Browse Catalog
Catalog
Config
Stacks
Operate
Docs

longhorn/longhorn

Runs on your laptop

Choose a tested starting configuration for longhorn/longhorn@1.11.2. Read its exact Kubernetes objects, required setup, and current evidence before you deploy it.

Start with default. The page also shows other recorded choices. The page does not claim every possible values combination.

Evidence labels: Pass has a linked result. Watch names a limit to check. Blocked means do not use that path yet.

Upstream: find this chart on Artifact Hub · Helm documentation. This page adds checked configurations and test results.

Catalog readiness: Ready to try.

Licenses: chart Apache-2.0 (the chart source repository's LICENSE, read 2026-08-08). This describes the chart templates, not the packaged application images.

Check this chart and version Try the package Plan an upgrade or promotion

Already reviewed the result? Keep it in ConfigHub when you need history, variants, approvals, or delivery.

What this page gives you

Every chart page follows the same order. Choose a configuration, inspect its objects and setup work, then read the tests that have run. Open the worked examples.

Most choices are made before you install

The package fixes and checks almost everything at build time. What you set is small and typed.

You can read the test results

Open the saved results for the Helm comparison, live install, and delivery checks.

See hooks, CRDs, and setup work

The page names the work and says which delivery path has actually run.

What To Use

default configuration: 41 rendered objects · 7 images · 0 target prerequisites · 0 hook or setup routes · 6/6 checks passing. These counts come from the linked test records.

defaultRecommended first base variant
2Supported base variants
Recommended first pathFirst-configuration status
Ready for a target-specific production reviewProduction status

Use the public catalog entry, then check the exact configuration and its tests before making a production claim.

QuestionAnswer
Catalog readinessReady to try
Chart version1.11.2
Exact installer packageoci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f
OCI publication statuspublication receipt recorded
Publisher signaturepublisher signature recorded and verified
Latest upstream seen1.11.2
Supported base variantsdefault;ui-ingress
Not yet availableNo specific missing capability is recorded. The first configuration still needs review.
Namespacelonghorn-system

Four Separate Questions

Inspecting a source, producing objects, checking a destination, and checking a live result are different jobs. A Catalog match is useful for comparison but is not required. A missing destination or deployment is shown as not run or blocked, not as a failed configuration.

QuestionCurrent answerWhat it needsStatus
What do I have?Inspect the helm source, choices, locks, and any existing output before selecting a destination.Destination access: no
Selected configuration deployed: no
Available to inspect
evidence recorded
What will it produce?Run the recorded Helm render step to produce the exact Kubernetes objects for this configuration.Destination access: no
Selected configuration deployed: no
Checked: passed
evidence recorded
Can this destination accept it?The destination has not been checked for this exact configuration. A recorded source or render result is not a destination pass.Destination access: yes
Selected configuration deployed: no
Not run
no run recorded
Did it work?No post-deployment result is recorded for this exact configuration. Publication, upload, or rendering is not proof that it ran correctly.Destination access: yes
Selected configuration deployed: yes
Not run
no run recorded

Open the complete assessment, source, lifecycle, and evidence record.

Where This Chart's Settings Come From

Base variantHelm valuesConfigHub changesInstall work
defaulteffective-values.yamlNone in the catalog base. Later edits appear in ConfigHub Unit revision history or a derived variant.No separate install work is required.
ui-ingresseffective-values-ui-ingress.yamlNone in the catalog base. Later edits appear in ConfigHub Unit revision history or a derived variant.No separate work is recorded; read the prerequisite and lifecycle status before assuming none is needed.

Upgrade rule: if a new Helm render and a ConfigHub revision both change the same field, review the overlap before promotion. The values profile shows the Helm side; Unit revision history shows the ConfigHub side.

Read the full values-versus-ConfigHub rule. For the staging commands behind each prerequisite, open the prerequisite action packets.

