls-ca", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" } }, "baseVariant": { "name": "external-tls-ca", "revision": "r001", "digest": "cc3f8af059e9dc6738892daabfd1520260bba0188b2b726994a77b32146345a9", "digestRole": "helm-variant-revision", "digestRecord": "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/rendered/release-objects.yaml", "inventory": "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/rendered/object-inventory.yaml", "objectCount": 9, "digest": "212865947af7715d777769dc65712ce8713c725c8ab9e805f8db55d2e345f537", "digestRole": "canonical-object-set", "digestRecord": "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "212865947af7715d777769dc65712ce8713c725c8ab9e805f8db55d2e345f537", "record": "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "metrics-server/metrics-server@3.13.1/external-tls-ca; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/metrics-server/metrics-server/3.13.1/publication/flattening-safety-verdict-external-tls-ca.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/rendered/release-objects.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml", "recipes/metrics-server/metrics-server/3.13.1/revisions/external-tls-ca/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=metrics-server/metrics-server", "version=3.13.1", "base=external-tls-ca", "valuesProfile=recipes/metrics-server/metrics-server/3.13.1/effective-values-external-tls-ca.yaml", "namespace=kube-system", "releaseName=metrics-server", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "metrics-server-tls", "type": "requiredSecrets", "required": true, "details": { "keys": [ "tls.crt", "tls.key" ], "name": "metrics-server-tls", "namespace": "kube-system", "purpose": "metrics-server serving certificate" } }, { "name": "requiredValues-1", "type": "requiredValues", "required": true, "details": { "installerInput": "apiServiceCaBundle", "installerInputFormat": "base64-pem", "path": "apiService.caBundle", "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls", "regularHelmFormat": "pem", "source": "metrics-server-tls-ca", "stage": "pre-render" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "kube-system/metrics-server-tls", "origin": "base", "type": "target-fact", "detail": "metrics-server serving certificate" }, { "id": "apiService.caBundle", "origin": "base", "type": "target-fact", "detail": "APIService CA bundle that validates kube-system/metrics-server-tls" } ], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredSecrets": [ { "keys": [ "tls.crt", "tls.key" ], "name": "metrics-server-tls", "namespace": "kube-system", "purpose": "metrics-server serving certificate" } ], "requiredValues": [ { "installerInput": "apiServiceCaBundle", "installerInputFormat": "base64-pem", "path": "apiService.caBundle", "purpose": "APIService CA bundle that validates kube-system/metrics-server-tls", "regularHelmFormat": "pem", "source": "metrics-server-tls-ca", "stage": "pre-render" } ] }, "requirementRefs": [ "kube-system/metrics-server-tls", "apiService.caBundle" ], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "kube-system/metrics-server-tls", "apiService.caBundle" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/metrics-server-metrics-server-3-13-1-external-tls-ca.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "minio-operator-operator-7-1-1-default", "labels": { "sourceType": "helm", "component": "minio-operator/operator", "sourceVersion": "7.1.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "minio-operator/operator", "version": "7.1.1", "record": "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/minio-operator-operator:7.1.1@sha256:0847bb9ea8043ac6ba896416514decef6a007d9f5fbd7ecbe99bc1594377823a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "b61c977706c6a57288817bf5f0349d29df500fa8777ef645a4160e53274ceb68", "digestRole": "helm-variant-revision", "digestRecord": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "3ac734cc8872f78365a7649830f706dc43341bba596b7ff266be2862f0f28b0a", "digestRole": "canonical-object-set", "digestRecord": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3ac734cc8872f78365a7649830f706dc43341bba596b7ff266be2862f0f28b0a", "record": "recipes/minio-operator/operator/7.1.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "minio-operator/operator@7.1.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/minio-operator/operator/7.1.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml", "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/minio-operator/operator/7.1.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml", "recipes/minio-operator/operator/7.1.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=minio-operator/operator", "version=7.1.1", "base=default", "valuesProfile=recipes/minio-operator/operator/7.1.1/effective-values.yaml", "namespace=default", "releaseName=operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/minio-operator-operator-7-1-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "minio-operator-tenant-7-1-1-default", "labels": { "sourceType": "helm", "component": "minio-operator/tenant", "sourceVersion": "7.1.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "minio-operator/tenant", "version": "7.1.1", "record": "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/minio-operator-tenant:7.1.1@sha256:361029cb96cff90bd11dbda2f31e357a3df9287f2f7eb6f461322b36e8e7da7a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9357bee0a8525bd7869a7027d5fb94d37af03d0d3fdeb1996af9a92b5715fcca", "digestRole": "helm-variant-revision", "digestRecord": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 2, "digest": "4577edd3c6c83479b029c32a8e41e966b19ef3810e062c156c5c54850c4ab32a", "digestRole": "canonical-object-set", "digestRecord": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "4577edd3c6c83479b029c32a8e41e966b19ef3810e062c156c5c54850c4ab32a", "record": "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "minio-operator/tenant@7.1.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/minio-operator/tenant/7.1.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml", "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml", "recipes/minio-operator/tenant/7.1.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=minio-operator/tenant", "version=7.1.1", "base=default", "valuesProfile=recipes/minio-operator/tenant/7.1.1/effective-values.yaml", "namespace=default", "releaseName=tenant", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "tenants.minio.min.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "tenants.minio.min.io", "purpose": "MinIO Tenant CRD required before tenant custom resources can be applied", "sourcePath": "../../operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "minio-operator/operator@7.1.1/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "tenants.minio.min.io", "origin": "base", "type": "target-fact", "detail": "MinIO Tenant CRD required before tenant custom resources can be applied" } ], "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "tenants.minio.min.io", "purpose": "MinIO Tenant CRD required before tenant custom resources can be applied", "sourcePath": "../../operator/7.1.1/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "minio-operator/operator@7.1.1/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/minio-operator/tenant/7.1.1/prerequisites/target-facts/default-crds.yaml" } ] }, "requirementRefs": [ "tenants.minio.min.io" ], "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "tenants.minio.min.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/minio-operator-tenant-7-1-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "mysql-mysql-operator-2-3-0-default", "labels": { "sourceType": "helm", "component": "mysql/mysql-operator", "sourceVersion": "2.3.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "mysql/mysql-operator", "version": "2.3.0", "record": "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/mysql-mysql-operator:2.3.0@sha256:59116d8ebabcf485c7d0f38b659c3ec93e8aacb0a35db02a4f2e3226c7c8a6c5", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9472d80d65dc46be63d2829af13e3a4a724dacc01211f7cd20efb1fa418f535f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 13, "digest": "d9ed07b28ae9b972c1b7f8c47e00e7dd79b1af2445596f5d6e994eb05a983957", "digestRole": "canonical-object-set", "digestRecord": "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d9ed07b28ae9b972c1b7f8c47e00e7dd79b1af2445596f5d6e994eb05a983957", "record": "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "mysql/mysql-operator@2.3.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml", "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml", "recipes/mysql/mysql-operator/2.3.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=mysql/mysql-operator", "version=2.3.0", "base=default", "valuesProfile=recipes/mysql/mysql-operator/2.3.0/effective-values.yaml", "namespace=mysql-operator", "releaseName=mysql-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/mysql-mysql-operator-2-3-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-nack-0-34-0-default", "labels": { "sourceType": "helm", "component": "nats/nack", "sourceVersion": "0.34.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "nats/nack", "version": "0.34.0", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nack:0.34.0@sha256:0deaa253cfd253e37f1611bceb58425c20ec02f374ea285736b3d31be394028a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "1d1fd00a7f6111d03babd0a988a718e1acc1842684313b79f4ac87e1e9cf3bcc", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/nack/0.34.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "3578a1e913da259083e95b1bca9492a5e1aac8ae270e2871eb05c5f0c5f6c3c9", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/nack/0.34.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3578a1e913da259083e95b1bca9492a5e1aac8ae270e2871eb05c5f0c5f6c3c9", "record": "recipes/nats/nack/0.34.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "nats/nack@0.34.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/nack/0.34.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml", "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/nats/nack/0.34.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml", "recipes/nats/nack/0.34.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/nack", "version=0.34.0", "base=default", "valuesProfile=recipes/nats/nack/0.34.0/effective-values.yaml", "namespace=default", "releaseName=nack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-nack-0-34-0-no-crds", "labels": { "sourceType": "helm", "component": "nats/nack", "sourceVersion": "0.34.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "nats/nack", "version": "0.34.0", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nack:0.34.0@sha256:0deaa253cfd253e37f1611bceb58425c20ec02f374ea285736b3d31be394028a", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "2a0e96ea4834808a0b66545eb50b94c4dc773572f699c3acad3ef2d6649a152d", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2a0e96ea4834808a0b66545eb50b94c4dc773572f699c3acad3ef2d6649a152d", "record": "recipes/nats/nack/0.34.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nats/nack@0.34.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/nack/0.34.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml", "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/nats/nack/0.34.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml", "recipes/nats/nack/0.34.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/nack", "version=0.34.0", "base=no-crds", "valuesProfile=recipes/nats/nack/0.34.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=nack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-nack-0-34-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-nats-2-14-0-default", "labels": { "sourceType": "helm", "component": "nats/nats", "sourceVersion": "2.14.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "nats/nats", "version": "2.14.0", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nats:2.14.0@sha256:bf8546bb6289a3c325e6396b2da6c03f6cac3961652aefbed116063d588e745b", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "84db89cdb408a46e259210c6a98fd4a8c32df4f1c3874030e089e4f2b676ee0f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/nats/2.14.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "395344e7541927ec138080eda2a92f6ce69532966040ce5d689f9852a4cee8da", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/nats/2.14.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "395344e7541927ec138080eda2a92f6ce69532966040ce5d689f9852a4cee8da", "record": "recipes/nats/nats/2.14.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nats/nats@2.14.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/nats/2.14.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml", "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/nats/nats/2.14.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml", "recipes/nats/nats/2.14.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/nats", "version=2.14.0", "base=default", "valuesProfile=recipes/nats/nats/2.14.0/effective-values.yaml", "namespace=default", "releaseName=nats", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-nats-2-14-0-ha", "labels": { "sourceType": "helm", "component": "nats/nats", "sourceVersion": "2.14.0", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "nats/nats", "version": "2.14.0", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-nats:2.14.0@sha256:bf8546bb6289a3c325e6396b2da6c03f6cac3961652aefbed116063d588e745b", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/nats/2.14.0/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "2d8fcfe5bea7f482e322fdba1cf800faedf835a13eef32d042e43ae6254d0a96", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/nats/2.14.0/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2d8fcfe5bea7f482e322fdba1cf800faedf835a13eef32d042e43ae6254d0a96", "record": "recipes/nats/nats/2.14.0/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "nats/nats@2.14.0/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/nats/2.14.0/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml", "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/release-objects.yaml", "recipes/nats/nats/2.14.0/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml", "recipes/nats/nats/2.14.0/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/nats", "version=2.14.0", "base=ha", "valuesProfile=recipes/nats/nats/2.14.0/effective-values-ha.yaml", "namespace=default", "releaseName=nats", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-nats-2-14-0-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-surveyor-0-20-9-default", "labels": { "sourceType": "helm", "component": "nats/surveyor", "sourceVersion": "0.20.9", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "nats/surveyor", "version": "0.20.9", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-surveyor:0.20.9@sha256:7d989d267c54979f5cfdc133ac9f83ea6fd520a649aa584651c60c46bc29ca4d", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "a97870c81f4fd0c14a158763365ddb131f848c1324fd70e3da181a5faadbb598", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/surveyor/0.20.9/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "c39b6dd56b5c2dfaedd3860e71d1eaaed9083354b35e4cef70eae6f9b982a7b1", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/surveyor/0.20.9/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c39b6dd56b5c2dfaedd3860e71d1eaaed9083354b35e4cef70eae6f9b982a7b1", "record": "recipes/nats/surveyor/0.20.9/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nats/surveyor@0.20.9/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/surveyor/0.20.9/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml", "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/release-objects.yaml", "recipes/nats/surveyor/0.20.9/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml", "recipes/nats/surveyor/0.20.9/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/surveyor", "version=0.20.9", "base=default", "valuesProfile=recipes/nats/surveyor/0.20.9/effective-values.yaml", "namespace=default", "releaseName=surveyor", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nats-surveyor-0-20-9-default-reviewed", "labels": { "sourceType": "helm", "component": "nats/surveyor", "sourceVersion": "0.20.9", "base": "default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "nats/surveyor", "version": "0.20.9", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nats-surveyor:0.20.9@sha256:7d989d267c54979f5cfdc133ac9f83ea6fd520a649aa584651c60c46bc29ca4d", "selection": { "name": "default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" } }, "baseVariant": { "name": "default-reviewed", "revision": "r001", "digest": "c6bacf768440e4207e99fa4f30c12fb48e1ecbcb265cac9d4577290f991852dd", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "c39b6dd56b5c2dfaedd3860e71d1eaaed9083354b35e4cef70eae6f9b982a7b1", "digestRole": "canonical-object-set", "digestRecord": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c39b6dd56b5c2dfaedd3860e71d1eaaed9083354b35e4cef70eae6f9b982a7b1", "record": "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nats/surveyor@0.20.9/default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nats/surveyor/0.20.9/publication/flattening-safety-verdict-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml", "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/release-objects.yaml", "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml", "recipes/nats/surveyor/0.20.9/revisions/default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nats/surveyor", "version=0.20.9", "base=default-reviewed", "valuesProfile=recipes/nats/surveyor/0.20.9/effective-values.yaml", "namespace=default", "releaseName=surveyor", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nats-surveyor-0-20-9-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default", "labels": { "sourceType": "helm", "component": "nfs-subdir-external-provisioner/nfs-subdir-external-provisioner", "sourceVersion": "4.0.18", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "nfs-subdir-external-provisioner/nfs-subdir-external-provisioner", "version": "4.0.18", "record": "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner:4.0.18@sha256:83561964324fb9e4bc9befa65c3d130df1cd17fd8211390203e461ee3852aa9a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e518dc96bc16b557b6786b5a2d5b453d2f8fd1c39f24993274518eb4651b9c9c", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "448129b8cf526e0fb240e23fc1cbddd1b6cd994158faa60904f7db5b1c10eb28", "digestRole": "canonical-object-set", "digestRecord": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "448129b8cf526e0fb240e23fc1cbddd1b6cd994158faa60904f7db5b1c10eb28", "record": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml", "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/release-objects.yaml", "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml", "recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nfs-subdir-external-provisioner/nfs-subdir-external-provisioner", "version=4.0.18", "base=default", "valuesProfile=recipes/nfs-subdir-external-provisioner/nfs-subdir-external-provisioner/4.0.18/effective-values.yaml", "namespace=default", "releaseName=nfs-subdir-external-provisioner", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nfs-subdir-external-provisioner-nfs-subdir-external-provisioner-4-0-18-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nvidia-nvidia-device-plugin-0-19-3-default", "labels": { "sourceType": "helm", "component": "nvidia/nvidia-device-plugin", "sourceVersion": "0.19.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "nvidia/nvidia-device-plugin", "version": "0.19.3", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nvidia-nvidia-device-plugin:0.19.3@sha256:9a4be497da7d3a34faff8bded3a878fb09528138fd3ee94539c97222b7610e07", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "0ed1369a1c97e24a24bfb72c7b6f98aadf5dfcc61ba6801b60f6e6463b0f2ed2", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "53d8261ca2426081f87f6f340e3f29897b7be85107b3ab99d6323d1042e29f52", "digestRole": "canonical-object-set", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "53d8261ca2426081f87f6f340e3f29897b7be85107b3ab99d6323d1042e29f52", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nvidia/nvidia-device-plugin@0.19.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/publication/flattening-safety-verdict-default.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nvidia/nvidia-device-plugin", "version=0.19.3", "base=default", "valuesProfile=recipes/nvidia/nvidia-device-plugin/0.19.3/effective-values.yaml", "namespace=gpu-operator", "releaseName=nvidia-device-plugin", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nvidia-nvidia-device-plugin-0-19-3-eks-inference", "labels": { "sourceType": "helm", "component": "nvidia/nvidia-device-plugin", "sourceVersion": "0.19.3", "base": "eks-inference" } }, "spec": { "source": { "type": "helm", "name": "nvidia/nvidia-device-plugin", "version": "0.19.3", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nvidia-nvidia-device-plugin:0.19.3@sha256:9a4be497da7d3a34faff8bded3a878fb09528138fd3ee94539c97222b7610e07", "selection": { "name": "eks-inference", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" } }, "baseVariant": { "name": "eks-inference", "revision": "r001", "digest": "99ccb716b96b430ddccd3829d9dbd9b78028fca4fac0958951517f74d6710c70", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "inventory": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "d5400ed7c047b23b6d5783ceb33f90346750a979ecd97d715faa4b0348ec3f1f", "digestRole": "canonical-object-set", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d5400ed7c047b23b6d5783ceb33f90346750a979ecd97d715faa4b0348ec3f1f", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "nvidia/nvidia-device-plugin@0.19.3/eks-inference; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/rendered/release-objects.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/eks-inference/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nvidia/nvidia-device-plugin", "version=0.19.3", "base=eks-inference", "valuesProfile=recipes/nvidia/nvidia-device-plugin/0.19.3/effective-values-eks-inference.yaml", "namespace=gpu-operator", "releaseName=nvidia-device-plugin", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-eks-inference.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "nvidia-nvidia-device-plugin-0-19-3-nfd-enabled", "labels": { "sourceType": "helm", "component": "nvidia/nvidia-device-plugin", "sourceVersion": "0.19.3", "base": "nfd-enabled" } }, "spec": { "source": { "type": "helm", "name": "nvidia/nvidia-device-plugin", "version": "0.19.3", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/nvidia-nvidia-device-plugin:0.19.3@sha256:9a4be497da7d3a34faff8bded3a878fb09528138fd3ee94539c97222b7610e07", "selection": { "name": "nfd-enabled", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" } }, "baseVariant": { "name": "nfd-enabled", "revision": "r001", "digest": "c20ca54b5d86089e41ff8cec4cd8d246ae937c7b3c8fe06ba5ae7c22d78998c3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/rendered/release-objects.yaml", "inventory": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/rendered/object-inventory.yaml", "objectCount": 26, "digest": "ea128b8bb7bdea3f841d2bf5fe74d8d8926401882dc2348e567fe9678d74a119", "digestRole": "canonical-object-set", "digestRecord": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ea128b8bb7bdea3f841d2bf5fe74d8d8926401882dc2348e567fe9678d74a119", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "nvidia/nvidia-device-plugin@0.19.3/nfd-enabled; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/nvidia/nvidia-device-plugin/0.19.3/publication/flattening-safety-verdict-nfd-enabled.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/rendered/release-objects.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml", "recipes/nvidia/nvidia-device-plugin/0.19.3/revisions/nfd-enabled/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=nvidia/nvidia-device-plugin", "version=0.19.3", "base=nfd-enabled", "valuesProfile=recipes/nvidia/nvidia-device-plugin/0.19.3/effective-values-nfd-enabled.yaml", "namespace=gpu-operator", "releaseName=nvidia-device-plugin", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.31.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/nvidia-nvidia-device-plugin-0-19-3-nfd-enabled.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "oauth2-proxy-oauth2-proxy-10-7-0-default", "labels": { "sourceType": "helm", "component": "oauth2-proxy/oauth2-proxy", "sourceVersion": "10.7.