What This Chart Contains

Shipping a chart as plain rendered YAML is faster and simpler, and it silently drops anything Helm was going to do afterwards. This section reports what a scan of the packaged chart found, across 37 files.

ConstructFoundWhy it matters when a chart ships as plain YAML
Helm hooks3Hook Jobs never fire, or fire under a different hook dialect.
Cluster lookups1The chart reads the cluster while rendering, so a render without one is valid but wrong.
Capability branching1The chart chooses apiVersions from the cluster it renders against.
Custom resource definitions22Per-file delivery can race the definitions the resources depend on.

A flattening-safety verdict has decided this version: default:unsafe-to-flatten; ui-ingress:unsafe-to-flatten. The verdict records one disposition per construct and names any companion artifact a flattened bundle must ship.

A construct being present does not make a chart unflattenable. Most are switched on or off by values, and a verdict records which ones the base you choose actually reaches. Read the catalog-wide evidence for how common each one is.

What The Starting Configuration Records

A base variant is a starting configuration we have already rendered and checked. Pick the one whose trade-off you want; the table below shows what each one changes. How the values for each are chosen.

The default base-variant record connects those Helm inputs to the Kubernetes objects, remaining requirements, hooks, CRDs, checks, and OCI status. Open it when you need the complete starting record rather than only the rendered YAML.

Open the full rendered YAML to read the actual manifest output. The render record and setup section explain the inputs, tests, CRDs, hooks, and other work around it.

If new Helm values create a useful starting configuration, record another base variant with its own inputs and checks. If one environment changes a field after rendering, record that change in a ConfigHub variant.

KeyWhere to look firstWhat it means
Package users pulloci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7fThe exact installer package for this chart version. The version tag is readable, and the manifest digest makes a published pull immutable. Public catalog package refs are published in Google Artifact Registry with anonymous read access. No ConfigHub account or Google registry login is needed for the local setup path.
Required before applyNone recorded for the recommended base variant.
No separate setup command recorded.
External resources the recommended base variant expects, such as an existing Secret, namespace, CRD, or target fact.
Kubernetes objectsfull rendered YAMLThe full YAML captured from this base variant. It is the output of the render.
Render recorddefault render intentThe Helm inputs and evidence links that explain how the output was produced.
Complete starting recorddefault base-variant recordThe record that connects the Helm inputs, Kubernetes objects, remaining requirements, setup work, checks, and OCI status.
Hooks, CRDs, and setup workthis page's setup sectionInstructions and decisions for hooks, CRDs, generated Secrets, setup jobs, cluster requirements, or blockers.

Choose base variant

Pick the supported Helm configuration for this chart: default, no-CRDs, existing Secret, HA, server-only, or another listed option.

Record inputs

Keep the values, namespace, release name, source lock, default render intent, full YAML output, package base, test results, and setup instructions together.

Handle chart extras

CRDs, hooks, setup jobs, external Secrets, target facts, and webhook certificates are recorded as chart-specific choices. Some are included in a base variant, some need a setup step, and some are blocked until there is a safe path.

How render intents work · All generated render intents · All base variant records

Try This Chart

Start with default. If a card says review or preparation is needed, treat that as a real limit rather than a ready install.

Package image

Exact package: oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f
publication receipt recorded · open the exact publication receipt

Readable version tag: oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2. The package is pinned so a republished tag cannot change what you get. The command below uses the exact manifest digest, so cub installer refuses different package bytes.

Check the package identity

New to cub? Install the cub CLI first. Public catalog packages pull and render anonymously, and you sign in only once a command saves or changes ConfigHub data.

cub installer inspect oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f --json

Read how each configuration was made

cub installer pull 'oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f' --work-dir ./package-review
less ./package-review/package/records/README.md

The package's records/ directory connects every base to its source choices, Helm render intent, Kubernetes objects, prerequisites, lifecycle work, and checks. These are supporting records, not Kubernetes objects.