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "oauth2-proxy/oauth2-proxy", "version": "10.7.0", "record": "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/oauth2-proxy-oauth2-proxy:10.7.0@sha256:92ea38dd0996d278b9d403259d5690c567c3fd9c374214544ad6b6159b2b9384", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9f421aa97b519f127480f100aeeadd30936a37d9780618ea541d4b3ec41588ff", "digestRole": "helm-variant-revision", "digestRecord": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "1e6b5312d0e3ec8d8c0e306fb995604d377c89207409e35f2934f3526ac54abc", "digestRole": "canonical-object-set", "digestRecord": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "1e6b5312d0e3ec8d8c0e306fb995604d377c89207409e35f2934f3526ac54abc", "record": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "oauth2-proxy/oauth2-proxy@10.7.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/oauth2-proxy/oauth2-proxy/10.7.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml", "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml", "recipes/oauth2-proxy/oauth2-proxy/10.7.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=oauth2-proxy/oauth2-proxy", "version=10.7.0", "base=default", "valuesProfile=recipes/oauth2-proxy/oauth2-proxy/10.7.0/effective-values.yaml", "namespace=oauth2-proxy", "releaseName=oauth2-proxy", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/oauth2-proxy-oauth2-proxy-10-7-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "open-telemetry-opentelemetry-operator-0-114-0-default", "labels": { "sourceType": "helm", "component": "open-telemetry/opentelemetry-operator", "sourceVersion": "0.114.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "open-telemetry/opentelemetry-operator", "version": "0.114.0", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/open-telemetry-opentelemetry-operator:0.114.0@sha256:b6e1298c04526648e5e182fffb70d7fefe40d7809dc400699acb3e3f73abaa24", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "797b4cd079028aee9f5f62340506590fe0c656f24188170da684b5b1d936baca", "digestRole": "helm-variant-revision", "digestRecord": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 17, "digest": "68dd01565796d137e5dea26e1db02ef3e0d99bbbafd000ec3663680b5bbda873", "digestRole": "canonical-object-set", "digestRecord": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "68dd01565796d137e5dea26e1db02ef3e0d99bbbafd000ec3663680b5bbda873", "record": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "open-telemetry/opentelemetry-operator@0.114.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/open-telemetry/opentelemetry-operator/0.114.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=open-telemetry/opentelemetry-operator", "version=0.114.0", "base=default", "valuesProfile=recipes/open-telemetry/opentelemetry-operator/0.114.0/effective-values.yaml", "namespace=default", "releaseName=opentelemetry-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml" } }, { "name": "opentelemetry-operator-controller-manager-service-cert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "opentelemetry-operator-controller-manager-service-cert", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the operator Deployment", "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Certificate CRD required by the chart-rendered serving certificate object" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object" }, { "id": "default/opentelemetry-operator-controller-manager-service-cert", "origin": "base", "type": "target-fact", "detail": "Webhook serving certificate Secret mounted by the operator Deployment" } ], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "opentelemetry-operator-controller-manager-service-cert", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the operator Deployment", "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator" } ] }, "requirementRefs": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "default/opentelemetry-operator-controller-manager-service-cert" ], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "default/opentelemetry-operator-controller-manager-service-cert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "open-telemetry-opentelemetry-operator-0-114-0-no-crds", "labels": { "sourceType": "helm", "component": "open-telemetry/opentelemetry-operator", "sourceVersion": "0.114.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "open-telemetry/opentelemetry-operator", "version": "0.114.0", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/open-telemetry-opentelemetry-operator:0.114.0@sha256:b6e1298c04526648e5e182fffb70d7fefe40d7809dc400699acb3e3f73abaa24", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "6ca1e737e9540f4b6a2d6e19fa83fa580cb407942b78ed53f9604aa46b662ea1", "digestRole": "canonical-object-set", "digestRecord": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "6ca1e737e9540f4b6a2d6e19fa83fa580cb407942b78ed53f9604aa46b662ea1", "record": "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "open-telemetry/opentelemetry-operator@0.114.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/open-telemetry/opentelemetry-operator/0.114.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml", "recipes/open-telemetry/opentelemetry-operator/0.114.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=open-telemetry/opentelemetry-operator", "version=0.114.0", "base=no-crds", "valuesProfile=recipes/open-telemetry/opentelemetry-operator/0.114.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=opentelemetry-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "certificates.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "issuers.cert-manager.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "instrumentations.opentelemetry.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "instrumentations.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "opampbridges.opentelemetry.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "opampbridges.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "opentelemetrycollectors.opentelemetry.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "opentelemetrycollectors.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "targetallocators.opentelemetry.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "targetallocators.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "opentelemetry-operator-controller-manager-service-cert", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "opentelemetry-operator-controller-manager-service-cert", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the operator Deployment", "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "certificates.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Certificate CRD required by the chart-rendered serving certificate object" }, { "id": "issuers.cert-manager.io", "origin": "base", "type": "target-fact", "detail": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object" }, { "id": "instrumentations.opentelemetry.io", "origin": "base", "type": "target-fact", "detail": "OpenTelemetry Operator CRD managed outside this no-crds base" }, { "id": "opampbridges.opentelemetry.io", "origin": "base", "type": "target-fact", "detail": "OpenTelemetry Operator CRD managed outside this no-crds base" }, { "id": "opentelemetrycollectors.opentelemetry.io", "origin": "base", "type": "target-fact", "detail": "OpenTelemetry Operator CRD managed outside this no-crds base" }, { "id": "targetallocators.opentelemetry.io", "origin": "base", "type": "target-fact", "detail": "OpenTelemetry Operator CRD managed outside this no-crds base" }, { "id": "default/opentelemetry-operator-controller-manager-service-cert", "origin": "base", "type": "target-fact", "detail": "Webhook serving certificate Secret mounted by the operator Deployment" } ], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "certificates.cert-manager.io", "purpose": "cert-manager Certificate CRD required by the chart-rendered serving certificate object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Certificate CRD before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "issuers.cert-manager.io", "purpose": "cert-manager Issuer CRD required by the chart-rendered self-signed issuer object", "sourcePath": "../../../jetstack/cert-manager/v1.20.2/revisions/crds-enabled/r001/rendered/release-objects.yaml", "sourceVariant": "jetstack/cert-manager@v1.20.2/crds-enabled", "suggestedSource": "Install cert-manager or apply the cert-manager Issuer CRD before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "instrumentations.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "opampbridges.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "opentelemetrycollectors.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "targetallocators.opentelemetry.io", "purpose": "OpenTelemetry Operator CRD managed outside this no-crds base", "sourcePath": "revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "default", "suggestedSource": "Apply the default base CRDs or install the OpenTelemetry Operator CRDs before applying this base", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/open-telemetry/opentelemetry-operator/0.114.0/prerequisites/target-facts/no-crds-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "tls.crt", "tls.key" ], "name": "opentelemetry-operator-controller-manager-service-cert", "namespace": "default", "purpose": "Webhook serving certificate Secret mounted by the operator Deployment", "suggestedSource": "Run cert-manager controller to satisfy the chart-rendered Certificate, or stage a valid TLS Secret before waiting for the operator" } ] }, "requirementRefs": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "instrumentations.opentelemetry.io", "opampbridges.opentelemetry.io", "opentelemetrycollectors.opentelemetry.io", "targetallocators.opentelemetry.io", "default/opentelemetry-operator-controller-manager-service-cert" ], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "certificates.cert-manager.io", "issuers.cert-manager.io", "instrumentations.opentelemetry.io", "opampbridges.opentelemetry.io", "opentelemetrycollectors.opentelemetry.io", "targetallocators.opentelemetry.io", "default/opentelemetry-operator-controller-manager-service-cert" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/open-telemetry-opentelemetry-operator-0-114-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "opencost-opencost-2-5-21-default", "labels": { "sourceType": "helm", "component": "opencost/opencost", "sourceVersion": "2.5.21", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "opencost/opencost", "version": "2.5.21", "record": "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/opencost-opencost:2.5.21@sha256:fe20f3373efbf0a04f374fa580de65ffb9401b0f471c41391c887edfb3859b75", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "97573d32f4ca5bdd024f31bdf651f35ab1e39e6580b2428f1f172c19a8fed036", "digestRole": "helm-variant-revision", "digestRecord": "recipes/opencost/opencost/2.5.21/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "3cf0267ce7b5173e0c514fad903e559129d63d2f9a6bb83da681dcff1f7977dc", "digestRole": "canonical-object-set", "digestRecord": "recipes/opencost/opencost/2.5.21/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3cf0267ce7b5173e0c514fad903e559129d63d2f9a6bb83da681dcff1f7977dc", "record": "recipes/opencost/opencost/2.5.21/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "opencost/opencost@2.5.21/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/opencost/opencost/2.5.21/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml", "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/release-objects.yaml", "recipes/opencost/opencost/2.5.21/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml", "recipes/opencost/opencost/2.5.21/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=opencost/opencost", "version=2.5.21", "base=default", "valuesProfile=recipes/opencost/opencost/2.5.21/effective-values.yaml", "namespace=default", "releaseName=opencost", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/opencost-opencost-2-5-21-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-pg-operator-3-0-0-default", "labels": { "sourceType": "helm", "component": "percona/pg-operator", "sourceVersion": "3.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "percona/pg-operator", "version": "3.0.0", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pg-operator:3.0.0@sha256:c3afc463cdf2fe0d978fd0f2513dab3e03279dafbd1827bcb8013cd692173db1", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "f2a192ad34eefd277962ba266d3a14d55551cab1041158e0379b7b71a9897f74", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 12, "digest": "bf309d7e26c9351501282530b3707719d97e87593333150163c468461725a8ff", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "bf309d7e26c9351501282530b3707719d97e87593333150163c468461725a8ff", "record": "recipes/percona/pg-operator/3.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/pg-operator@3.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/pg-operator/3.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml", "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/percona/pg-operator/3.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml", "recipes/percona/pg-operator/3.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/pg-operator", "version=3.0.0", "base=default", "valuesProfile=recipes/percona/pg-operator/3.0.0/effective-values.yaml", "namespace=default", "releaseName=pg-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-pg-operator-3-0-0-no-crds", "labels": { "sourceType": "helm", "component": "percona/pg-operator", "sourceVersion": "3.0.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "percona/pg-operator", "version": "3.0.0", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pg-operator:3.0.0@sha256:c3afc463cdf2fe0d978fd0f2513dab3e03279dafbd1827bcb8013cd692173db1", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "b74ec3d7caff70a013e25ff922dc6ead03c37f01193f603f63a1f6686e59f8d2", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b74ec3d7caff70a013e25ff922dc6ead03c37f01193f603f63a1f6686e59f8d2", "record": "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/pg-operator@3.0.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/pg-operator/3.0.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml", "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml", "recipes/percona/pg-operator/3.0.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/pg-operator", "version=3.0.0", "base=no-crds", "valuesProfile=recipes/percona/pg-operator/3.0.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=pg-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "crunchybridgeclusters.upstream.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "crunchybridgeclusters.upstream.pgv2.percona.com", "purpose": "CrunchyBridgeCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconapgbackups.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgbackups.pgv2.percona.com", "purpose": "PerconaPGBackup CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconapgclusters.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgclusters.pgv2.percona.com", "purpose": "PerconaPGCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconapgrestores.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgrestores.pgv2.percona.com", "purpose": "PerconaPGRestore CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconapgupgrades.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgupgrades.pgv2.percona.com", "purpose": "PerconaPGUpgrade CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "pgadmins.upstream.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pgadmins.upstream.pgv2.percona.com", "purpose": "PGAdmin CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "pgupgrades.upstream.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pgupgrades.upstream.pgv2.percona.com", "purpose": "PGUpgrade CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "postgresclusters.upstream.pgv2.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "postgresclusters.upstream.pgv2.percona.com", "purpose": "PostgresCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "crunchybridgeclusters.upstream.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "CrunchyBridgeCluster CRD managed outside this no-crds preset" }, { "id": "perconapgbackups.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaPGBackup CRD managed outside this no-crds preset" }, { "id": "perconapgclusters.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaPGCluster CRD managed outside this no-crds preset" }, { "id": "perconapgrestores.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaPGRestore CRD managed outside this no-crds preset" }, { "id": "perconapgupgrades.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaPGUpgrade CRD managed outside this no-crds preset" }, { "id": "pgadmins.upstream.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PGAdmin CRD managed outside this no-crds preset" }, { "id": "pgupgrades.upstream.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PGUpgrade CRD managed outside this no-crds preset" }, { "id": "postgresclusters.upstream.pgv2.percona.com", "origin": "base", "type": "target-fact", "detail": "PostgresCluster CRD managed outside this no-crds preset" } ], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "crunchybridgeclusters.upstream.pgv2.percona.com", "purpose": "CrunchyBridgeCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgbackups.pgv2.percona.com", "purpose": "PerconaPGBackup CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgclusters.pgv2.percona.com", "purpose": "PerconaPGCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgrestores.pgv2.percona.com", "purpose": "PerconaPGRestore CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconapgupgrades.pgv2.percona.com", "purpose": "PerconaPGUpgrade CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pgadmins.upstream.pgv2.percona.com", "purpose": "PGAdmin CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "pgupgrades.upstream.pgv2.percona.com", "purpose": "PGUpgrade CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "postgresclusters.upstream.pgv2.percona.com", "purpose": "PostgresCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pg-operator/3.0.0/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "crunchybridgeclusters.upstream.pgv2.percona.com", "perconapgbackups.pgv2.percona.com", "perconapgclusters.pgv2.percona.com", "perconapgrestores.pgv2.percona.com", "perconapgupgrades.pgv2.percona.com", "pgadmins.upstream.pgv2.percona.com", "pgupgrades.upstream.pgv2.percona.com", "postgresclusters.upstream.pgv2.percona.com" ], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "crunchybridgeclusters.upstream.pgv2.percona.com", "perconapgbackups.pgv2.percona.com", "perconapgclusters.pgv2.percona.com", "perconapgrestores.pgv2.percona.com", "perconapgupgrades.pgv2.percona.com", "pgadmins.upstream.pgv2.percona.com", "pgupgrades.upstream.pgv2.percona.com", "postgresclusters.upstream.pgv2.percona.com" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-pg-operator-3-0-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-psmdb-operator-1-22-0-default", "labels": { "sourceType": "helm", "component": "percona/psmdb-operator", "sourceVersion": "1.22.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "percona/psmdb-operator", "version": "1.22.0", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-psmdb-operator:1.22.0@sha256:9a90a52074a6eef6c5a25f4bfc52b25a56441d73f5d980482a34709194f7cb30", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "68c3a3db7bda2e1fd691bddd1e4b9d1337c512a3dbad37eb3cd6356bfc471a30", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "a9ae26e197ef3e108ecab8c30f630ce24004a29b670916169ae6634198b96936", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a9ae26e197ef3e108ecab8c30f630ce24004a29b670916169ae6634198b96936", "record": "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/psmdb-operator@1.22.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/psmdb-operator/1.22.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/psmdb-operator", "version=1.22.0", "base=default", "valuesProfile=recipes/percona/psmdb-operator/1.22.0/effective-values.yaml", "namespace=default", "releaseName=psmdb-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-psmdb-operator-1-22-0-no-crds", "labels": { "sourceType": "helm", "component": "percona/psmdb-operator", "sourceVersion": "1.22.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "percona/psmdb-operator", "version": "1.22.0", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-psmdb-operator:1.22.0@sha256:9a90a52074a6eef6c5a25f4bfc52b25a56441d73f5d980482a34709194f7cb30", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "583396c1666b921931627a8a24a0dcb5a6d4859dd5fbd1ee350a1dfec44daffb", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "583396c1666b921931627a8a24a0dcb5a6d4859dd5fbd1ee350a1dfec44daffb", "record": "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/psmdb-operator@1.22.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/psmdb-operator/1.22.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml", "recipes/percona/psmdb-operator/1.22.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/psmdb-operator", "version=1.22.0", "base=no-crds", "valuesProfile=recipes/percona/psmdb-operator/1.22.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=psmdb-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-psmdb-operator-1-22-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-pxc-operator-1-19-1-default", "labels": { "sourceType": "helm", "component": "percona/pxc-operator", "sourceVersion": "1.19.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "percona/pxc-operator", "version": "1.19.1", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pxc-operator:1.19.1@sha256:bb1357840683c3f15451aa40c5af978395ed31cf45aa18ac71c1f44c3e4a7597", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "198ea46bf181803a130b8face0c72f08cf2faaf29d92fea31232ff028f0148e0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 7, "digest": "769b3b65e8543cd4ae04c498b6793f5f9e84b611bff8ec07b7fbaa5efaac8dc6", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "769b3b65e8543cd4ae04c498b6793f5f9e84b611bff8ec07b7fbaa5efaac8dc6", "record": "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/pxc-operator@1.19.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/pxc-operator/1.19.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/pxc-operator", "version=1.19.1", "base=default", "valuesProfile=recipes/percona/pxc-operator/1.19.1/effective-values.yaml", "namespace=default", "releaseName=pxc-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "percona-pxc-operator-1-19-1-no-crds", "labels": { "sourceType": "helm", "component": "percona/pxc-operator", "sourceVersion": "1.19.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "percona/pxc-operator", "version": "1.19.1", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/percona-pxc-operator:1.19.1@sha256:bb1357840683c3f15451aa40c5af978395ed31cf45aa18ac71c1f44c3e4a7597", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "ee1aa1c285ef83592cb2488116b126c13c4b3311f0e8a153b9bd6699ae566488", "digestRole": "canonical-object-set", "digestRecord": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "ee1aa1c285ef83592cb2488116b126c13c4b3311f0e8a153b9bd6699ae566488", "record": "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "percona/pxc-operator@1.19.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/percona/pxc-operator/1.19.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml", "recipes/percona/pxc-operator/1.19.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=percona/pxc-operator", "version=1.19.1", "base=no-crds", "valuesProfile=recipes/percona/pxc-operator/1.19.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=pxc-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "perconaxtradbclusterbackups.pxc.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusterbackups.pxc.percona.com", "purpose": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconaxtradbclusterrestores.pxc.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusterrestores.pxc.percona.com", "purpose": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "perconaxtradbclusters.pxc.percona.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusters.pxc.percona.com", "purpose": "PerconaXtraDBCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "perconaxtradbclusterbackups.pxc.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset" }, { "id": "perconaxtradbclusterrestores.pxc.