Verify the package publisher

Run this command with cosign. It checks the expected publisher, the exact manifest digest, and the package annotations.

cosign verify --certificate-identity helm-expt-package-signer@nth-fort-499605-q5.iam.gserviceaccount.com --certificate-oidc-issuer https://accounts.google.com --annotations confighub.com/package-path=packages/longhorn/longhorn/1.11.2 --annotations confighub.com/package-sha256=b93bb32cddff28466398e8cad45bbe9e3778df84d996bc9cf64619ad7091aa95 europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f

A valid signature identifies who signed these package bytes. It does not show that the configuration is suitable for your cluster; use this page's checks and setup instructions for that decision.

Signature receipt · Sigstore bundle · How signature verification works

Public catalog package refs are published in Google Artifact Registry with anonymous read access. No ConfigHub account or Google registry login is needed for the local setup path.

Recommended first command

cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f --base default --work-dir ./longhorn-longhorn-1-11-2-default --non-interactive --namespace longhorn-system

Advanced: apply it or upload it

Run the whole sequence as one script, prerequisites included: try.sh renders and applies to Kubernetes without an account; confighub.sh renders and uploads to your ConfigHub Space.

Before you run try.sh: it changes your current kubectl context. It runs the named prerequisites and applies the rendered objects. Read it first and use a disposable test cluster. confighub.sh does not apply anything to Kubernetes.

You should see something like this

Here is what the command does. cub installer is an open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally, leaving delivery to kubectl, Argo CD or Flux. The generated scripts stop before doing any work when the plugin or kustomize is missing.

cub installer setup ...
rendered manifests written under <work-dir>
use the chart option cards below to check pass, watch, blocked, and prerequisites

Current status: Available in the catalog · Reason: Promotion was tested and recorded in ConfigHub.

After You Render It

The first command writes files and does not apply them. Read the objects and setup requirements, then choose the next job.

JobNext step
Render and inspect without applyingRun the recommended cub installer setup command above.
Run shared local configuration checkscub plugin install confighub/homebrew-tap@cub-scan-v0.7.3 --name scan
cub check --format json --output cub-check.json <work-dir>/out/manifests. The check is advisory and does not apply anything.
Apply the rendered manifests with kubectl, or publish reviewed objects as OCIPublish reviewed objects as OCI or apply the manifests with kubectl.
Save the reviewed result for a teamSave and upload the reviewed result to ConfigHub for shared history, exact diffs, and approvals.
Compare development and production, audit an exact diff, promote, or roll backBuild a promotion review or read the bounded rollback example.
Assign the configuration to clusters and operate a small fleetChoose targets, preview a wave, and inspect every result.
Check delivery limitsRead the current limits before choosing kubectl, Argo CD, or Flux.
Handle CRDs on the first installRead the CRD ordering risk and first-install guide, then check this chart's recorded owner and route.

Available Configurations

Each card is one available way to use this chart in the catalog. Some cards are runnable base variants. Others are candidate paths, derived variants, or review notes that explain what still has to be prepared.

Checks: Each card names what was checked and says whether it passed, needs review, was blocked, was not run, or was not needed.

3 matrix rows for longhorn/longhorn@1.11.2 · open the full matrix

F1 · Source chart

(source)

Source

Pinned upstream chart and version

Status
Available in the catalog
How to run
This is the upstream chart source. Choose a base card below before running the installer.
Evidence
Pinned chart source and dependency lock
Hooks/actions
No separate hook or action for this row.
Who runs actions?
No separate action runner for this row.
Next
Choose a chart configuration before rendering or deploying
Reason
This is the chart source. Choose a configuration before checking deployment or promotion
Helm outputNot neededSaved in ConfigHubNot neededLocal clusterNot neededSetup routeNot neededGitOps and OCINot neededLive Helm comparisonNot neededTwo clustersNot neededPromotionNot needed
F2a · Chart default

default

Base

Runnable base variant made from the chart defaults

Status
Available in the catalog
Helm values
effective-values.yaml
ConfigHub changes
None in this catalog base. After upload, read Unit revision history or the derived variant.
How to run
cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f --base default --work-dir ./longhorn-longhorn-1-11-2-default --non-interactive --namespace longhorn-system
Scripts
try.sh renders, settles the prerequisites in order, and applies with kubectl; confighub.sh renders and uploads to your ConfigHub Space.
Evidence
Live helm vs confighub parity
Hooks/actions
No separate hook or action for this row.
Who runs actions?
No separate action runner for this row.
Lifecycle record
The current review found no separate hook or setup route for this base. Open the full record.
Prerequisites
The support review found no separate target prerequisite for the supported default base for the recorded cub-lk-kind-vanilla test target in namespace longhorn-system, delivered from ConfigHub OCI through Argo CD. Evidence: Support decision · Target evidence.
Next
Choose the target ready base; Then record explicit security acceptance or create a hardened base before claiming a target run path
Reason
Promotion was tested and recorded in ConfigHub.
Helm outputPassedSaved in ConfigHubPassedLocal clusterPassedSetup routeNot neededGitOps and OCIPassedLive Helm comparisonPassedTwo clustersPassedPromotionPassed
F2b · Helm-rendered base

ui-ingress

Base

Runnable base variant made with different Helm values

Status
Available in the catalog
Helm values
effective-values-ui-ingress.yaml
ConfigHub changes
None in this catalog base. After upload, read Unit revision history or the derived variant.
How to run
cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f --base ui-ingress --work-dir ./longhorn-longhorn-1-11-2-ui-ingress --non-interactive --namespace longhorn-system
Scripts
try.sh renders, settles the prerequisites in order, and applies with kubectl; confighub.sh renders and uploads to your ConfigHub Space.
Evidence
Live helm vs confighub parity
Hooks/actions
No separate hook or action for this row.
Who runs actions?
No separate action runner for this row.
Lifecycle record
The current review found no separate hook or setup route for this base. Open the full record.
Prerequisites
This base has not yet been reviewed for required Secrets, CRDs, namespaces, values, storage services, external APIs, or target topology. Record what it needs, or record that nothing extra is required.
Next
Choose the target ready base; Then record explicit security acceptance or create a hardened base before claiming a target run path
Reason
Promotion was tested and recorded in ConfigHub.
Helm outputPassedSaved in ConfigHubPassedLocal clusterPassedSetup routeNot neededGitOps and OCIPassedLive Helm comparisonPassedTwo clustersPassedPromotionPassed

Local Configuration Checks

We ran cub check v0.7.3 against the exact rendered objects for every configuration below. The result is advisory: read each finding and decide whether it matters for your target.

Scanner and ruleset identity

Pattern bundle: v0.7.3
Bundle manifest: sha256:0405f6ffe21e567adf5d6a732d181c7f228194920456d046b4338baeb14de1a8
Risk catalog: sha256:7ff79a126ad99bba2505fec8b2b7711c03f50eb362141128ec1c83e27a5036ba

ConfigurationAdvisory resultExact inputCheckedEvidence
default25 advisory findings
6 critical, 17 warning, 2 info
Container does not set runAsNonRoot
Container does not disable allowPrivilegeEscalation
DaemonSet container does not set runAsNonRoot
41 objects
sha256:3befbcc593a62b2cdcfe64f738f7b092f3720b0542552cbe70ebac43a602020f
2026-08-24Full cub check result
Exact YAML
Separate Catalog review
ui-ingress27 advisory findings
7 critical, 18 warning, 2 info
Container does not set runAsNonRoot
Container does not disable allowPrivilegeEscalation
IngressClass not found when Ingress specifies ingressClassName
42 objects
sha256:51b5feac61ea772e177c605e40ebe2a3014371754b646138ebde56d7a185f983
2026-08-24Full cub check result
Exact YAML
Separate Catalog review

What this does not check: hook execution, CRD readiness, target Secrets and cloud services, admission behavior, workload health, or rollback. The linked Catalog review covers chart-specific source and operating questions. ConfigHub validation and approval are separate managed controls.