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset" }, { "id": "perconaxtradbclusters.pxc.percona.com", "origin": "base", "type": "target-fact", "detail": "PerconaXtraDBCluster CRD managed outside this no-crds preset" } ], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusterbackups.pxc.percona.com", "purpose": "PerconaXtraDBClusterBackup CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusterrestores.pxc.percona.com", "purpose": "PerconaXtraDBClusterRestore CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "perconaxtradbclusters.pxc.percona.com", "purpose": "PerconaXtraDBCluster CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/percona/pxc-operator/1.19.1/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "perconaxtradbclusterbackups.pxc.percona.com", "perconaxtradbclusterrestores.pxc.percona.com", "perconaxtradbclusters.pxc.percona.com" ], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "perconaxtradbclusterbackups.pxc.percona.com", "perconaxtradbclusterrestores.pxc.percona.com", "perconaxtradbclusters.pxc.percona.com" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/percona-pxc-operator-1-19-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "policy-reporter-policy-reporter-3-9-1-default", "labels": { "sourceType": "helm", "component": "policy-reporter/policy-reporter", "sourceVersion": "3.9.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "policy-reporter/policy-reporter", "version": "3.9.1", "record": "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/policy-reporter-policy-reporter:3.9.1@sha256:b23e9c4e3b73724a1f08b413937e1596aac5d21b23ccf3ddce5a67f7774e0fef", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "651cc21f4b18c6dccabe3ae9512929cb9d11bfb90121fe10db2e2935920e9f54", "digestRole": "helm-variant-revision", "digestRecord": "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 8, "digest": "95d0f5f27c2ca4df172b45db2a8f60d2c86c43801984c62ee032fca725bf1abf", "digestRole": "canonical-object-set", "digestRecord": "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "95d0f5f27c2ca4df172b45db2a8f60d2c86c43801984c62ee032fca725bf1abf", "record": "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "policy-reporter/policy-reporter@3.9.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/policy-reporter/policy-reporter/3.9.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml", "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml", "recipes/policy-reporter/policy-reporter/3.9.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=policy-reporter/policy-reporter", "version=3.9.1", "base=default", "valuesProfile=recipes/policy-reporter/policy-reporter/3.9.1/effective-values.yaml", "namespace=policy-reporter", "releaseName=policy-reporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/policy-reporter-policy-reporter-3-9-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "projectcalico-tigera-operator-v3-32-0-default", "labels": { "sourceType": "helm", "component": "projectcalico/tigera-operator", "sourceVersion": "v3.32.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "projectcalico/tigera-operator", "version": "v3.32.0", "record": "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/projectcalico-tigera-operator:v3.32.0@sha256:c349b9f235ee64ae4743b81d2cb2d01eb5a36e765d3c634b912323ce6c7a135a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "8abc7074cbf61a78fbd594cfc8386e8dd43f4825ac9617e2ee087433f33d3ab3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "9ce56a65a1b0ca63aec202cb662a5389fe6a6a55e6d4b9db9920febcc5b2b350", "digestRole": "canonical-object-set", "digestRecord": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9ce56a65a1b0ca63aec202cb662a5389fe6a6a55e6d4b9db9920febcc5b2b350", "record": "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "projectcalico/tigera-operator@v3.32.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/projectcalico/tigera-operator/v3.32.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "recipes/projectcalico/tigera-operator/v3.32.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=projectcalico/tigera-operator", "version=v3.32.0", "base=default", "valuesProfile=recipes/projectcalico/tigera-operator/v3.32.0/effective-values.yaml", "namespace=default", "releaseName=tigera-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "apiservers.operator.tigera.io", "type": "requiredCRDs", "required": true, "details": { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "apiservers.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered APIServer object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" } }, { "name": "goldmanes.operator.tigera.io", "type": "requiredCRDs", "required": true, "details": { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "goldmanes.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Goldmane object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" } }, { "name": "installations.operator.tigera.io", "type": "requiredCRDs", "required": true, "details": { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "installations.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Installation object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" } }, { "name": "whiskers.operator.tigera.io", "type": "requiredCRDs", "required": true, "details": { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "whiskers.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Whisker object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "explicit-delete-cleanup-action", "origin": "base", "type": "lifecycle-action", "detail": "Deleting this chart may require cleanup that depends on the cluster's current state. Run that cleanup as a separate, recorded step instead of assuming that deleting the rendered files is enough." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "Before installing the rendered resources, the Tigera operator must create four operator.tigera.io CRDs so Kubernetes can accept the APIServer, Goldmane, Installation, and Whisker objects." }, { "id": "apiservers.operator.tigera.io", "origin": "base", "type": "target-fact", "detail": "Required before Kubernetes can accept the rendered APIServer object." }, { "id": "goldmanes.operator.tigera.io", "origin": "base", "type": "target-fact", "detail": "Required before Kubernetes can accept the rendered Goldmane object." }, { "id": "installations.operator.tigera.io", "origin": "base", "type": "target-fact", "detail": "Required before Kubernetes can accept the rendered Installation object." }, { "id": "whiskers.operator.tigera.io", "origin": "base", "type": "target-fact", "detail": "Required before Kubernetes can accept the rendered Whisker object." } ], "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "explicit-delete-cleanup-action", "requirementRefs": [ "explicit-delete-cleanup-action" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "Deleting this chart may require cleanup that depends on the cluster's current state. Run that cleanup as a separate, recorded step instead of assuming that deleting the rendered files is enough.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/projectcalico-tigera-operator/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/projectcalico/tigera-operator/v3.32.0/helm-pain-report.yaml", "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml", "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml", "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "Before installing the rendered resources, the Tigera operator must create four operator.tigera.io CRDs so Kubernetes can accept the APIServer, Goldmane, Installation, and Whisker objects.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/projectcalico-tigera-operator/default/latest.yaml", "data/hook-lifecycle/top100-hooks.csv", "recipes/projectcalico/tigera-operator/v3.32.0/helm-pain-report.yaml", "runs/hook-lifecycle/projectcalico-tigera-operator/default/latest/receipt.yaml", "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml", "runs/public-preset-script/projectcalico-tigera-operator-default/latest/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "apiservers.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered APIServer object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" }, { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "goldmanes.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Goldmane object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" }, { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "installations.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Installation object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" }, { "evidence": [ "runs/live-helm-confighub-compare/projectcalico-tigera-operator-default/receipt.yaml" ], "name": "whiskers.operator.tigera.io", "provisioningMode": "operator-bootstrap", "purpose": "Required before Kubernetes can accept the rendered Whisker object.", "sourcePath": "../../../../packages/projectcalico/tigera-operator/v3.32.0/prerequisites/tigera-operator-bootstrap/kustomization.yaml", "suggestedSource": "package://prerequisites/tigera-operator-bootstrap/kustomization.yaml" } ] }, "requirementRefs": [ "apiservers.operator.tigera.io", "goldmanes.operator.tigera.io", "installations.operator.tigera.io", "whiskers.operator.tigera.io" ], "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "apiservers.operator.tigera.io", "goldmanes.operator.tigera.io", "installations.operator.tigera.io", "whiskers.operator.tigera.io" ], "deliveryProtected": [ "explicit-delete-cleanup-action" ], "records": [ "data/helm-render-intents/intents/projectcalico-tigera-operator-v3-32-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-alertmanager-1-37-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/alertmanager", "sourceVersion": "1.37.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/alertmanager", "version": "1.37.0", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-alertmanager:1.37.0@sha256:f499807405ceea0ca49d34c4978dd905cfb5fcce36b53fbcb0f521260e78f04e", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "a863cfd5eaeab88508e3c96efd79e0eeb53e52a03e7f956ecd54d10b6bdaa787", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "fc6c693435a12f92b94f3f59435e1e23af1cf4b87fc4564cda64ea502e7e1dc6", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "fc6c693435a12f92b94f3f59435e1e23af1cf4b87fc4564cda64ea502e7e1dc6", "record": "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/alertmanager@1.37.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/alertmanager/1.37.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/alertmanager", "version=1.37.0", "base=default", "valuesProfile=recipes/prometheus-community/alertmanager/1.37.0/effective-values.yaml", "namespace=default", "releaseName=alertmanager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-alertmanager-1-37-0-ha", "labels": { "sourceType": "helm", "component": "prometheus-community/alertmanager", "sourceVersion": "1.37.0", "base": "ha" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/alertmanager", "version": "1.37.0", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-alertmanager:1.37.0@sha256:f499807405ceea0ca49d34c4978dd905cfb5fcce36b53fbcb0f521260e78f04e", "selection": { "name": "ha", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" } }, "baseVariant": { "name": "ha", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "a016dbf7647ff32935788288023d6dbd78b924f6cca645ef2081fe1d8856f8b4", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a016dbf7647ff32935788288023d6dbd78b924f6cca645ef2081fe1d8856f8b4", "record": "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/alertmanager@1.37.0/ha; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/alertmanager/1.37.0/publication/flattening-safety-verdict-ha.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/release-objects.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml", "recipes/prometheus-community/alertmanager/1.37.0/revisions/ha/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/alertmanager", "version=1.37.0", "base=ha", "valuesProfile=recipes/prometheus-community/alertmanager/1.37.0/effective-values-ha.yaml", "namespace=default", "releaseName=alertmanager", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-alertmanager-1-37-0-ha.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-85-3-3-default", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "85.3.3", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "85.3.3", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3@sha256:d2da5e6ee7bb7cebe256d494b67a05911b940d1a1c69793886a9e99e60112b85", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ecd433cd701d7b9138f9d90e56124b6945685e0abc801348d63ce82efa79eee4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 124, "digest": "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9fac2a0e4140eee298c84ce61f13dd8ca392bb92e2037d0ef0aaa4d8015ee491", "record": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@85.3.3/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "A destination-specific lifecycle plan is recorded for the named target and delivery runtime.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ], "nextAction": "Recheck the plan if the variant, destination, or delivery runtime changes." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=85.3.3", "base=default", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The package applies the locked CRDs before the chart objects that use them." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The package applies the locked CRDs before the chart objects that use them.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "resolved-for-recorded-targets", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven", "lifecycleDirectFreshInstall": "yes", "lifecycleDirectFreshInstallReceipt": "runs/kps-lifecycle-route-proof/receipt.yaml", "lifecycleArgoCd": "not-run", "lifecycleFlux": "not-run", "lifecycleDirectUpgrade": "85.3.3-to-86.1.0-pass", "lifecycleDirectUpgradeReceipt": "runs/kps-default-package-upgrade-proof/receipt.yaml", "lifecycleUpgrade": "85.3.3-to-86.1.0-pass", "lifecycleUpgradeFromVersion": "85.3.3", "lifecycleUpgradeToVersion": "86.1.0" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-85-3-3-no-crds", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "85.3.3", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "85.3.3", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3@sha256:d2da5e6ee7bb7cebe256d494b67a05911b940d1a1c69793886a9e99e60112b85", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "6566541a9f0bf6dfee41fafac9aef3099a6d6cfe2a2fe4e218ef08d2d754bec0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 114, "digest": "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3f6049fc2b7a40bbfb009b347880e3f319a87c9b60a6fd274220287a10167fc2", "record": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@85.3.3/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/85.3.3/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "A destination-specific lifecycle plan is recorded for the named target and delivery runtime.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-argo-cd.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-direct.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-flux.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ], "nextAction": "Recheck the plan if the variant, destination, or delivery runtime changes." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [ "runs/kps-gitops-lifecycle-proof/receipt.yaml" ], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=85.3.3", "base=no-crds", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/85.3.3/effective-values-no-crds.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "already has a live receipt; keep it fresh when chart, base, or cluster version changes" ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "resolved-for-recorded-targets", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-argo-cd.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-direct.yaml", "data/lifecycle-route-resolutions/kube-prometheus-stack-85-3-3-no-crds-flux.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-85-3-3-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven", "lifecycleDirectFreshInstall": "yes", "lifecycleDirectFreshInstallReceipt": "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml", "lifecycleArgoCd": "fresh-install-and-upgrade-pass", "lifecycleFlux": "fresh-install-and-upgrade-pass", "lifecycleGitOpsReceipt": "runs/kps-gitops-lifecycle-proof/receipt.yaml", "lifecycleGitOpsInstallArtifactDigest": "sha256:0e37d8b94457ff9f13b77fd5898a18981cfbc4c8f879fc45e07bf2e306ad9e59", "lifecycleGitOpsUpgradeArtifactDigest": "sha256:f1213d6e8ce657b672bd341eb266d89ac95908d674df1375f9e0eef4dd787513", "lifecycleUpgrade": "85.3.3-to-86.1.0-pass", "lifecycleUpgradeFromVersion": "85.3.3", "lifecycleUpgradeToVersion": "86.1.0" }, "operations": { "changeCadence": "planned-service-release", "ownerClass": "platform-service-team", "resourceClass": "system-service", "classificationSource": "config-catalog/operational-class-examples.yaml", "classificationReason": "Monitoring is shared by many workloads, so a platform service team owns it and introduces changes more deliberately.", "liveSpace": "prometheus-community-kube-prometheus-stack-85-3-3-no-crds", "target": { "ownerClass": "platform-service-team", "scope": "shared-service-namespace", "selection": "Install on one non-production cluster first, then move the reviewed service release to the remaining clusters." }, "gates": { "normalSet": "baseline", "productionSet": "approvalRequired" }, "rollout": { "limit": "Fresh install passed on one kind cluster; the chart upgrade and multi-cluster wave have not run.", "method": "pilot-cluster-then-service-wave", "sequence": [ "non-production pilot", "production service wave" ], "status": "fresh-install-observed" } } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-86-1-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "86.1.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "86.1.0", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:86.1.0@sha256:8ed23f666f651c0acaddb55713c582dbc154730470b23c107a01ce86250d9e56", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "e7acdd59cbd99e9c8d02b9e96a74550b5ce0adc292de1d0c079f4c83c9f3b2c3", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 124, "digest": "58c19d82e70831986861de45eba5697418105140625afa840f5e329f1c21d1dd", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "58c19d82e70831986861de45eba5697418105140625afa840f5e329f1c21d1dd", "record": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@86.1.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=86.1.0", "base=default", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/86.1.0/effective-values.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The package applies the locked CRDs before the chart objects that use them." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The package applies the locked CRDs before the chart objects that use them.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven", "lifecycleUpgradeTarget": "pass-from-85.3.3", "lifecycleUpgradeReceipt": "runs/kps-default-package-upgrade-proof/receipt.yaml", "lifecycleUpgradeRunner": "direct-package-route" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-86-1-0-no-crds", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "86.1.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "86.1.0", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:86.1.0@sha256:8ed23f666f651c0acaddb55713c582dbc154730470b23c107a01ce86250d9e56", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "f2b1270f1f1841b72f8f905cb9e986e5af44c31f0ec7e05e74424c464873f026", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 114, "digest": "671c6f820a2cc2b381d056f112ad1750b36d08b01e9e1ff5bc503cfa81a56e87", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "671c6f820a2cc2b381d056f112ad1750b36d08b01e9e1ff5bc503cfa81a56e87", "record": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@86.1.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/86.1.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/86.1.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=86.1.0", "base=no-crds", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/86.1.0/effective-values-no-crds.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 86.1.0 and this base", "Run this route for 86.1.0 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/86.1.0/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-86-1-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "yes", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven", "lifecycleUpgradeTarget": "pass-from-85.3.3", "lifecycleUpgradeReceipt": "runs/kps-gitops-lifecycle-proof/receipt.yaml", "lifecycleGitOpsUpgradeArtifactDigest": "sha256:f1213d6e8ce657b672bd341eb266d89ac95908d674df1375f9e0eef4dd787513" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-15-1-default", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.15.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.15.1", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.15.1@sha256:94a97814a7b82f12ab6294b51d8d70d9fbb176ee8cbd951be2e275dd63cd9858", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4f3257e9a3809147fe342173392d9d07b1ca3621d0468afd367155a28514c649", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 125, "digest": "97b4a93ca243b74fc8f39ac939701c5247eb24cd01d5eb5bfe86b81972759c09", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "97b4a93ca243b74fc8f39ac939701c5247eb24cd01d5eb5bfe86b81972759c09", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.15.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.15.1", "base=default", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.15.1/effective-values.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The package applies the locked CRDs before the chart objects that use them." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The package applies the locked CRDs before the chart objects that use them.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-15-1-existing-secret", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.15.1", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.15.1", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.15.1@sha256:94a97814a7b82f12ab6294b51d8d70d9fbb176ee8cbd951be2e275dd63cd9858", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "7a4655a48c4debecba9f725e00183a0a08da41316619c3e85529a13d5b5a3755", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 124, "digest": "7297b2aaced5ed2e6e6bd040af1114b0f4360fa4fdebbb1d63a1ce65d89edfcc", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "7297b2aaced5ed2e6e6bd040af1114b0f4360fa4fdebbb1d63a1ce65d89edfcc", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.15.1/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/publication/flattening-safety-verdict-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.15.1", "base=existing-secret", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.15.1/effective-values-existing-secret.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "grafana-admin-credentials", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin-credentials", "namespace": "monitoring", "purpose": "Grafana admin credentials managed by the target secret backend", "suggestedSource": "ExternalSecret monitoring/grafana-admin-credentials or an equivalent target-owned Secret" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "hook-delete-policy" }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "hook-weight-ordering" }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "target-facts" }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "webhook-readiness" }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/grafana-admin-credentials", "origin": "base", "type": "target-fact", "detail": "Grafana admin credentials managed by the target secret backend" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Your cluster — at uninstall, automatically", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Your delivery — a post-apply check (receipted)", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl apply -f ; kubectl wait --for=condition=complete job/", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl apply -f ; kubectl wait --for=condition=complete job/", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "Your applier — must apply CRDs before dependent objects", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "# create the required target facts (Secret/StorageClass/etc.) before apply", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin-credentials", "namespace": "monitoring", "purpose": "Grafana admin credentials managed by the target secret backend", "suggestedSource": "ExternalSecret monitoring/grafana-admin-credentials or an equivalent target-owned Secret" }, { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/grafana-admin-credentials", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/grafana-admin-credentials", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-15-1-no-crds", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.15.