Read all shared check results and the mapping to Catalog rules.

Images This Chart Pulls

Every reference below comes from the reviewed rendered output. What you see is what the cluster pulls. These references are data: you can change a registry or pin a digest with a recorded edit, and prove the change landed in every environment.

Base variantImages
defaultdescription: Share manager image used for creating a share manager
description: The support bundle manager image
docker.io/longhornio/longhorn-manager:v1.11.2
docker.io/longhornio/longhorn-share-manager:v1.11.2
docker.io/longhornio/longhorn-ui:v1.11.2
minLength: 1
type: string
ui-ingressdescription: Share manager image used for creating a share manager
description: The support bundle manager image
docker.io/longhornio/longhorn-manager:v1.11.2
docker.io/longhornio/longhorn-share-manager:v1.11.2
docker.io/longhornio/longhorn-ui:v1.11.2
minLength: 1
type: string

First-Run Caveats

Some chart paths need a small preparation step before the cub path feels as smooth as Helm. We show those steps here so the first run does not surprise you.

CaveatWhat to do
Universal caveatsUse declared inputs or bases instead of Helm --set. For direct delivery, define pruning and field-conflict behavior. Use Argo CD or Flux when that controller path and its pruning settings are recorded for the selected preset.
Shared placeholder passwordNo shared placeholder password caveat recorded for this chart.
CRD first-orderingYes. 23 CRD object(s) are recorded. Follow the preset's recorded route: apply CRDs first and wait, use a controller-specific ordering rule, or choose the separable CRD base when one is available.

Open the all-chart adoption caveats · Helm to cub migration · cub deployment path

Advice And Current Status

Use this section to see which chart-specific guides apply, what you must provide, and what work remains.

PlaybookWhy it applies
Hook And Secret Lifecycleuses Helm hooks, generated Secret material, or webhook certificates
Target Facts And Lifecycleneeds Secrets, CRDs, APIService readiness, storage, or generated runtime state before apply
Live Parityhas live, GitOps/OCI, or two-cluster parity work
QuestionCurrent answer
User statusReady to try
Can I use it?Use the public catalog entry, then check the exact configuration and its tests.
First basedefault
Exact installer packageoci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/longhorn-longhorn:1.11.2@sha256:0617a692620540d997f515cba0ffc86c9cccd3b2b254d0a56698667cfc957b7f
Tests completedCatalog supported with live evidence (render parity 2/2; Local live 2/2; Live parity 2/2)
CoverageCovered
You must providetarget facts at variant time; mandatory chart inputs
What the tools recordexact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts
Next actionchoose the supported production base, then record explicit security acceptance or create a hardened base before claiming production support

The source data lives in chart skills and chart evidence router.

What Has Been Tested

Choose the question you care about. Not checked means this catalog has no version-specific result; it is not a pass.

QuestionStatusEvidence
Can I pull these exact package bytes again? Checked Package receipt
What does this chart contain? Checked Source lock · Chart guide · Render result · All 6 evidence links
Does the recorded render match Helm? Checked Render result 1 · Render record · Render result 2 · All 4 evidence links
Did the supplied values change the render? Not checked No linked result
Were hooks, CRDs, or setup steps checked? Not applicable No linked result
Did this version run on a local Kubernetes cluster? Checked Version results below
Did an OCI delivery through GitOps run? Checked Version results below
Did Helm and ConfigHub reach the same live result? Checked Live comparison 1 · Live comparison 2
Was the result compared on separate clusters? Checked Version results below
Was a ConfigHub promotion tested? Checked Promotion receipt 1 · Promotion receipt 2
Did this version string point at changed upstream bytes? Not checked No linked result

How much is proven, and what more testing would add: Fully proven: Render parity, ConfigHub proof, Local live, GitOps/OCI live, Live Helm-vs-ConfigHub, Two-cluster kind.