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.15.1", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.15.1@sha256:94a97814a7b82f12ab6294b51d8d70d9fbb176ee8cbd951be2e275dd63cd9858", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "24c04bbaeda56322fa82a587ead938b64bc337c0c68ca4fbbcbddcc8decc8716", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 115, "digest": "2c8ba25e823226825ed50e190ae7a938d33531713ec63b8dcd9ebb851a8487f2", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2c8ba25e823226825ed50e190ae7a938d33531713ec63b8dcd9ebb851a8487f2", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.15.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.15.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.15.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.15.1", "base=no-crds", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.15.1/effective-values-no-crds.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.15.1 and this base", "Run this route for 87.15.1 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.15.1/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-15-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-19-2-default", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.19.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.19.2", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.19.2@sha256:df91aefaac87edd2bcd625ec9a87f7142d49fc2d7ffc70878dfb1d92bc885987", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "78a99b1324a7c8360c446e68dc07aaf31edd9bcbc84fc3bac0b8fd87ca15fcc0", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 125, "digest": "f93812ce23b92c73c0bcc223d5c4efd125e80430b846dc41aa874eee09f67d99", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f93812ce23b92c73c0bcc223d5c4efd125e80430b846dc41aa874eee09f67d99", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.19.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.19.2", "base=default", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.19.2/effective-values.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The package applies the locked CRDs before the chart objects that use them." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The package applies the locked CRDs before the chart objects that use them.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct package route upgraded the default preset from 85.3.3 to 86.1.0, established the updated CRDs, retained the admission Secret, reran the webhook step, checked six workloads, and removed the temporary Jobs.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/default/r001/rendered/release-objects.yaml", "runs/kps-default-package-upgrade-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-19-2-existing-secret", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.19.2", "base": "existing-secret" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.19.2", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.19.2@sha256:df91aefaac87edd2bcd625ec9a87f7142d49fc2d7ffc70878dfb1d92bc885987", "selection": { "name": "existing-secret", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml" } }, "baseVariant": { "name": "existing-secret", "revision": "r001", "digest": "f5b8a1c9fed02b0e922025f23c2f8eaceb1487e0780b83b52e08e5398f649a1e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/rendered/object-inventory.yaml", "objectCount": 124, "digest": "c0a62fce6407f18a6cbadb712a2b2570f51522f55bddc9ecaffcf30c5192ed2b", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c0a62fce6407f18a6cbadb712a2b2570f51522f55bddc9ecaffcf30c5192ed2b", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.19.2/existing-secret; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/publication/flattening-safety-verdict-existing-secret.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/existing-secret/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.19.2", "base=existing-secret", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.19.2/effective-values-existing-secret.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "grafana-admin-credentials", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin-credentials", "namespace": "monitoring", "purpose": "Grafana admin credentials managed by the target secret backend", "suggestedSource": "ExternalSecret monitoring/grafana-admin-credentials or an equivalent target-owned Secret" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "hook-delete-policy" }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "hook-phase" }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "hook-weight-ordering" }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "target-facts" }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "webhook-readiness" }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD included in this preset and applied before dependent objects" }, { "id": "monitoring/grafana-admin-credentials", "origin": "base", "type": "target-fact", "detail": "Grafana admin credentials managed by the target secret backend" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "Kubernetes", "proposedMechanism": "Your cluster — at uninstall, automatically", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Your delivery — a post-apply check (receipted)", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl apply -f ; kubectl wait --for=condition=complete job/", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl apply -f ; kubectl wait --for=condition=complete job/", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "selected applier", "proposedMechanism": "Your applier — must apply CRDs before dependent objects", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "# create the required target facts (Secret/StorageClass/etc.) before apply", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "kubectl get validatingwebhookconfigurations,mutatingwebhookconfigurations", "automatic": false, "status": "recorded", "sourceStatus": "observed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipt-index.csv", "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/default/latest.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "applyMode": "server-side-force-conflicts", "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD included in this preset and applied before dependent objects", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "admin-user", "admin-password" ], "name": "grafana-admin-credentials", "namespace": "monitoring", "purpose": "Grafana admin credentials managed by the target secret backend", "suggestedSource": "ExternalSecret monitoring/grafana-admin-credentials or an equivalent target-owned Secret" }, { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/grafana-admin-credentials", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/grafana-admin-credentials", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-existing-secret.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-prometheus-stack-87-19-2-no-crds", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-prometheus-stack", "sourceVersion": "87.19.2", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-prometheus-stack", "version": "87.19.2", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:87.19.2@sha256:df91aefaac87edd2bcd625ec9a87f7142d49fc2d7ffc70878dfb1d92bc885987", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "a3d22a92cbfb19d1849f6f248850f0a924392084a2ecbea42ef6b40d25507de4", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 115, "digest": "86d54113ec12fcea838d30e7e2ff6722de375bd0f6cc0e09ab8a14078c941446", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "86d54113ec12fcea838d30e7e2ff6722de375bd0f6cc0e09ab8a14078c941446", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "prometheus-community/kube-prometheus-stack@87.19.2/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-prometheus-stack/87.19.2/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "recipes/prometheus-community/kube-prometheus-stack/87.19.2/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-prometheus-stack", "version=87.19.2", "base=no-crds", "valuesProfile=recipes/prometheus-community/kube-prometheus-stack/87.19.2/effective-values-no-crds.yaml", "namespace=monitoring", "releaseName=kube-prometheus-stack", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "alertmanagerconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "alertmanagers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "podmonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "probes.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusagents.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheuses.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "prometheusrules.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "scrapeconfigs.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "thanosrulers.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } }, { "name": "kube-prometheus-stack-admission", "type": "requiredSecrets", "required": true, "details": { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [ { "id": "preflight-or-presync-crd-apply", "origin": "base", "type": "lifecycle-action", "detail": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload." }, { "id": "preserve-cleanup-policy", "origin": "base", "type": "lifecycle-action", "detail": "The run removes both completed Jobs and their temporary RBAC objects." }, { "id": "postsync-check-or-observation", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's webhook patch Job after the webhook objects exist." }, { "id": "preflight-or-presync", "origin": "base", "type": "lifecycle-action", "detail": "The package runs the chart's certificate creation Job before applying the admission webhooks." }, { "id": "upgrade-action-with-receipt", "origin": "base", "type": "lifecycle-action", "detail": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks." }, { "id": "preserve-ordering", "origin": "base", "type": "lifecycle-action", "detail": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order." }, { "id": "target-facts-or-preflight", "origin": "base", "type": "lifecycle-action", "detail": "The certificate Job creates the required admission Secret with ca, cert, and key." }, { "id": "webhook-readiness-observation", "origin": "base", "type": "lifecycle-action", "detail": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads." }, { "id": "alertmanagerconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "alertmanagers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "podmonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "probes.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusagents.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheuses.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "prometheusrules.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "scrapeconfigs.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "thanosrulers.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator CRD managed outside this no-crds preset" }, { "id": "monitoring/kube-prometheus-stack-admission", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "routeIntent": { "status": "gap", "routes": [ { "id": "preflight-or-presync-crd-apply", "requirementRefs": [ "preflight-or-presync-crd-apply" ], "phase": "pre-apply", "proposedActor": "cub installer package script", "proposedMechanism": "The no-crds render omits CRDs, so the package applies the locked CRDs before the workload.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-cleanup-policy", "requirementRefs": [ "preserve-cleanup-policy" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run removes both completed Jobs and their temporary RBAC objects.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "postsync-check-or-observation", "requirementRefs": [ "postsync-check-or-observation" ], "phase": "post-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's webhook patch Job after the webhook objects exist.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preflight-or-presync", "requirementRefs": [ "preflight-or-presync" ], "phase": "preflight", "proposedActor": "delivery workflow", "proposedMechanism": "The package runs the chart's certificate creation Job before applying the admission webhooks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "upgrade-action-with-receipt", "requirementRefs": [ "upgrade-action-with-receipt" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "Argo CD and Flux upgraded the no-crds preset from 85.3.3 to 86.1.0, reran the four ordered stages, replaced both hook Jobs, and passed the runtime checks.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "preserve-ordering", "requirementRefs": [ "preserve-ordering" ], "phase": "pre-apply", "proposedActor": "delivery workflow", "proposedMechanism": "The direct runner applies CRDs, creates the certificate, applies the workload, and patches the webhooks in that order.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "target-facts-or-preflight", "requirementRefs": [ "target-facts-or-preflight" ], "phase": "preflight", "proposedActor": "operator", "proposedMechanism": "The certificate Job creates the required admission Secret with ca, cert, and key.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] }, { "id": "webhook-readiness-observation", "requirementRefs": [ "webhook-readiness-observation" ], "phase": "observe", "proposedActor": "delivery workflow", "proposedMechanism": "The run checks three CA bundles, the operator endpoint, a server dry-run, and six workloads.", "automatic": false, "status": "recorded", "sourceStatus": "routed", "supportedRuntimes": [ "Argo CD", "Flux", "direct apply" ], "checks": [ "a live receipt for 87.19.2 and this base", "Run this route for 87.19.2 and record the result before treating it as observed for this version." ], "evidence": [ "data/hook-lifecycle/receipts/prometheus-community-kube-prometheus-stack/no-crds/latest.yaml", "packages/prometheus-community/kube-prometheus-stack/85.3.3/prerequisites/kube-prometheus-stack-lifecycle/generation-receipt.yaml", "recipes/prometheus-community/kube-prometheus-stack/85.3.3/revisions/no-crds/r001/rendered/release-objects.yaml", "runs/kps-gitops-lifecycle-proof/receipt.yaml", "runs/kps-lifecycle-route-proof/no-crds-receipt.yaml" ] } ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "targetFacts": { "status": "gap", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagerconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "alertmanagers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "podmonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "probes.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusagents.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheuses.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "prometheusrules.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "scrapeconfigs.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "thanosrulers.monitoring.coreos.com", "purpose": "Prometheus Operator CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packageSource": "package://prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml", "packagePath": "packages/prometheus-community/kube-prometheus-stack/87.19.2/prerequisites/kube-prometheus-stack-lifecycle/default-crds.yaml" } ], "requiredSecrets": [ { "deliveryLanes": [ "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "keys": [ "ca", "cert", "key" ], "name": "kube-prometheus-stack-admission", "namespace": "monitoring", "purpose": "Prometheus Operator admission webhook TLS material created by the packaged chart-specific setup Job", "suggestedSource": "package://prerequisites/kube-prometheus-stack-lifecycle/prepare.sh" } ] }, "requirementRefs": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml", "data/lifecycle-routes/routes.json", "data/lifecycle-routes/summary.md" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "alertmanagerconfigs.monitoring.coreos.com", "alertmanagers.monitoring.coreos.com", "podmonitors.monitoring.coreos.com", "probes.monitoring.coreos.com", "prometheusagents.monitoring.coreos.com", "prometheuses.monitoring.coreos.com", "prometheusrules.monitoring.coreos.com", "scrapeconfigs.monitoring.coreos.com", "servicemonitors.monitoring.coreos.com", "thanosrulers.monitoring.coreos.com", "monitoring/kube-prometheus-stack-admission" ], "deliveryProtected": [ "preserve-cleanup-policy" ], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-prometheus-stack-87-19-2-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-state-metrics", "sourceVersion": "7.4.0", "base": "cluster-metrics-readonly" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-state-metrics", "version": "7.4.0", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-state-metrics:7.4.0@sha256:85624ed1be4b2eab3e3316b1fe23242f4007a06abde190351f939c9ae915c251", "selection": { "name": "cluster-metrics-readonly", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" } }, "baseVariant": { "name": "cluster-metrics-readonly", "revision": "r001", "digest": "3538ece277c56fe569b451f8775169f194992d31722d3a6b68bf6d338a61702e", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "b892be5f9969f39e3a7a0fadacde77cf3b9a86ca16485d5712cc2a476bda14bc", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b892be5f9969f39e3a7a0fadacde77cf3b9a86ca16485d5712cc2a476bda14bc", "record": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/kube-state-metrics@7.4.0/cluster-metrics-readonly; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-state-metrics/7.4.0/publication/flattening-safety-verdict-cluster-metrics-readonly.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-state-metrics", "version=7.4.0", "base=cluster-metrics-readonly", "valuesProfile=recipes/prometheus-community/kube-state-metrics/7.4.0/effective-values.yaml", "namespace=default", "releaseName=kube-state-metrics", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-cluster-metrics-readonly.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-kube-state-metrics-7-4-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/kube-state-metrics", "sourceVersion": "7.4.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/kube-state-metrics", "version": "7.4.0", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-state-metrics:7.4.0@sha256:85624ed1be4b2eab3e3316b1fe23242f4007a06abde190351f939c9ae915c251", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "8ecc8dfe44642c564d3efb21806d47fb7362b583e4e13057eeafe8b75a433669", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "b892be5f9969f39e3a7a0fadacde77cf3b9a86ca16485d5712cc2a476bda14bc", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b892be5f9969f39e3a7a0fadacde77cf3b9a86ca16485d5712cc2a476bda14bc", "record": "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/kube-state-metrics@7.4.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/kube-state-metrics/7.4.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml", "recipes/prometheus-community/kube-state-metrics/7.4.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/kube-state-metrics", "version=7.4.0", "base=default", "valuesProfile=recipes/prometheus-community/kube-state-metrics/7.4.0/effective-values.yaml", "namespace=default", "releaseName=kube-state-metrics", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-kube-state-metrics-7-4-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-29-8-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus", "sourceVersion": "29.8.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus", "version": "29.8.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.8.0@sha256:2e329a09d75c78f2b078df4314a18a7ef1259082bc7f0cca9a62642e62113af3", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "6e2bda6fa0ba0314da74cfe139630ec34f2a95da1c10a57c45a48a47615d54fb", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 23, "digest": "c11349803ddbb44562066474dd04d47d7c5c75d083dbc96162224573f949c11b", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c11349803ddbb44562066474dd04d47d7c5c75d083dbc96162224573f949c11b", "record": "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus@29.8.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus/29.8.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus", "version=29.8.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus/29.8.0/effective-values.yaml", "namespace=monitoring", "releaseName=prometheus", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-29-8-0-server-only-ephemeral", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus", "sourceVersion": "29.8.0", "base": "server-only-ephemeral" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus", "version": "29.8.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.8.0@sha256:2e329a09d75c78f2b078df4314a18a7ef1259082bc7f0cca9a62642e62113af3", "selection": { "name": "server-only-ephemeral", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" } }, "baseVariant": { "name": "server-only-ephemeral", "revision": "r001", "digest": "5c943a249ba70681b117981dd109e59b8be537df7148c3e5d37b6e5c9711bddc", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "174e1729753ef551fa059f86111cfd87653ea2380dc879238cf5cc4987e78812", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "174e1729753ef551fa059f86111cfd87653ea2380dc879238cf5cc4987e78812", "record": "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus@29.8.0/server-only-ephemeral; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus/29.8.0/publication/flattening-safety-verdict-server-only-ephemeral.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml", "recipes/prometheus-community/prometheus/29.8.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus", "version=29.8.0", "base=server-only-ephemeral", "valuesProfile=recipes/prometheus-community/prometheus/29.8.0/effective-values-server-only-ephemeral.yaml", "namespace=monitoring", "releaseName=prometheus", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-8-0-server-only-ephemeral.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "todo", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-29-9-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus", "sourceVersion": "29.9.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus", "version": "29.9.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.9.0@sha256:0be296fd83670ed5469a2ef2abca19cb515546daf7bcb262f6d0142f9269310c", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "833b2a228103aa0f32d59192a120a95f9aa664233b399c85e0baf5edd9356f9a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 23, "digest": "08dacfbc1ecd3ef9956999398bbf30a7a8dd083dccde23c589853da525541d36", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "08dacfbc1ecd3ef9956999398bbf30a7a8dd083dccde23c589853da525541d36", "record": "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus@29.9.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus/29.9.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus", "version=29.9.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus/29.9.0/effective-values.yaml", "namespace=monitoring", "releaseName=prometheus", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-29-9-0-server-only-ephemeral", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus", "sourceVersion": "29.9.0", "base": "server-only-ephemeral" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus", "version": "29.9.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus:29.9.0@sha256:0be296fd83670ed5469a2ef2abca19cb515546daf7bcb262f6d0142f9269310c", "selection": { "name": "server-only-ephemeral", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" } }, "baseVariant": { "name": "server-only-ephemeral", "revision": "r001", "digest": "0644d6f162631146c2c76f639a02397046b73b7d5cde06be9f993186791126ff", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "a1ff9f44451cc28aaeed183a5d36fdf2551dbc4647714a2565c30d9512a4af8b", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "a1ff9f44451cc28aaeed183a5d36fdf2551dbc4647714a2565c30d9512a4af8b", "record": "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus@29.9.0/server-only-ephemeral; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus/29.9.0/publication/flattening-safety-verdict-server-only-ephemeral.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml", "recipes/prometheus-community/prometheus/29.9.0/revisions/server-only-ephemeral/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus", "version=29.9.0", "base=server-only-ephemeral", "valuesProfile=recipes/prometheus-community/prometheus/29.9.0/effective-values-server-only-ephemeral.yaml", "namespace=monitoring", "releaseName=prometheus", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-29-9-0-server-only-ephemeral.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-adapter", "sourceVersion": "5.3.0", "base": "apiservice-v1-capability" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-adapter", "version": "5.3.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0@sha256:75c59e28e1813899bb3be664effb72a52b7e61b066998854e9cce718e045020d", "selection": { "name": "apiservice-v1-capability", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" } }, "baseVariant": { "name": "apiservice-v1-capability", "revision": "r001", "digest": "7de173f4905c68aaa7d2ac5f87d6b8740223b5b510265589a389767d4607b9c5", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "b1cfc0aa1c663e05e1c184d9cbc6e806feffb9456755ff81233058f05a795c23", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "b1cfc0aa1c663e05e1c184d9cbc6e806feffb9456755ff81233058f05a795c23", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-adapter@5.3.0/apiservice-v1-capability; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/publication/flattening-safety-verdict-apiservice-v1-capability.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/apiservice-v1-capability/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-adapter", "version=5.3.0", "base=apiservice-v1-capability", "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-adapter", "capabilityProfile={\"apiVersions\":[\"apiregistration.k8s.io/v1\"],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-apiservice-v1-capability.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-adapter", "sourceVersion": "5.3.0", "base": "cluster-metrics-readonly" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-adapter", "version": "5.3.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0@sha256:75c59e28e1813899bb3be664effb72a52b7e61b066998854e9cce718e045020d", "selection": { "name": "cluster-metrics-readonly", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" } }, "baseVariant": { "name": "cluster-metrics-readonly", "revision": "r001", "digest": "407514c513a9e78bd51228d08b152e31f17afcc13ba05128197a0ec4cca21a9a", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "50e586691867cf7be3f14a7c3e71839f3f8b6cae32b64a10f01362d68add983a", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "50e586691867cf7be3f14a7c3e71839f3f8b6cae32b64a10f01362d68add983a", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-adapter@5.3.0/cluster-metrics-readonly; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/publication/flattening-safety-verdict-cluster-metrics-readonly.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-adapter", "version=5.3.0", "base=cluster-metrics-readonly", "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-adapter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-cluster-metrics-readonly.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-adapter-5-3-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-adapter", "sourceVersion": "5.3.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-adapter", "version": "5.3.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-adapter:5.3.0@sha256:75c59e28e1813899bb3be664effb72a52b7e61b066998854e9cce718e045020d", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "2e21719fdf3b6ea902bbe41c6800cf2d62bedcc4c1ff0e1f37fcb576c0512e85", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "50e586691867cf7be3f14a7c3e71839f3f8b6cae32b64a10f01362d68add983a", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "50e586691867cf7be3f14a7c3e71839f3f8b6cae32b64a10f01362d68add983a", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-adapter@5.3.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-adapter/5.3.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml", "recipes/prometheus-community/prometheus-adapter/5.3.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-adapter", "version=5.3.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-adapter/5.3.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-adapter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-adapter-5-3-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-blackbox-exporter", "sourceVersion": "11.10.0", "base": "cluster-metrics-readonly" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-blackbox-exporter", "version": "11.10.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-blackbox-exporter:11.10.0@sha256:7e8bd0d4ad90ebf5cea264686245c4e486f2721aa72fb172e28735f85fa35559", "selection": { "name": "cluster-metrics-readonly", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" } }, "baseVariant": { "name": "cluster-metrics-readonly", "revision": "r001", "digest": "c8012eaac44f39c58d78bebf8e2fad63bf4400e7180c61a3b2d0f35477b96133", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "43dbd48cda5a6f5aa85365fdba15a04cb328d513a0123983ec943c505a01730c", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "43dbd48cda5a6f5aa85365fdba15a04cb328d513a0123983ec943c505a01730c", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-blackbox-exporter@11.10.0/cluster-metrics-readonly; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/publication/flattening-safety-verdict-cluster-metrics-readonly.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-blackbox-exporter", "version=11.10.0", "base=cluster-metrics-readonly", "valuesProfile=recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-blackbox-exporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-cluster-metrics-readonly.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-blackbox-exporter-11-10-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-blackbox-exporter", "sourceVersion": "11.10.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-blackbox-exporter", "version": "11.10.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-blackbox-exporter:11.10.0@sha256:7e8bd0d4ad90ebf5cea264686245c4e486f2721aa72fb172e28735f85fa35559", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "571356bcb6fcd9b00cea2b9b9be7cfc2d4f5eb764fdb5b4e700c1d4d70430c79", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "43dbd48cda5a6f5aa85365fdba15a04cb328d513a0123983ec943c505a01730c", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "43dbd48cda5a6f5aa85365fdba15a04cb328d513a0123983ec943c505a01730c", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-blackbox-exporter@11.10.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-blackbox-exporter", "version=11.10.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-blackbox-exporter/11.10.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-blackbox-exporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-10-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-blackbox-exporter-11-15-1-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-blackbox-exporter", "sourceVersion": "11.15.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-blackbox-exporter", "version": "11.15.1", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-blackbox-exporter:11.15.1@sha256:d6f157912a513718a387c822a21ab9b9b7bd45b595fe35ee257586a2661c4189", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "4c9809e50d57de87095f2d5c2fa1bba8feb90e2b92d30bef484a736cf6f60367", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "988144ef5b62615e820a8ada37fe9c0f9ee80bb853d5ec65c55a928faeba0c70", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "988144ef5b62615e820a8ada37fe9c0f9ee80bb853d5ec65c55a928faeba0c70", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-blackbox-exporter@11.15.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml", "recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-blackbox-exporter", "version=11.15.1", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-blackbox-exporter/11.15.1/effective-values.yaml", "namespace=monitoring", "releaseName=prometheus-blackbox-exporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-blackbox-exporter-11-15-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-node-exporter", "sourceVersion": "4.55.0", "base": "cluster-metrics-readonly" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-node-exporter", "version": "4.55.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-node-exporter:4.55.0@sha256:b5365489a899714904a438a5a3ccb2f7a7814f1b41bc16cf8fa41638e4ffa9cd", "selection": { "name": "cluster-metrics-readonly", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" } }, "baseVariant": { "name": "cluster-metrics-readonly", "revision": "r001", "digest": "8d0a34ec191af63663ea2ff2609f86a917340b0fdf7d4a5640a9fab7a1f6809f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "76ee8c58c2b4022743468fcbc8ccd9414853d85b951edb720268e5466638ef0d", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "76ee8c58c2b4022743468fcbc8ccd9414853d85b951edb720268e5466638ef0d", "record": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-node-exporter@4.55.0/cluster-metrics-readonly; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/publication/flattening-safety-verdict-cluster-metrics-readonly.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/cluster-metrics-readonly/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-node-exporter", "version=4.55.0", "base=cluster-metrics-readonly", "valuesProfile=recipes/prometheus-community/prometheus-node-exporter/4.55.0/effective-values-cluster-metrics-readonly.yaml", "namespace=default", "releaseName=prometheus-node-exporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "servicemonitors.monitoring.coreos.com", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object", "sourcePath": "../../../prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "prometheus-community/prometheus-operator-crds@29.0.0/default", "packageSource": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml", "packagePath": "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "servicemonitors.monitoring.coreos.com", "origin": "base", "type": "target-fact", "detail": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object" } ], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "servicemonitors.monitoring.coreos.com", "purpose": "Prometheus Operator ServiceMonitor CRD required by the cluster-metrics-readonly ServiceMonitor object", "sourcePath": "../../../prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "prometheus-community/prometheus-operator-crds@29.0.0/default", "packageSource": "package://prerequisites/target-facts/cluster-metrics-readonly-crds.yaml", "packagePath": "packages/prometheus-community/prometheus-node-exporter/4.55.0/prerequisites/target-facts/cluster-metrics-readonly-crds.yaml" } ] }, "requirementRefs": [ "servicemonitors.monitoring.coreos.com" ], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "servicemonitors.monitoring.coreos.com" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-cluster-metrics-readonly.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-node-exporter-4-55-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-node-exporter", "sourceVersion": "4.55.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-node-exporter", "version": "4.55.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-node-exporter:4.55.0@sha256:b5365489a899714904a438a5a3ccb2f7a7814f1b41bc16cf8fa41638e4ffa9cd", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "fdad73078ab47c93c3964f9f070e34f85a3e4b315a1ee26ebbea3ddfc45476aa", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "37862948d7c5d39d7be726864e9c71e6fb9e9fcc1ac40140e97153152aa6ffbc", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "37862948d7c5d39d7be726864e9c71e6fb9e9fcc1ac40140e97153152aa6ffbc", "record": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-node-exporter@4.55.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-node-exporter/4.55.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml", "recipes/prometheus-community/prometheus-node-exporter/4.55.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-node-exporter", "version=4.55.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-node-exporter/4.55.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-node-exporter", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-node-exporter-4-55-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-operator-crds-29-0-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-operator-crds", "sourceVersion": "29.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-operator-crds", "version": "29.0.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-operator-crds:29.0.0@sha256:923b79c94ab4d966ae66cc7b6e2ddc199d042ebe5ea16942d197dc2a12fdec42", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "f779402363cf1dc32f6050c24fc0a5663759463b873e46758e365e25448cad71", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "32cfda19c8684a1ad319476b44d9056af7824df3c06622b04a7e28d6bdfd5ab4", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "32cfda19c8684a1ad319476b44d9056af7824df3c06622b04a7e28d6bdfd5ab4", "record": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "prometheus-community/prometheus-operator-crds@29.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-operator-crds/29.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml", "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml", "recipes/prometheus-community/prometheus-operator-crds/29.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-operator-crds", "version=29.0.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-operator-crds/29.0.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-operator-crds", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-operator-crds-29-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "prometheus-community-prometheus-pushgateway-3-6-0-default", "labels": { "sourceType": "helm", "component": "prometheus-community/prometheus-pushgateway", "sourceVersion": "3.6.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "prometheus-community/prometheus-pushgateway", "version": "3.6.0", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-prometheus-pushgateway:3.6.0@sha256:0018337ac8b9d81ccce8b98c7bbcf09fac81b9e5706b3c59113d8748492b719b", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "dc0bbdc714b1dced38f3eb5140fb163f082fcc459fe100a1b698f33c7e94ac34", "digestRole": "helm-variant-revision", "digestRecord": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "80cb018f0b277814e17ca7208be55ef10ed74288a258a6519e7bbcf088a9f450", "digestRole": "canonical-object-set", "digestRecord": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "80cb018f0b277814e17ca7208be55ef10ed74288a258a6519e7bbcf088a9f450", "record": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "prometheus-community/prometheus-pushgateway@3.6.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/prometheus-community/prometheus-pushgateway/3.6.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml", "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml", "recipes/prometheus-community/prometheus-pushgateway/3.6.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=prometheus-community/prometheus-pushgateway", "version=3.6.0", "base=default", "valuesProfile=recipes/prometheus-community/prometheus-pushgateway/3.6.0/effective-values.yaml", "namespace=default", "releaseName=prometheus-pushgateway", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/prometheus-community-prometheus-pushgateway-3-6-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "rook-release-rook-ceph-cluster-v1-19-5-default", "labels": { "sourceType": "helm", "component": "rook-release/rook-ceph-cluster", "sourceVersion": "v1.19.5", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "rook-release/rook-ceph-cluster", "version": "v1.19.5", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/rook-release-rook-ceph-cluster:v1.19.5@sha256:a85479c01667c8c575223e2f68de07b51cd8b84de24776b12553f2f23583728a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "1271579e77bf408c1e8dbdc549a04cb876c2dd6e4855640472f2a43ae6bf2d7f", "digestRole": "helm-variant-revision", "digestRecord": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 27, "digest": "5ac8f526459d6393552b66ab60f690c6c85a1e86bba45ea82d5bbf219694b010", "digestRole": "canonical-object-set", "digestRecord": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "5ac8f526459d6393552b66ab60f690c6c85a1e86bba45ea82d5bbf219694b010", "record": "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "rook-release/rook-ceph-cluster@v1.19.5/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/rook-release/rook-ceph-cluster/v1.19.5/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml", "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml", "recipes/rook-release/rook-ceph-cluster/v1.19.5/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=rook-release/rook-ceph-cluster", "version=v1.19.5", "base=default", "valuesProfile=recipes/rook-release/rook-ceph-cluster/v1.19.5/effective-values.yaml", "namespace=default", "releaseName=rook-ceph-cluster", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "cephblockpools.ceph.rook.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephblockpools.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephBlockPool resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cephclusters.ceph.rook.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephclusters.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephCluster resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cephfilesystems.ceph.rook.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephfilesystems.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephFilesystem resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cephfilesystemsubvolumegroups.ceph.rook.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephfilesystemsubvolumegroups.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } }, { "name": "cephobjectstores.ceph.rook.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephobjectstores.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephObjectStore resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } }, { "name": "rook-ceph", "type": "requiredNamespaces", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml", "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml" ], "name": "rook-ceph", "purpose": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent.", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl create namespace rook-ceph --dry-run=client -o yaml | kubectl apply -f -" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "cephblockpools.ceph.rook.io", "origin": "base", "type": "target-fact", "detail": "Rook Ceph cluster base creates CephBlockPool resources" }, { "id": "cephclusters.ceph.rook.io", "origin": "base", "type": "target-fact", "detail": "Rook Ceph cluster base creates CephCluster resources" }, { "id": "cephfilesystems.ceph.rook.io", "origin": "base", "type": "target-fact", "detail": "Rook Ceph cluster base creates CephFilesystem resources" }, { "id": "cephfilesystemsubvolumegroups.ceph.rook.io", "origin": "base", "type": "target-fact", "detail": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources" }, { "id": "cephobjectstores.ceph.rook.io", "origin": "base", "type": "target-fact", "detail": "Rook Ceph cluster base creates CephObjectStore resources" }, { "id": "rook-ceph", "origin": "base", "type": "target-fact", "detail": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent." } ], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephblockpools.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephBlockPool resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephclusters.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephCluster resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephfilesystems.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephFilesystem resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephfilesystemsubvolumegroups.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephFilesystemSubVolumeGroup resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "cephobjectstores.ceph.rook.io", "purpose": "Rook Ceph cluster base creates CephObjectStore resources", "sourcePath": "../../rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "sourceVariant": "rook-release/rook-ceph@v1.19.5/default", "packageSource": "package://prerequisites/target-facts/default-crds.yaml", "packagePath": "packages/rook-release/rook-ceph-cluster/v1.19.5/prerequisites/target-facts/default-crds.yaml" } ], "requiredNamespaces": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "evidence": [ "runs/live-helm-confighub-compare/rook-release-rook-ceph-cluster-default/receipt.yaml", "runs/live-kind-parity/rook-release-rook-ceph-cluster-default/receipt.yaml" ], "name": "rook-ceph", "purpose": "The chart renders a RoleBinding into rook-ceph, and Helm blocks when the namespace is absent.", "sourcePath": "../../target-prerequisite-plan.yaml", "suggestedSource": "kubectl create namespace rook-ceph --dry-run=client -o yaml | kubectl apply -f -" } ] }, "requirementRefs": [ "cephblockpools.ceph.rook.io", "cephclusters.ceph.rook.io", "cephfilesystems.ceph.rook.io", "cephfilesystemsubvolumegroups.ceph.rook.io", "cephobjectstores.ceph.rook.io", "rook-ceph" ], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "cephblockpools.ceph.rook.io", "cephclusters.ceph.rook.io", "cephfilesystems.ceph.rook.io", "cephfilesystemsubvolumegroups.ceph.rook.io", "cephobjectstores.ceph.rook.io", "rook-ceph" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-cluster-v1-19-5-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "rook-release-rook-ceph-v1-19-5-default", "labels": { "sourceType": "helm", "component": "rook-release/rook-ceph", "sourceVersion": "v1.19.5", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "rook-release/rook-ceph", "version": "v1.19.5", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/rook-release-rook-ceph:v1.19.5@sha256:b996f273c1777c2ac07fae823ad3932d8295072cd03e5384c0f1eb6afcaf32d7", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "293d95a7314b06e54f8242891b1fb33b707a74d878eda016d642f81ea87662a1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 133, "digest": "26789923789aab27d01638f52680ee6de6d982268eee3740cabc733142f67ba8", "digestRole": "canonical-object-set", "digestRecord": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "26789923789aab27d01638f52680ee6de6d982268eee3740cabc733142f67ba8", "record": "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "rook-release/rook-ceph@v1.19.5/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/rook-release/rook-ceph/v1.19.5/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml", "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/release-objects.yaml", "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml", "recipes/rook-release/rook-ceph/v1.19.5/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=rook-release/rook-ceph", "version=v1.19.5", "base=default", "valuesProfile=recipes/rook-release/rook-ceph/v1.19.5/effective-values.yaml", "namespace=default", "releaseName=rook-ceph", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/rook-release-rook-ceph-v1-19-5-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "runix-pgadmin4-1-62-0-default", "labels": { "sourceType": "helm", "component": "runix/pgadmin4", "sourceVersion": "1.62.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "runix/pgadmin4", "version": "1.62.0", "record": "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/runix-pgadmin4:1.62.0@sha256:1cd9dc2c01444724376921ec8f500ecd7791282ac0dfe50e51e041bf13c8c0fd", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "fa823b56740dd7c854c54d5f23a14c6d471fae708f132a6b32c420472f5349c8", "digestRole": "helm-variant-revision", "digestRecord": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 5, "digest": "78528d11d3b5ea8cf8c03e43834edbe87a944df1593c516867cc4e0389ba1565", "digestRole": "canonical-object-set", "digestRecord": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "78528d11d3b5ea8cf8c03e43834edbe87a944df1593c516867cc4e0389ba1565", "record": "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "runix/pgadmin4@1.62.