BaseReadinessRenderConfigHubLocal liveGitOps/OCILive parityTwo-cluster kind
defaultstart-herepasspasspasspasspasspass
ui-ingressstart-herepasspasspasspasspasspass

What We Tested On A Cluster

This is the result of a real run for one base variant on one recorded target setup. It does not silently extend the result to other bases or clusters.

QuestionRecorded answer
Base variantui-ingress
Target usedcub-managed kind proof cluster with target profile kind-ingress-nginx
Observed resultpass
What passedregular Helm deployment path reached the harness-defined runtime state
ConfigHub direct-apply leg reached the harness-defined runtime state
ConfigHub OCI/Argo leg reached the harness-defined workload runtime state
Helm-vs-ConfigHub semantic parity passed for the OCI/Argo leg
Argo CD reported the application Synced
Argo CD reported the application Healthy
Longhorn manager, driver deployer, engine image, UI, and CSI workloads became ready in the chart's longhorn-system namespace
Longhorn UI Ingress was rendered and applied with host longhorn.example.test and ingressClassName nginx
Longhorn UI Ingress received status.loadBalancer.ingress=localhost
What the result meansThe previous watch row was target-fit, not parity. When the proof target includes the kind-ingress-nginx profile, the UI Ingress receives a localhost address and Argo reports Healthy.
What this does not proveThis row does not prove external UI reachability through a production ingress controller.
This row does not prove production storage safety, backup/restore, replica placement, disk scheduling, or upgrade policy.
This row does not prove Longhorn can be safely installed into arbitrary namespaces.
Full review and receiptOpen the runtime review · open the live receipt

What You Must Provide

exact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts

FieldValue
Known quirksRequired values; Generated facts.; Tpl; Rbac
You must providetarget facts at variant time; mandatory chart inputs
What ConfigHub recordsexact rendered objects with render parity and receipts; cluster lookups lifted into declared target facts
Optional chart inputsNone identified in the chart facts
How optional inputs are handledNo handling rule is recorded

Hooks, CRDs, And Setup Work

Some Helm charts need work before, during, or after apply: CRDs, hooks, setup jobs, webhook certificates, migrations, generated Secrets, or checks. For each chart, the catalog should make the choice clear: include it in the base variant, split it into a separate base variant, run a setup step, use a GitOps action where evidence exists, require an existing target resource, or block it when there is no safe default.

If no route is shown, that does not prove the upstream chart has no hooks. It means the public catalog has no chart-specific action to show yet; check the matrix or send a problem chart if hook behavior should be modeled. Direct apply, Argo CD, Flux, and upgrade implementations are tracked separately. One passing implementation does not prove the others.

Modeled action areaCurrent status
Checks and policies already reviewedCRD lifecycle and upgrade policy; cluster RBAC review; hook and setup order; warning review and apply-gate policy; webhook readiness and failure policy
Why this lifecycle status is shownThe recipe records no separate Helm hook that needs its own action.
Production review recordsOpen review record 1
Open review record 2
Open review record 3
Open review record 4
Open review record 5

Before Production

A green render or local live result is not a production support claim. Production support is target-scoped and uses the support-decision artifact when present.

FieldValue
Production review statusReady for a target-specific production review
Target-scoped support decisionsupported
Supported basedefault
Target scopevanilla kind (historical receipt); namespace=longhorn-system; delivery=confighub-oci; controller=argo
Accepted limitsCRD lifecycle and upgrade policy; cluster RBAC review; hook and setup order; warning review and apply-gate policy; webhook readiness and failure policy
Open policy decisionsNone recorded for this policy checklist
Next actionKeep the target-scoped evidence fresh before using this supported scope as a production-support example; create separate backup/restore, upgrade, replica-policy, storage-class, UI-ingress, resource-hardened, or digest-pinned bases for real customer Longhorn workloads.

Source And Evidence Files

Generated from the catalog data and linked test results. Check the current evidence before using a configuration in production.