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/runix/pgadmin4/1.62.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml", "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml", "recipes/runix/pgadmin4/1.62.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=runix/pgadmin4", "version=1.62.0", "base=default", "valuesProfile=recipes/runix/pgadmin4/1.62.0/effective-values.yaml", "namespace=default", "releaseName=pgadmin4", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/runix-pgadmin4-1-62-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "sealed-secrets-sealed-secrets-2-18-6-default", "labels": { "sourceType": "helm", "component": "sealed-secrets/sealed-secrets", "sourceVersion": "2.18.6", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "sealed-secrets/sealed-secrets", "version": "2.18.6", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/sealed-secrets-sealed-secrets:2.18.6@sha256:15945be88b50c3b451a86f077258621434e78768b7655be0f758504849af8aa6", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "830ce0d08a78cac87fd631790131d77ff469a2cb1070f35cbdbc41918155fc1d", "digestRole": "helm-variant-revision", "digestRecord": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 11, "digest": "096c66f4ea312aa7c3a4fc2be815b64271c3f1c829c8914b5c96c190aa22a83e", "digestRole": "canonical-object-set", "digestRecord": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "096c66f4ea312aa7c3a4fc2be815b64271c3f1c829c8914b5c96c190aa22a83e", "record": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "sealed-secrets/sealed-secrets@2.18.6/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/release-objects.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=sealed-secrets/sealed-secrets", "version=2.18.6", "base=default", "valuesProfile=recipes/sealed-secrets/sealed-secrets/2.18.6/effective-values.yaml", "namespace=default", "releaseName=sealed-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "sealed-secrets-sealed-secrets-2-18-6-no-crds", "labels": { "sourceType": "helm", "component": "sealed-secrets/sealed-secrets", "sourceVersion": "2.18.6", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "sealed-secrets/sealed-secrets", "version": "2.18.6", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/sealed-secrets-sealed-secrets:2.18.6@sha256:15945be88b50c3b451a86f077258621434e78768b7655be0f758504849af8aa6", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "8c271440bc9064522738add874400229e0dc0de35e39818aa29433f7d16c243c", "digestRole": "canonical-object-set", "digestRecord": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "8c271440bc9064522738add874400229e0dc0de35e39818aa29433f7d16c243c", "record": "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "not-assessed", "verdict": "not-assessed", "action": "assessment-required", "scope": "sealed-secrets/sealed-secrets@2.18.6/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml", "recipes/sealed-secrets/sealed-secrets/2.18.6/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=sealed-secrets/sealed-secrets", "version=2.18.6", "base=no-crds", "valuesProfile=recipes/sealed-secrets/sealed-secrets/2.18.6/effective-values-no-crds.yaml", "namespace=default", "releaseName=sealed-secrets", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/sealed-secrets-sealed-secrets-2-18-6-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default", "labels": { "sourceType": "helm", "component": "secrets-store-csi-driver/secrets-store-csi-driver", "sourceVersion": "1.6.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "secrets-store-csi-driver/secrets-store-csi-driver", "version": "1.6.0", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/secrets-store-csi-driver-secrets-store-csi-driver:1.6.0@sha256:82d30ba796f0dc7cee0fcc6e385fa42fb151d3de62604a1639160bbab4ee7791", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "56ee9b012674930637151b2f833c259a2686d61ef189053954c0f1c6b0813653", "digestRole": "helm-variant-revision", "digestRecord": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 10, "digest": "2490f14dd08f7e309f8f78cd1c2f1b05eb5b8995343b33ad6b3b243401a39ead", "digestRole": "canonical-object-set", "digestRecord": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "2490f14dd08f7e309f8f78cd1c2f1b05eb5b8995343b33ad6b3b243401a39ead", "record": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "secrets-store-csi-driver/secrets-store-csi-driver@1.6.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=secrets-store-csi-driver/secrets-store-csi-driver", "version=1.6.0", "base=default", "valuesProfile=recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/effective-values.yaml", "namespace=kube-system", "releaseName=secrets-store-csi-driver", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "not-required", "items": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" ] }, "routeIntent": { "status": "not-required", "routes": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" ] }, "targetFacts": { "status": "not-required", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" ] }, "resolution": { "status": "not-required", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation", "labels": { "sourceType": "helm", "component": "secrets-store-csi-driver/secrets-store-csi-driver", "sourceVersion": "1.6.0", "base": "sync-secret-rotation" } }, "spec": { "source": { "type": "helm", "name": "secrets-store-csi-driver/secrets-store-csi-driver", "version": "1.6.0", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/secrets-store-csi-driver-secrets-store-csi-driver:1.6.0@sha256:82d30ba796f0dc7cee0fcc6e385fa42fb151d3de62604a1639160bbab4ee7791", "selection": { "name": "sync-secret-rotation", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" } }, "baseVariant": { "name": "sync-secret-rotation", "revision": "r001", "digest": "d31b6c656165766ab0f538f2589836a8fe2c7d1c4b4b85f808bd4fa36e22bcf1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/release-objects.yaml", "inventory": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/object-inventory.yaml", "objectCount": 12, "digest": "3667c16d411f773ef20e51c9980d484eb770c1173092878f1b018f5b4377a182", "digestRole": "canonical-object-set", "digestRecord": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3667c16d411f773ef20e51c9980d484eb770c1173092878f1b018f5b4377a182", "record": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "secrets-store-csi-driver/secrets-store-csi-driver@1.6.0/sync-secret-rotation; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/publication/flattening-safety-verdict-sync-secret-rotation.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/release-objects.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml", "recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/revisions/sync-secret-rotation/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=secrets-store-csi-driver/secrets-store-csi-driver", "version=1.6.0", "base=sync-secret-rotation", "valuesProfile=recipes/secrets-store-csi-driver/secrets-store-csi-driver/1.6.0/effective-values-sync-secret-rotation.yaml", "namespace=kube-system", "releaseName=secrets-store-csi-driver", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/secrets-store-csi-driver-secrets-store-csi-driver-1-6-0-sync-secret-rotation.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "stakater-reloader-2-2-12-controller-default-reviewed", "labels": { "sourceType": "helm", "component": "stakater/reloader", "sourceVersion": "2.2.12", "base": "controller-default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "stakater/reloader", "version": "2.2.12", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/stakater-reloader:2.2.12@sha256:323738c02d856ca2fdcb958802e14af4b13ed2cfd3b5e863549d4ad1bf257ffb", "selection": { "name": "controller-default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" } }, "baseVariant": { "name": "controller-default-reviewed", "revision": "r001", "digest": "dd5515670b808b776594418e711ad3230bab02d2db853461dcc12fd3d8f11281", "digestRole": "helm-variant-revision", "digestRecord": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "d73021c041d681424e89af4e6dde4e99ac3791b1622576649778f7314f979d9e", "digestRole": "canonical-object-set", "digestRecord": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d73021c041d681424e89af4e6dde4e99ac3791b1622576649778f7314f979d9e", "record": "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "stakater/reloader@2.2.12/controller-default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/stakater/reloader/2.2.12/publication/flattening-safety-verdict-controller-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml", "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/release-objects.yaml", "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml", "recipes/stakater/reloader/2.2.12/revisions/controller-default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=stakater/reloader", "version=2.2.12", "base=controller-default-reviewed", "valuesProfile=recipes/stakater/reloader/2.2.12/effective-values.yaml", "namespace=default", "releaseName=reloader", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-controller-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "stakater-reloader-2-2-12-default", "labels": { "sourceType": "helm", "component": "stakater/reloader", "sourceVersion": "2.2.12", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "stakater/reloader", "version": "2.2.12", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/stakater-reloader:2.2.12@sha256:323738c02d856ca2fdcb958802e14af4b13ed2cfd3b5e863549d4ad1bf257ffb", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "72146487afac39062ec6bbd172803779ef9676f8f0d3933050709edfef483e04", "digestRole": "helm-variant-revision", "digestRecord": "recipes/stakater/reloader/2.2.12/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "d73021c041d681424e89af4e6dde4e99ac3791b1622576649778f7314f979d9e", "digestRole": "canonical-object-set", "digestRecord": "recipes/stakater/reloader/2.2.12/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "d73021c041d681424e89af4e6dde4e99ac3791b1622576649778f7314f979d9e", "record": "recipes/stakater/reloader/2.2.12/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "stakater/reloader@2.2.12/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/stakater/reloader/2.2.12/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml", "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/release-objects.yaml", "recipes/stakater/reloader/2.2.12/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml", "recipes/stakater/reloader/2.2.12/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=stakater/reloader", "version=2.2.12", "base=default", "valuesProfile=recipes/stakater/reloader/2.2.12/effective-values.yaml", "namespace=default", "releaseName=reloader", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-12-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "stakater-reloader-2-2-14-default", "labels": { "sourceType": "helm", "component": "stakater/reloader", "sourceVersion": "2.2.14", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "stakater/reloader", "version": "2.2.14", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/stakater-reloader:2.2.14@sha256:8be0cb9b152ba3e0e80b81c9e19b1f5d2e4d05091e8d0577356fc94a495e74d4", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "0981af727940c9961e0d28111413599f932fecc48d5564920edcbbae0b01d580", "digestRole": "helm-variant-revision", "digestRecord": "recipes/stakater/reloader/2.2.14/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/stakater/reloader/2.2.14/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/stakater/reloader/2.2.14/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 6, "digest": "206dcaad71b6f825e834c5b1c0a3dc6799927de8344f4f5d58ed8f6a8bded049", "digestRole": "canonical-object-set", "digestRecord": "recipes/stakater/reloader/2.2.14/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "206dcaad71b6f825e834c5b1c0a3dc6799927de8344f4f5d58ed8f6a8bded049", "record": "recipes/stakater/reloader/2.2.14/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "stakater/reloader@2.2.14/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/stakater/reloader/2.2.14/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml", "recipes/stakater/reloader/2.2.14/revisions/default/r001/rendered/release-objects.yaml", "recipes/stakater/reloader/2.2.14/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml", "recipes/stakater/reloader/2.2.14/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=stakater/reloader", "version=2.2.14", "base=default", "valuesProfile=recipes/stakater/reloader/2.2.14/effective-values.yaml", "namespace=reloader", "releaseName=reloader", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/stakater-reloader-2-2-14-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "strimzi-strimzi-kafka-operator-1-0-0-default", "labels": { "sourceType": "helm", "component": "strimzi/strimzi-kafka-operator", "sourceVersion": "1.0.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "strimzi/strimzi-kafka-operator", "version": "1.0.0", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/strimzi-strimzi-kafka-operator:1.0.0@sha256:40ed335861aea2a9559c150936ea3eb2eeca59c4015bda3b40160890a0632848", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "45d45a5fd99dabd09d7beef1a62ee67e84b03a4f6a08d6ce56791815edc4c29b", "digestRole": "helm-variant-revision", "digestRecord": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 27, "digest": "f3cfe3329c6673870bb6ecd1d31cab9d74ee96695d6b2b6fbfb0f4a1a7b9f23b", "digestRole": "canonical-object-set", "digestRecord": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "f3cfe3329c6673870bb6ecd1d31cab9d74ee96695d6b2b6fbfb0f4a1a7b9f23b", "record": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "strimzi/strimzi-kafka-operator@1.0.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/strimzi/strimzi-kafka-operator/1.0.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=strimzi/strimzi-kafka-operator", "version=1.0.0", "base=default", "valuesProfile=recipes/strimzi/strimzi-kafka-operator/1.0.0/effective-values.yaml", "namespace=default", "releaseName=strimzi-kafka-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "strimzi-strimzi-kafka-operator-1-0-0-no-crds", "labels": { "sourceType": "helm", "component": "strimzi/strimzi-kafka-operator", "sourceVersion": "1.0.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "strimzi/strimzi-kafka-operator", "version": "1.0.0", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/strimzi-strimzi-kafka-operator:1.0.0@sha256:40ed335861aea2a9559c150936ea3eb2eeca59c4015bda3b40160890a0632848", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "c074a6281dddbc35ec340c8efcce77b1875ed5c3432cc54c651a7976304ef43d", "digestRole": "canonical-object-set", "digestRecord": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "c074a6281dddbc35ec340c8efcce77b1875ed5c3432cc54c651a7976304ef43d", "record": "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "strimzi/strimzi-kafka-operator@1.0.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/strimzi/strimzi-kafka-operator/1.0.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml", "recipes/strimzi/strimzi-kafka-operator/1.0.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=strimzi/strimzi-kafka-operator", "version=1.0.0", "base=no-crds", "valuesProfile=recipes/strimzi/strimzi-kafka-operator/1.0.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=strimzi-kafka-operator", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [ { "name": "kafkas.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkas.kafka.strimzi.io", "purpose": "Kafka CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkaconnects.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkaconnects.kafka.strimzi.io", "purpose": "KafkaConnect CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "strimzipodsets.core.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "strimzipodsets.core.strimzi.io", "purpose": "StrimziPodSet CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkatopics.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkatopics.kafka.strimzi.io", "purpose": "KafkaTopic CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkausers.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkausers.kafka.strimzi.io", "purpose": "KafkaUser CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkanodepools.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkanodepools.kafka.strimzi.io", "purpose": "KafkaNodePool CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkabridges.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkabridges.kafka.strimzi.io", "purpose": "KafkaBridge CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkaconnectors.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkaconnectors.kafka.strimzi.io", "purpose": "KafkaConnector CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkamirrormaker2s.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkamirrormaker2s.kafka.strimzi.io", "purpose": "KafkaMirrorMaker2 CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } }, { "name": "kafkarebalances.kafka.strimzi.io", "type": "requiredCRDs", "required": true, "details": { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkarebalances.kafka.strimzi.io", "purpose": "KafkaRebalance CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } } ], "installTimeStatus": "partly-declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "kafkas.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "Kafka CRD managed outside this no-crds preset" }, { "id": "kafkaconnects.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaConnect CRD managed outside this no-crds preset" }, { "id": "strimzipodsets.core.strimzi.io", "origin": "base", "type": "target-fact", "detail": "StrimziPodSet CRD managed outside this no-crds preset" }, { "id": "kafkatopics.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaTopic CRD managed outside this no-crds preset" }, { "id": "kafkausers.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaUser CRD managed outside this no-crds preset" }, { "id": "kafkanodepools.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaNodePool CRD managed outside this no-crds preset" }, { "id": "kafkabridges.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaBridge CRD managed outside this no-crds preset" }, { "id": "kafkaconnectors.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaConnector CRD managed outside this no-crds preset" }, { "id": "kafkamirrormaker2s.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaMirrorMaker2 CRD managed outside this no-crds preset" }, { "id": "kafkarebalances.kafka.strimzi.io", "origin": "base", "type": "target-fact", "detail": "KafkaRebalance CRD managed outside this no-crds preset" } ], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" ] }, "routeIntent": { "status": "required-at-destination", "routes": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "requiredCRDs": [ { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkas.kafka.strimzi.io", "purpose": "Kafka CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkaconnects.kafka.strimzi.io", "purpose": "KafkaConnect CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "strimzipodsets.core.strimzi.io", "purpose": "StrimziPodSet CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkatopics.kafka.strimzi.io", "purpose": "KafkaTopic CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkausers.kafka.strimzi.io", "purpose": "KafkaUser CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkanodepools.kafka.strimzi.io", "purpose": "KafkaNodePool CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkabridges.kafka.strimzi.io", "purpose": "KafkaBridge CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkaconnectors.kafka.strimzi.io", "purpose": "KafkaConnector CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkamirrormaker2s.kafka.strimzi.io", "purpose": "KafkaMirrorMaker2 CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" }, { "deliveryLanes": [ "regularHelm", "cubInstallerApply", "configHubKubectlApply", "configHubOciArgo" ], "name": "kafkarebalances.kafka.strimzi.io", "purpose": "KafkaRebalance CRD managed outside this no-crds preset", "sourceVariant": "default", "suggestedSource": "kubectl apply -f ", "packageSource": "package://prerequisites/target-facts/no-crds-crds.yaml", "packagePath": "packages/strimzi/strimzi-kafka-operator/1.0.0/prerequisites/target-facts/no-crds-crds.yaml" } ] }, "requirementRefs": [ "kafkas.kafka.strimzi.io", "kafkaconnects.kafka.strimzi.io", "strimzipodsets.core.strimzi.io", "kafkatopics.kafka.strimzi.io", "kafkausers.kafka.strimzi.io", "kafkanodepools.kafka.strimzi.io", "kafkabridges.kafka.strimzi.io", "kafkaconnectors.kafka.strimzi.io", "kafkamirrormaker2s.kafka.strimzi.io", "kafkarebalances.kafka.strimzi.io" ], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [ "kafkas.kafka.strimzi.io", "kafkaconnects.kafka.strimzi.io", "strimzipodsets.core.strimzi.io", "kafkatopics.kafka.strimzi.io", "kafkausers.kafka.strimzi.io", "kafkanodepools.kafka.strimzi.io", "kafkabridges.kafka.strimzi.io", "kafkaconnectors.kafka.strimzi.io", "kafkamirrormaker2s.kafka.strimzi.io", "kafkarebalances.kafka.strimzi.io" ], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/strimzi-strimzi-kafka-operator-1-0-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "sveltos-kyverno-fleet-3-8-1-staging", "labels": { "sourceType": "sveltos", "component": "kyverno-fleet", "sourceVersion": "v1.12.0", "base": "staging" } }, "spec": { "source": { "type": "sveltos", "name": "kyverno-fleet", "version": "v1.12.0", "record": "examples/sveltos/kyverno-fleet/source-lock.yaml", "packageOciRef": "", "selection": { "name": "staging", "kind": "catalog-preset", "provider": "Config Workshop", "record": "examples/sveltos/kyverno-fleet/source-lock.yaml" } }, "baseVariant": { "name": "staging", "revision": "live-r001", "digest": "1fba789198af3d5cba564ba9777b86ec8e5db8aaf07f4f25e8bc2766c0317396", "digestRole": "source-file", "digestRecord": "examples/sveltos/kyverno-fleet/clusterprofile.yaml" }, "configuration": { "format": "sveltos-clusterprofile-yaml", "objects": "examples/sveltos/kyverno-fleet/clusterprofile.yaml", "inventory": "", "objectCount": 1, "digest": "1fba789198af3d5cba564ba9777b86ec8e5db8aaf07f4f25e8bc2766c0317396", "digestRole": "literal-yaml-file", "digestRecord": "examples/sveltos/kyverno-fleet/clusterprofile.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/sveltos/kyverno-fleet/source-lock.yaml" }, "materialization": { "method": "read-literal-configuration", "status": "recorded-no-op", "outputDigest": "1fba789198af3d5cba564ba9777b86ec8e5db8aaf07f4f25e8bc2766c0317396", "record": "examples/sveltos/kyverno-fleet/clusterprofile.yaml" }, "flattening": { "status": "decided", "verdict": "born-flattened", "action": "retain-exact-objects", "scope": "kyverno-fleet@v1.12.0/staging; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "examples/sveltos/kyverno-fleet/source-lock.yaml" }, "boundaries": [ "The Sveltos ClusterProfile is already a literal Kubernetes object.", "The Helm chart referenced by the ClusterProfile remains a nested source that Sveltos processes on selected clusters." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the sveltos source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The Sveltos objects and any nested source references" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/sveltos/kyverno-fleet/source-lock.yaml", "examples/sveltos/kyverno-fleet/clusterprofile.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "This source already contains exact Kubernetes objects. Reading and fingerprinting them is the recorded materialization step.", "requiredInputs": [ "The literal Sveltos objects; nested sources keep their own materialization step" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/sveltos/kyverno-fleet/source-lock.yaml", "examples/sveltos/kyverno-fleet/clusterprofile.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "A destination-specific lifecycle plan is recorded for the named target and delivery runtime.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/sveltos/kyverno-fleet/live-receipt.yaml", "data/helm-catalog-readmes/units/sveltos-kyverno-fleet-3-8-1-staging/readme.yaml", "data/sveltos-oci-delivery-proof/summary.md", "examples/sveltos/kyverno-fleet/README.md", "examples/sveltos/kyverno-fleet/clusterprofile-pilot.yaml", "examples/sveltos/kyverno-fleet/source-lock.yaml", "runs/sveltos-oci-delivery-proof/receipt.yaml" ], "nextAction": "Recheck the plan if the variant, destination, or delivery runtime changes." }, { "id": "post-deployment", "question": "Did it work?", "answer": "A recorded delivery path reached its checked live result for this exact configuration.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/sveltos/kyverno-fleet/live-receipt.yaml", "runs/sveltos-oci-delivery-proof/receipt.yaml", "data/sveltos-oci-delivery-proof/summary.md" ], "nextAction": "Read the receipt for the target, checks, limits, and observation time before relying on the result." } ] }, "inputs": { "fixedAtBuildTime": [ "sveltos=v1.12.0", "chart=kyverno/kyverno", "version=3.8.1", "clusterSelector=environment=staging", "syncMode=ContinuousWithDriftDetection", "admissionController.replicas=3" ], "installTime": [ { "name": "management cluster", "value": "Kubernetes v1.35.0 with Sveltos v1.12.0", "status": "live-pass" }, { "name": "workload cluster registration", "value": "SveltosCluster labeled environment=staging", "status": "live-pass" } ], "installTimeStatus": "declared" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "confighub-to-management-cluster", "origin": "base", "type": "lifecycle-action", "detail": "The current receipt records two approved ConfigHub revisions, two portable OCI digests, and Argo CD reconciliation on the management cluster." }, { "id": "sveltos-cluster-selection", "origin": "base", "type": "lifecycle-action", "detail": "Sveltos selected the rollout=pilot cluster first. Removing that one selector in the second approved revision selected both staging clusters." }, { "id": "sveltos-helm-reconciliation", "origin": "base", "type": "lifecycle-action", "detail": "Sveltos installed Kyverno 3.8.1 and reported the Helm feature as Provisioned on both targets." }, { "id": "sveltos-drift-recovery", "origin": "base", "type": "lifecycle-action", "detail": "After the admission-controller replica count was changed from three to one on each target, Sveltos restored both to three." } ], "records": [ "examples/sveltos/kyverno-fleet/live-receipt.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "confighub-to-management-cluster", "requirementRefs": [ "confighub-to-management-cluster" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "The current receipt records two approved ConfigHub revisions, two portable OCI digests, and Argo CD reconciliation on the management cluster.", "automatic": false, "status": "recorded", "sourceStatus": "live-pass", "supportedRuntimes": [ "Argo CD" ], "checks": [], "evidence": [] }, { "id": "sveltos-cluster-selection", "requirementRefs": [ "sveltos-cluster-selection" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "Sveltos selected the rollout=pilot cluster first. Removing that one selector in the second approved revision selected both staging clusters.", "automatic": false, "status": "recorded", "sourceStatus": "live-pass", "supportedRuntimes": [], "checks": [], "evidence": [] }, { "id": "sveltos-helm-reconciliation", "requirementRefs": [ "sveltos-helm-reconciliation" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "Sveltos installed Kyverno 3.8.1 and reported the Helm feature as Provisioned on both targets.", "automatic": false, "status": "recorded", "sourceStatus": "live-pass", "supportedRuntimes": [], "checks": [], "evidence": [] }, { "id": "sveltos-drift-recovery", "requirementRefs": [ "sveltos-drift-recovery" ], "phase": "destination-resolution", "proposedActor": "not selected", "proposedMechanism": "After the admission-controller replica count was changed from three to one on each target, Sveltos restored both to three.", "automatic": false, "status": "recorded", "sourceStatus": "live-pass", "supportedRuntimes": [], "checks": [], "evidence": [] } ], "records": [ "examples/sveltos/kyverno-fleet/live-receipt.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "managementClusterRequiresSveltos": true, "managementKubernetesVersion": "v1.35.0", "sveltosVersion": "v1.12.0", "selectedClusterLabel": "environment=staging", "workloadKubernetesVersion": "v1.35.0" }, "requirementRefs": [], "records": [ "examples/sveltos/kyverno-fleet/live-receipt.yaml" ] }, "resolution": { "status": "resolved-for-recorded-targets", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [ "data/helm-catalog-readmes/units/sveltos-kyverno-fleet-3-8-1-staging/readme.yaml", "data/sveltos-oci-delivery-proof/summary.md", "examples/sveltos/kyverno-fleet/README.md", "examples/sveltos/kyverno-fleet/clusterprofile-pilot.yaml", "examples/sveltos/kyverno-fleet/live-receipt.yaml", "examples/sveltos/kyverno-fleet/source-lock.yaml", "runs/sveltos-oci-delivery-proof/receipt.yaml" ] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "examples/sveltos/kyverno-fleet/source-lock.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "temporary-pass", "pilotDigest": "sha256:0de702823d0d0cb41bfa667e29f40871f6d28e3122815ccd2f2931a9aacbc3bc", "fleetDigest": "sha256:a9907fd5f277f4dff5a4ec78841562657b7fd706e2ddf1e14a347d6a66493911" }, "configHubReleaseOci": { "status": "private-pass", "pilotDigest": "sha256:f7f8fbfd93b6f33ce0cd5e5ea23250eae096d09ff08c0d8e55077ad2f9d6610a", "fleetDigest": "sha256:0e177fbb247e4642ff925a1beef0f403f7999a72b36d70eff88a26a2f997c179" }, "argoCd": "live-pass-two-revisions", "flux": "not-used-in-this-run" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "approvalRequired", "approvalReason": "system-configuration" }, "evidence": { "readme": "examples/sveltos/kyverno-fleet/README.md", "readmeUnit": "data/helm-catalog-readmes/units/sveltos-kyverno-fleet-3-8-1-staging/readme.yaml", "sourceLock": "examples/sveltos/kyverno-fleet/source-lock.yaml", "liveReceipt": "examples/sveltos/kyverno-fleet/live-receipt.yaml", "pilotProfile": "examples/sveltos/kyverno-fleet/clusterprofile-pilot.yaml", "ociDeliveryReceipt": "runs/sveltos-oci-delivery-proof/receipt.yaml", "ociDeliverySummary": "data/sveltos-oci-delivery-proof/summary.md", "configHubSpace": "sveltos-kyverno-fleet-3-8-1-staging", "configHubUnit": "clusterprofile", "clusterSummary": "projectsveltos/kyverno-staging-sveltos-helm-expt-sveltos-workload" }, "operations": { "resourceClass": "system-configuration", "ownerClass": "platform-team", "changeCadence": "planned-platform-release" } }, "status": { "level": "partial", "claim": "ConfigHub approved a pilot Sveltos ClusterProfile and a second selector revision at different OCI digests. Sveltos installed Kyverno 3.8.1 on the pilot first, then on both staging clusters, and restored replica drift on each target.", "limits": [ "Sveltos itself was installed directly as a pinned management-cluster prerequisite.", "The portable OCI artifacts used a temporary local registry.", "The live test used two local kind clusters; it did not test a large production fleet or a rollout that pauses after a failed target.", "The receipt proves this profile and drift test, not every Sveltos feature." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "timoni-flux-aio-2-9-4-0-default", "labels": { "sourceType": "timoni", "component": "flux-aio", "sourceVersion": "2.9.4-0", "base": "default" } }, "spec": { "source": { "type": "timoni", "name": "flux-aio", "version": "2.9.4-0", "record": "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml", "packageOciRef": "oci://ghcr.io/stefanprodan/modules/flux-aio@sha256:2fdfc00b5a1b59017f63ec0ab78be8b013fa7d542a57d6f1a6db4df64eab5a5a", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml" } }, "baseVariant": { "name": "default", "revision": "materialized-r001", "digest": "2fdfc00b5a1b59017f63ec0ab78be8b013fa7d542a57d6f1a6db4df64eab5a5a", "digestRole": "source-module-oci-manifest", "digestRecord": "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "examples/timoni/flux-aio-2-9-4-0/rendered/release-objects.yaml", "inventory": "examples/timoni/flux-aio-2-9-4-0/rendered/object-inventory.json", "objectCount": 21, "digest": "cb8a9a65993ca63c0e02a2fbd70240184691bec17678f0378b96842e8da28b24", "digestRole": "canonical-object-set", "digestRecord": "examples/timoni/flux-aio-2-9-4-0/generation-receipt.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml" }, "materialization": { "method": "timoni-build", "status": "captured", "outputDigest": "cb8a9a65993ca63c0e02a2fbd70240184691bec17678f0378b96842e8da28b24", "record": "examples/timoni/flux-aio-2-9-4-0/generation-receipt.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "flux-aio@2.9.4-0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "examples/timoni/flux-aio-2-9-4-0/flattening-safety-verdict.yaml" }, "boundaries": [ "Timoni built the immutable module and selected values into the exact objects retained by this base.", "The module's ordered apply and optional test remain lifecycle work beside the literal objects." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the timoni source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "A Timoni module or bundle, its schema and values, or built output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml", "examples/timoni/flux-aio-2-9-4-0/rendered/release-objects.yaml", "examples/timoni/flux-aio-2-9-4-0/rendered/object-inventory.json" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Timoni build step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned module or bundle OCI, typed values, and Timoni build command" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml", "examples/timoni/flux-aio-2-9-4-0/generation-receipt.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "examples/timoni/flux-aio-2-9-4-0/lifecycle-route-intent.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "module=oci://ghcr.io/stefanprodan/modules/flux-aio@sha256:2fdfc00b5a1b59017f63ec0ab78be8b013fa7d542a57d6f1a6db4df64eab5a5a", "moduleVersion=2.9.4-0", "instance=flux", "namespace=flux-system", "values=examples/timoni/flux-aio-2-9-4-0/selected-values.cue", "schema=examples/timoni/flux-aio-2-9-4-0/config-schema.cue", "processor=timoni@0.34.0" ], "installTime": [ { "name": "Kubernetes version", "value": "1.21.0", "status": "required-not-live-checked" }, { "name": "Flux controller readiness", "value": "source, kustomize, helm, notification, and watcher controllers", "status": "required-not-live-checked" } ], "installTimeStatus": "two destination facts recorded; no destination selected" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "apply-crds-before-controllers", "origin": "base", "type": "lifecycle-action", "detail": "Apply the 15 Flux CustomResourceDefinitions before relying on controller reconciliation of Flux custom resources." }, { "id": "controller-readiness", "origin": "base", "type": "lifecycle-action", "detail": "Observe source, kustomize, helm, notification, and watcher controller readiness after apply." }, { "id": "1.21.0-or-newer", "origin": "base", "type": "target-fact", "detail": "The module schema enforces Kubernetes 1.21.0 or newer." } ], "records": [ "examples/timoni/flux-aio-2-9-4-0/lifecycle-route-intent.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "apply-crds-before-controllers", "requirementRefs": [ "apply-crds-before-controllers" ], "phase": "apply", "proposedActor": "selected destination actor", "proposedMechanism": "Apply the 15 Flux CustomResourceDefinitions before relying on controller reconciliation of Flux custom resources.", "automatic": false, "status": "recorded", "sourceStatus": "proposed-destination-requirement", "supportedRuntimes": [ "Flux" ], "checks": [ "Record CRD establishment and controller readiness for the selected destination before claiming lifecycle execution." ], "evidence": [], "orderHint": 10 }, { "id": "controller-readiness", "requirementRefs": [ "controller-readiness" ], "phase": "post-apply", "proposedActor": "selected destination actor", "proposedMechanism": "Observe source, kustomize, helm, notification, and watcher controller readiness after apply.", "automatic": false, "status": "recorded", "sourceStatus": "proposed-destination-requirement", "supportedRuntimes": [], "checks": [ "Record destination health and controller observations; the static build does not prove runtime health." ], "evidence": [], "orderHint": 20 } ], "records": [ "examples/timoni/flux-aio-2-9-4-0/lifecycle-route-intent.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "minimumKubernetesVersion": "1.21.0", "namespace": "flux-system" }, "requirementRefs": [ "1.21.0-or-newer" ], "records": [ "examples/timoni/flux-aio-2-9-4-0/lifecycle-route-intent.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [ "1.21.0-or-newer" ], "deliveryProtected": [], "records": [ "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "immutable-public-source", "reference": "oci://ghcr.io/stefanprodan/modules/flux-aio", "digest": "sha256:2fdfc00b5a1b59017f63ec0ab78be8b013fa7d542a57d6f1a6db4df64eab5a5a" }, "literalConfigOci": { "status": "not-published" }, "configHubUpload": { "status": "not-run" }, "configHubReleaseOci": { "status": "not-run" }, "argoCd": "not-run", "flux": "not-run", "direct": "not-run" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "sourceLock": "examples/timoni/flux-aio-2-9-4-0/source-lock.yaml", "selectedValues": "examples/timoni/flux-aio-2-9-4-0/selected-values.cue", "configSchema": "examples/timoni/flux-aio-2-9-4-0/config-schema.cue", "renderedObjects": "examples/timoni/flux-aio-2-9-4-0/rendered/release-objects.yaml", "objectInventory": "examples/timoni/flux-aio-2-9-4-0/rendered/object-inventory.json", "materializationReceipt": "examples/timoni/flux-aio-2-9-4-0/generation-receipt.yaml", "lifecycleRouteIntent": "examples/timoni/flux-aio-2-9-4-0/lifecycle-route-intent.yaml", "flatteningVerdict": "examples/timoni/flux-aio-2-9-4-0/flattening-safety-verdict.yaml", "readme": "examples/timoni/flux-aio-2-9-4-0/README.md" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "partial", "claim": "The immutable Timoni Flux AIO 2.9.4-0 module produced 21 exact Kubernetes objects in a local, cluster-free build. Its typed options, selected values, object digest, and destination lifecycle requirements are retained together.", "limits": [ "Kubernetes schema validation, admission, apply, controller readiness, upgrade, rollback, and GitOps reconciliation have not been run for this entry.", "The retained source module and the rendered Kubernetes objects are distinct artifacts; no literal configuration OCI or ConfigHub upload is recorded.", "The static object set includes one Flux controller Deployment; this record does not claim that its controllers are ready or that Flux reconciled any resource." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "timoni-redis-8-10-1-default", "labels": { "sourceType": "timoni", "component": "redis", "sourceVersion": "8.10.1", "base": "default" } }, "spec": { "source": { "type": "timoni", "name": "redis", "version": "8.10.1", "record": "examples/timoni/redis-8-10-1/source-lock.yaml", "packageOciRef": "oci://ghcr.io/stefanprodan/modules/redis@sha256:7f24e8f7e49132c90789464dcf5b82eb137e378c97735eec36efbe0d1caeb872", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "examples/timoni/redis-8-10-1/source-lock.yaml" } }, "baseVariant": { "name": "default", "revision": "materialized-r001", "digest": "7f24e8f7e49132c90789464dcf5b82eb137e378c97735eec36efbe0d1caeb872", "digestRole": "source-module-oci-manifest", "digestRecord": "examples/timoni/redis-8-10-1/source-lock.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "examples/timoni/redis-8-10-1/rendered/release-objects.yaml", "inventory": "examples/timoni/redis-8-10-1/rendered/object-inventory.json", "objectCount": 7, "digest": "10f21f387715146838bc531cba4ce921e8eca127b0ab69a065e4f66a2a146fc2", "digestRole": "canonical-object-set", "digestRecord": "examples/timoni/redis-8-10-1/generation-receipt.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "examples/timoni/redis-8-10-1/source-lock.yaml" }, "materialization": { "method": "timoni-build", "status": "captured", "outputDigest": "10f21f387715146838bc531cba4ce921e8eca127b0ab69a065e4f66a2a146fc2", "record": "examples/timoni/redis-8-10-1/generation-receipt.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "redis@8.10.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "examples/timoni/redis-8-10-1/flattening-safety-verdict.yaml" }, "boundaries": [ "Timoni built the immutable module and selected values into the exact objects retained by this base.", "The module's ordered apply and optional test remain lifecycle work beside the literal objects." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the timoni source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "A Timoni module or bundle, its schema and values, or built output" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "examples/timoni/redis-8-10-1/source-lock.yaml", "examples/timoni/redis-8-10-1/rendered/release-objects.yaml", "examples/timoni/redis-8-10-1/rendered/object-inventory.json" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Timoni build step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned module or bundle OCI, typed values, and Timoni build command" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "examples/timoni/redis-8-10-1/source-lock.yaml", "examples/timoni/redis-8-10-1/generation-receipt.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "not-run", "resultState": "not-run", "records": [ "examples/timoni/redis-8-10-1/lifecycle-route-intent.yaml" ], "nextAction": "Choose a destination and check its APIs, prerequisites, policies, credentials, controllers, and hardware before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "module=oci://ghcr.io/stefanprodan/modules/redis@sha256:7f24e8f7e49132c90789464dcf5b82eb137e378c97735eec36efbe0d1caeb872", "moduleVersion=8.10.1", "instance=redis", "namespace=redis", "values=examples/timoni/redis-8-10-1/selected-values.cue", "schema=examples/timoni/redis-8-10-1/config-schema.cue" ], "installTime": [ { "name": "redis namespace", "value": "redis", "status": "required-not-live-checked" }, { "name": "Kubernetes version", "value": "1.20.0 or newer", "status": "required-not-live-checked" }, { "name": "StorageClass", "value": "standard", "status": "required-not-live-checked" } ], "installTimeStatus": "three destination facts recorded; no destination selected" }, "lifecycle": { "requirements": { "status": "recorded", "items": [ { "id": "apply-master-first", "origin": "base", "type": "lifecycle-action", "detail": "Apply the ServiceAccount, ConfigMap, master Service, persistent volume claim, and master Deployment first; wait for the master to become ready before continuing." }, { "id": "apply-readonly-replica-second", "origin": "base", "type": "lifecycle-action", "detail": "Apply the read-only replica Deployment and Service after the master is ready." }, { "id": "optional-ping-test", "origin": "base", "type": "lifecycle-action", "detail": "Run the generated redis-cli PING Job after apply. The default Catalog selection leaves this test disabled." }, { "id": "redis", "origin": "base", "type": "target-fact", "detail": "The rendered objects use the redis namespace but do not create it." }, { "id": "standard", "origin": "base", "type": "target-fact", "detail": "The default persistent volume claim requests the standard StorageClass." }, { "id": "1.20.0-or-newer", "origin": "base", "type": "target-fact", "detail": "The module schema requires Kubernetes 1.20.0 or newer." } ], "records": [ "examples/timoni/redis-8-10-1/lifecycle-route-intent.yaml" ] }, "routeIntent": { "status": "recorded", "routes": [ { "id": "apply-master-first", "requirementRefs": [ "apply-master-first" ], "phase": "apply", "proposedActor": "selected destination actor", "proposedMechanism": "Apply the ServiceAccount, ConfigMap, master Service, persistent volume claim, and master Deployment first; wait for the master to become ready before continuing.", "automatic": false, "status": "recorded", "sourceStatus": "recorded-source-behavior", "supportedRuntimes": [], "checks": [ "Record the selected destination, Timoni apply result, and master readiness before claiming this route ran." ], "evidence": [], "orderHint": 10 }, { "id": "apply-readonly-replica-second", "requirementRefs": [ "apply-readonly-replica-second" ], "phase": "apply", "proposedActor": "selected destination actor", "proposedMechanism": "Apply the read-only replica Deployment and Service after the master is ready.", "automatic": false, "status": "recorded", "sourceStatus": "recorded-source-behavior", "supportedRuntimes": [], "checks": [ "Record replica readiness for the selected destination before claiming this route ran." ], "evidence": [], "orderHint": 20 }, { "id": "optional-ping-test", "requirementRefs": [ "optional-ping-test" ], "phase": "post-apply", "proposedActor": "selected destination actor", "proposedMechanism": "Run the generated redis-cli PING Job after apply. The default Catalog selection leaves this test disabled.", "automatic": false, "status": "recorded", "sourceStatus": "disabled-by-default", "supportedRuntimes": [], "checks": [ "Record the Job result when the test is enabled; do not infer it from the seven-object default build." ], "evidence": [], "orderHint": 30 } ], "records": [ "examples/timoni/redis-8-10-1/lifecycle-route-intent.yaml" ] }, "targetFacts": { "status": "recorded", "declared": { "minimumKubernetesVersion": "1.20.0", "namespace": "redis", "storageClass": "standard" }, "requirementRefs": [ "redis", "standard", "1.20.0-or-newer" ], "records": [ "examples/timoni/redis-8-10-1/lifecycle-route-intent.yaml" ] }, "resolution": { "status": "awaits-variant-and-target", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Choices fixed by the recorded source configuration" ], "variantControlled": [ "Exact object changes retained after the base" ], "targetSupplied": [ "redis", "standard", "1.20.0-or-newer" ], "deliveryProtected": [], "records": [ "examples/timoni/redis-8-10-1/source-lock.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "sourcePackageOci": { "status": "immutable-public-source", "reference": "oci://ghcr.io/stefanprodan/modules/redis", "digest": "sha256:7f24e8f7e49132c90789464dcf5b82eb137e378c97735eec36efbe0d1caeb872" }, "literalConfigOci": { "status": "public-anonymous-pull-proved", "reference": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/timoni-redis-config@sha256:375bc7dee05f4629d3b297f05628ee52c104d7a6ced03a2c16b198c819b7ae65", "manifestDigest": "sha256:375bc7dee05f4629d3b297f05628ee52c104d7a6ced03a2c16b198c819b7ae65", "objectSetSha256": "10f21f387715146838bc531cba4ce921e8eca127b0ab69a065e4f66a2a146fc2", "receipt": "runs/timoni-redis-catalog-proof/public-oci-receipt.yaml" }, "configHubUpload": { "status": "base-and-development-variant-retained", "sourceRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/timoni-redis-config@sha256:375bc7dee05f4629d3b297f05628ee52c104d7a6ced03a2c16b198c819b7ae65", "sourceObjectSetSha256": "10f21f387715146838bc531cba4ce921e8eca127b0ab69a065e4f66a2a146fc2", "baseSpace": "timoni-redis-8-10-1-base", "developmentSpace": "timoni-redis-8-10-1-dev", "linkedUnits": 7, "objectChange": "none", "receipt": "runs/timoni-redis-catalog-proof/confighub-receipt.yaml" }, "configHubReleaseOci": { "status": "not-run" }, "argoCd": "not-run", "flux": "not-run", "direct": "not-run" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ], "normalSet": "baseline" }, "evidence": { "sourceLock": "examples/timoni/redis-8-10-1/source-lock.yaml", "selectedValues": "examples/timoni/redis-8-10-1/selected-values.cue", "configSchema": "examples/timoni/redis-8-10-1/config-schema.cue", "renderedObjects": "examples/timoni/redis-8-10-1/rendered/release-objects.yaml", "objectInventory": "examples/timoni/redis-8-10-1/rendered/object-inventory.json", "materializationReceipt": "examples/timoni/redis-8-10-1/generation-receipt.yaml", "lifecycleRouteIntent": "examples/timoni/redis-8-10-1/lifecycle-route-intent.yaml", "flatteningVerdict": "examples/timoni/redis-8-10-1/flattening-safety-verdict.yaml", "readme": "examples/timoni/redis-8-10-1/README.md", "publicOciReceipt": "runs/timoni-redis-catalog-proof/public-oci-receipt.yaml", "configHubReceipt": "runs/timoni-redis-catalog-proof/confighub-receipt.yaml" }, "operations": { "resourceClass": "user-workload", "ownerClass": "application-team", "changeCadence": "application-release" } }, "status": { "level": "partial", "claim": "The immutable Timoni Redis 8.10.1 module produced seven exact Kubernetes objects. The objects and their companion records are publicly pullable in one OCI. ConfigHub retained the same object set as a base and a linked development variant.", "limits": [ "Kubernetes schema validation, admission, apply, workload health, upgrade, and rollback have not been run for this entry.", "The literal configuration OCI was anonymously pulled and compared with the recorded object set.", "ConfigHub retained a linked development variant with no Kubernetes field change; no destination was selected.", "No ConfigHub release OCI, Argo CD result, or Flux result is recorded.", "The output labels report app.kubernetes.io/version=0.0.0-devel; the source lock's version and immutable digest remain the source identity." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "traefik-traefik-40-2-0-default", "labels": { "sourceType": "helm", "component": "traefik/traefik", "sourceVersion": "40.2.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "traefik/traefik", "version": "40.2.0", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/traefik-traefik:40.2.0@sha256:b127b8df699116a6e6252bcf5a1199c2a32640b7e99de2e45fd507dd29022535", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "ac5aa9750da6d7769c06285834a6f3bb6fdd86b39a4f6aabcf7853241b5e9be1", "digestRole": "helm-variant-revision", "digestRecord": "recipes/traefik/traefik/40.2.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 31, "digest": "84b1e950901024fda7bb0be73aba239015712ae0c3d4cb0ecabcb091abc53c09", "digestRole": "canonical-object-set", "digestRecord": "recipes/traefik/traefik/40.2.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "84b1e950901024fda7bb0be73aba239015712ae0c3d4cb0ecabcb091abc53c09", "record": "recipes/traefik/traefik/40.2.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "traefik/traefik@40.2.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/traefik/traefik/40.2.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml", "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/traefik/traefik/40.2.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml", "recipes/traefik/traefik/40.2.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=traefik/traefik", "version=40.2.0", "base=default", "valuesProfile=recipes/traefik/traefik/40.2.0/effective-values.yaml", "namespace=default", "releaseName=traefik", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "traefik-traefik-40-2-0-no-crds", "labels": { "sourceType": "helm", "component": "traefik/traefik", "sourceVersion": "40.2.0", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "traefik/traefik", "version": "40.2.0", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/traefik-traefik:40.2.0@sha256:b127b8df699116a6e6252bcf5a1199c2a32640b7e99de2e45fd507dd29022535", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "9db056bdffd213bbce847b96122b40e879d0e47f7b8d57074f62a020ed89c9ce", "digestRole": "canonical-object-set", "digestRecord": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "9db056bdffd213bbce847b96122b40e879d0e47f7b8d57074f62a020ed89c9ce", "record": "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "traefik/traefik@40.2.0/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/traefik/traefik/40.2.0/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml", "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml", "recipes/traefik/traefik/40.2.0/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=traefik/traefik", "version=40.2.0", "base=no-crds", "valuesProfile=recipes/traefik/traefik/40.2.0/effective-values-no-crds.yaml", "namespace=default", "releaseName=traefik", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-40-2-0-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "watch" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "todo", "gitopsOciLive": "watch", "liveDualParity": "watch", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "traefik-traefik-41-0-2-default", "labels": { "sourceType": "helm", "component": "traefik/traefik", "sourceVersion": "41.0.2", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "traefik/traefik", "version": "41.0.2", "record": "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/traefik-traefik:41.0.2@sha256:1eaa111b935f026954acd370b50b9d560c546c992ce14babb581650c295a7cd9", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "f1a4f9f6dd5e2ec87b135a38de6022ba8c85a9c7210a9873d7f821f46d407602", "digestRole": "helm-variant-revision", "digestRecord": "recipes/traefik/traefik/41.0.2/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/traefik/traefik/41.0.2/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/traefik/traefik/41.0.2/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 31, "digest": "460d20fb9271461c0ccf38da58c7aa940fd691aca94b48cf76aed24465a982ac", "digestRole": "canonical-object-set", "digestRecord": "recipes/traefik/traefik/41.0.2/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "460d20fb9271461c0ccf38da58c7aa940fd691aca94b48cf76aed24465a982ac", "record": "recipes/traefik/traefik/41.0.2/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "flatten-with-routes", "action": "retain-exact-objects-with-routes", "scope": "traefik/traefik@41.0.2/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/traefik/traefik/41.0.2/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml", "recipes/traefik/traefik/41.0.2/revisions/default/r001/rendered/release-objects.yaml", "recipes/traefik/traefik/41.0.2/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml", "recipes/traefik/traefik/41.0.2/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=traefik/traefik", "version=41.0.2", "base=default", "valuesProfile=recipes/traefik/traefik/41.0.2/effective-values.yaml", "namespace=traefik", "releaseName=traefik", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/traefik-traefik-41-0-2-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "valkey-valkey-0-11-0-default", "labels": { "sourceType": "helm", "component": "valkey/valkey", "sourceVersion": "0.11.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "valkey/valkey", "version": "0.11.0", "record": "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/valkey-valkey:0.11.0@sha256:79a341b9ba34bf1de694eb2094ef19be67454f3783c6eea3792f651501b4808f", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "094d01211df163fcdb2c2de42c459223e53b6bc8edc46a1cc3fe40e1e4b1ada7", "digestRole": "helm-variant-revision", "digestRecord": "recipes/valkey/valkey/0.11.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/valkey/valkey/0.11.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/valkey/valkey/0.11.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 4, "digest": "0e66fc37f01be1b3812cf18bb9e0f83799a07f7d2d5a8d66c18cfca409d5e4df", "digestRole": "canonical-object-set", "digestRecord": "recipes/valkey/valkey/0.11.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "0e66fc37f01be1b3812cf18bb9e0f83799a07f7d2d5a8d66c18cfca409d5e4df", "record": "recipes/valkey/valkey/0.11.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "valkey/valkey@0.11.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/valkey/valkey/0.11.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml", "recipes/valkey/valkey/0.11.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/valkey/valkey/0.11.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml", "recipes/valkey/valkey/0.11.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=valkey/valkey", "version=0.11.0", "base=default", "valuesProfile=recipes/valkey/valkey/0.11.0/effective-values.yaml", "namespace=default", "releaseName=valkey", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/valkey-valkey-0-11-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "velero-velero-12-0-1-default", "labels": { "sourceType": "helm", "component": "velero/velero", "sourceVersion": "12.0.1", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "velero/velero", "version": "12.0.1", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/velero-velero:12.0.1@sha256:8ef67eb54e2a8457c08fdaa97ad41edea5b85c5f7e0b600fa157f3e64f19017e", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "12f87f14fed242c5a31222d7bcd2c1ff26489d97e18746b909a941c8aea89790", "digestRole": "helm-variant-revision", "digestRecord": "recipes/velero/velero/12.0.1/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 23, "digest": "3fc8afa5a2077710e8e9a49df435b234925b373cdaf2209e66fada0044ef2c1b", "digestRole": "canonical-object-set", "digestRecord": "recipes/velero/velero/12.0.1/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "3fc8afa5a2077710e8e9a49df435b234925b373cdaf2209e66fada0044ef2c1b", "record": "recipes/velero/velero/12.0.1/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "velero/velero@12.0.1/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/velero/velero/12.0.1/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml", "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/release-objects.yaml", "recipes/velero/velero/12.0.1/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml", "recipes/velero/velero/12.0.1/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=velero/velero", "version=12.0.1", "base=default", "valuesProfile=recipes/velero/velero/12.0.1/effective-values.yaml", "namespace=default", "releaseName=velero", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "velero-velero-12-0-1-no-crds", "labels": { "sourceType": "helm", "component": "velero/velero", "sourceVersion": "12.0.1", "base": "no-crds" } }, "spec": { "source": { "type": "helm", "name": "velero/velero", "version": "12.0.1", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/velero-velero:12.0.1@sha256:8ef67eb54e2a8457c08fdaa97ad41edea5b85c5f7e0b600fa157f3e64f19017e", "selection": { "name": "no-crds", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" } }, "baseVariant": { "name": "no-crds", "revision": "r001", "digest": "", "digestRole": "helm-variant-revision", "digestRecord": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/release-objects.yaml", "inventory": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/object-inventory.yaml", "objectCount": 0, "digest": "8ae294dd0418f586f2ea4ba66660384f28cacb0ceed6124ac0a0b1c8b4c1d933", "digestRole": "canonical-object-set", "digestRecord": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "8ae294dd0418f586f2ea4ba66660384f28cacb0ceed6124ac0a0b1c8b4c1d933", "record": "recipes/velero/velero/12.0.1/revisions/no-crds/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "velero/velero@12.0.1/no-crds; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/velero/velero/12.0.1/publication/flattening-safety-verdict-no-crds.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml", "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/release-objects.yaml", "recipes/velero/velero/12.0.1/revisions/no-crds/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml", "recipes/velero/velero/12.0.1/revisions/no-crds/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=velero/velero", "version=12.0.1", "base=no-crds", "valuesProfile=recipes/velero/velero/12.0.1/effective-values-no-crds.yaml", "namespace=default", "releaseName=velero", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-0-1-no-crds.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "no" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "no", "lifecycleObserved": "n/a", "gitopsOciLive": "no", "liveDualParity": "no", "twoClusterKind": "no", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "velero-velero-12-1-0-default", "labels": { "sourceType": "helm", "component": "velero/velero", "sourceVersion": "12.1.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "velero/velero", "version": "12.1.0", "record": "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/velero-velero:12.1.0@sha256:4f79e7fbd3e4a3564746dcfdc45091f43cb8faeb1a569e5cd6825576fcdd3882", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9cb957237d85626428cea4a1ff8aeef41be367835c29c06accc1e36f59f0aaec", "digestRole": "helm-variant-revision", "digestRecord": "recipes/velero/velero/12.1.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/velero/velero/12.1.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/velero/velero/12.1.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 23, "digest": "98ae56afed33da670906bb8ea003f7abd1ec19e4bbc42244590bc2e97f772d3f", "digestRole": "canonical-object-set", "digestRecord": "recipes/velero/velero/12.1.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "98ae56afed33da670906bb8ea003f7abd1ec19e4bbc42244590bc2e97f772d3f", "record": "recipes/velero/velero/12.1.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "velero/velero@12.1.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/velero/velero/12.1.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml", "recipes/velero/velero/12.1.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/velero/velero/12.1.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml", "recipes/velero/velero/12.1.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=velero/velero", "version=12.1.0", "base=default", "valuesProfile=recipes/velero/velero/12.1.0/effective-values.yaml", "namespace=velero", "releaseName=velero", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/velero-velero-12-1-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "todo" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "todo", "localKind": "todo", "lifecycleObserved": "n/a", "gitopsOciLive": "todo", "liveDualParity": "todo", "twoClusterKind": "todo", "variantPromotion": "missing-confighub-proof" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "vm-victoria-logs-single-0-12-5-default", "labels": { "sourceType": "helm", "component": "vm/victoria-logs-single", "sourceVersion": "0.12.5", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "vm/victoria-logs-single", "version": "0.12.5", "record": "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-logs-single:0.12.5@sha256:600a3ea933d9ffa94358d653ab77560ad1356d48c4b3b3f06cbbfb0845438686", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "9e2678385c7c4b2ba0bdc7ac9c0a12216d140cba8dfb52ecb07123bb34caa478", "digestRole": "helm-variant-revision", "digestRecord": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 2, "digest": "edbf6e7dd31e9a1d0686592e7c1f050b04f5d780bdc33bb34fb3ddbfdfedde04", "digestRole": "canonical-object-set", "digestRecord": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "edbf6e7dd31e9a1d0686592e7c1f050b04f5d780bdc33bb34fb3ddbfdfedde04", "record": "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "unsafe-to-flatten", "action": "process-source-late", "scope": "vm/victoria-logs-single@0.12.5/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/vm/victoria-logs-single/0.12.5/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml", "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/release-objects.yaml", "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml", "recipes/vm/victoria-logs-single/0.12.5/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=vm/victoria-logs-single", "version=0.12.5", "base=default", "valuesProfile=recipes/vm/victoria-logs-single/0.12.5/effective-values.yaml", "namespace=default", "releaseName=victoria-logs-single", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/vm-victoria-logs-single-0-12-5-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "vm-victoria-metrics-single-0-39-0-default", "labels": { "sourceType": "helm", "component": "vm/victoria-metrics-single", "sourceVersion": "0.39.0", "base": "default" } }, "spec": { "source": { "type": "helm", "name": "vm/victoria-metrics-single", "version": "0.39.0", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-metrics-single:0.39.0@sha256:b90babd40294c989155732abdc1848634c2478d0496e14a3eaec08d5a91f9195", "selection": { "name": "default", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" } }, "baseVariant": { "name": "default", "revision": "r001", "digest": "be30f6cfed24fe1620b2d6b8c705a7d0c7f581bd8dc29783661df3040664cf10", "digestRole": "helm-variant-revision", "digestRecord": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/release-objects.yaml", "inventory": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "10c95bd43cb02502fb823b0d461c26b60fb0b4fe988ccf8a0cbe2e29f0a8c5f8", "digestRole": "canonical-object-set", "digestRecord": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "10c95bd43cb02502fb823b0d461c26b60fb0b4fe988ccf8a0cbe2e29f0a8c5f8", "record": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "vm/victoria-metrics-single@0.39.0/default; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/vm/victoria-metrics-single/0.39.0/publication/flattening-safety-verdict.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/release-objects.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=vm/victoria-metrics-single", "version=0.39.0", "base=default", "valuesProfile=recipes/vm/victoria-metrics-single/0.39.0/effective-values.yaml", "namespace=default", "releaseName=victoria-metrics-single", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } }, { "apiVersion": "catalog.confighub.com/v1alpha1", "kind": "BaseVariantRecord", "metadata": { "name": "vm-victoria-metrics-single-0-39-0-default-reviewed", "labels": { "sourceType": "helm", "component": "vm/victoria-metrics-single", "sourceVersion": "0.39.0", "base": "default-reviewed" } }, "spec": { "source": { "type": "helm", "name": "vm/victoria-metrics-single", "version": "0.39.0", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml", "packageOciRef": "oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/vm-victoria-metrics-single:0.39.0@sha256:b90babd40294c989155732abdc1848634c2478d0496e14a3eaec08d5a91f9195", "selection": { "name": "default-reviewed", "kind": "catalog-preset", "provider": "Config Workshop", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" } }, "baseVariant": { "name": "default-reviewed", "revision": "r001", "digest": "f9dd6161a753504ce30ac4a3e6bd514b8a657e89ec088abc7cdc35d7f535f6bf", "digestRole": "helm-variant-revision", "digestRecord": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/variant-revision.yaml" }, "configuration": { "format": "kubernetes-yaml", "objects": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/release-objects.yaml", "inventory": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/object-inventory.yaml", "objectCount": 3, "digest": "10c95bd43cb02502fb823b0d461c26b60fb0b4fe988ccf8a0cbe2e29f0a8c5f8", "digestRole": "canonical-object-set", "digestRecord": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/variant-revision.yaml" }, "processing": { "sourceIntent": { "status": "recorded", "record": "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" }, "materialization": { "method": "helm-render", "status": "captured", "outputDigest": "10c95bd43cb02502fb823b0d461c26b60fb0b4fe988ccf8a0cbe2e29f0a8c5f8", "record": "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/variant-revision.yaml" }, "flattening": { "status": "decided", "verdict": "safe-to-flatten", "action": "retain-exact-objects", "scope": "vm/victoria-metrics-single@0.39.0/default-reviewed; recheck after source, lifecycle-sensitive variant, destination, or delivery-runtime changes", "record": "recipes/vm/victoria-metrics-single/0.39.0/publication/flattening-safety-verdict-default-reviewed.yaml" }, "boundaries": [ "Helm rendered the pinned chart and values into the exact objects retained by this base." ] }, "assessment": { "stages": [ { "id": "inspection", "question": "What do I have?", "answer": "Inspect the helm source, choices, locks, and any existing output before selecting a destination.", "requiredInputs": [ "The chart and values, a rendered object set, or a package that contains them" ], "catalogMatchRequired": false, "sourceIntentRequired": false, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "available", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/release-objects.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/rendered/object-inventory.yaml" ], "nextAction": "Inspect or compare the source and exact files before choosing a destination." }, { "id": "materialization", "question": "What will it produce?", "answer": "Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.", "requiredInputs": [ "The pinned chart, version, values, namespace, release name, and render capabilities" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": false, "deploymentRequired": false, "evidenceState": "completed", "resultState": "pass", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml", "recipes/vm/victoria-metrics-single/0.39.0/revisions/default-reviewed/r001/variant-revision.yaml" ], "nextAction": "Review the exact object set and its digest." }, { "id": "destination", "question": "Can this destination accept it?", "answer": "No destination answer is available yet because target facts or lifecycle handling are incomplete.", "requiredInputs": [ "The exact candidate configuration", "The selected destination and its current APIs, prerequisites, policies, credentials, controllers, and hardware facts" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": false, "evidenceState": "pending", "resultState": "pending", "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" ], "nextAction": "Choose the destination, record its facts, and resolve the required lifecycle work before apply." }, { "id": "post-deployment", "question": "Did it work?", "answer": "No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.", "requiredInputs": [ "The exact delivered revision and destination", "Live controller, resource, health, runtime, drift, and rollback observations required by the claim" ], "catalogMatchRequired": false, "sourceIntentRequired": true, "destinationAccessRequired": true, "deploymentRequired": true, "evidenceState": "not-run", "resultState": "not-run", "records": [], "nextAction": "Deliver the exact revision, then record controller, resource, health, runtime, drift, and rollback results separately." } ] }, "inputs": { "fixedAtBuildTime": [ "chart=vm/victoria-metrics-single", "version=0.39.0", "base=default-reviewed", "valuesProfile=recipes/vm/victoria-metrics-single/0.39.0/effective-values.yaml", "namespace=default", "releaseName=victoria-metrics-single", "capabilityProfile={\"apiVersions\":[],\"kubeVersion\":\"1.30.0\"}" ], "installTime": [], "installTimeStatus": "not-yet-declared" }, "lifecycle": { "requirements": { "status": "gap", "items": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" ] }, "routeIntent": { "status": "gap", "routes": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" ] }, "targetFacts": { "status": "gap", "declared": {}, "requirementRefs": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" ] }, "resolution": { "status": "gap", "rule": "Re-resolve after a lifecycle-sensitive variant change, destination assignment, or delivery-runtime change; bind the result to the exact configuration digest.", "records": [] } }, "ownership": { "status": "partly-declared", "sourceControlled": [ "Fields produced from the recorded chart values and render context" ], "variantControlled": [ "Post-render object fields recorded in ConfigHub after upload" ], "targetSupplied": [], "deliveryProtected": [], "records": [ "data/helm-render-intents/intents/vm-victoria-metrics-single-0-39-0-default-reviewed.yaml" ], "rule": "Re-evaluate ownership when the source, variant, destination, or delivery behavior changes; overlapping source and variant edits require review." }, "delivery": { "literalConfigOci": { "status": "not-published-in-this-record", "note": "The installer package contains several preset configurations. A literal OCI bundle for this one base needs its own publication receipt." }, "configHubReleaseOci": { "status": "not-recorded-for-this-base", "note": "No current ConfigHub Space release OCI receipt is recorded for this exact base." }, "argoCd": "not-recorded-for-this-base", "flux": "not-recorded-for-this-base", "direct": "not-recorded-for-this-base", "historicalGitopsOciStatus": "yes" }, "policy": { "profile": "catalog-standard", "productionAdds": [ "human-approval" ] }, "evidence": { "renderParity": "yes", "confighubScanOps": "yes", "localKind": "yes", "lifecycleObserved": "n/a", "gitopsOciLive": "yes", "liveDualParity": "yes", "twoClusterKind": "yes", "variantPromotion": "proven" }, "operations": { "resourceClass": "not-yet-classified", "ownerClass": "not-yet-classified", "changeCadence": "not-yet-classified" } }, "status": { "level": "available", "claim": "The Helm source record, committed rendered objects, revision digest, routes, target facts, and proof-lane statuses are indexed here.", "limits": [ "This record does not claim that the base has been uploaded to a live ConfigHub Space.", "The inputs still required at installation are not yet fully recorded for every Helm configuration.", "A multi-preset installer package OCI is not the same as a single literal configuration OCI." ] } } ] }