hashicorp/consul@2.0.0 Production Packet

What this command does. cub installer is a released, open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally. It does not apply those files to a cluster; use kubectl, Argo CD, or Flux for delivery. The generated scripts stop before doing any work when the plugin or kustomize is missing.

New to cub? Install the cub CLI first. You can pull and render public catalog packages without an account. Commands that save or change ConfigHub data require you to sign in.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

This generated packet summarizes the current support story for a hard chart. It is a navigation surface over existing evidence, not a new support decision.

Current Answer

Field	Value
Supported base	`default-control-plane`
Support decision	`supported`
Production disposition	`production-review-ready`
Target scope	cub-lk-kind-vanilla; namespace=consul; delivery=confighub-oci; controller=argo
Delivery path	`confighub-oci`
Evidence count	17
Strongest user-facing evidence	live-helm-vs-confighub-parity
Live summary	local:1/2 gitops:1/2 live-parity:1/2 two-cluster:2/2

Why This Chart Is Hard

Service-mesh control plane with TLS, ACL, gateway/UI options, storage/quorum choices, webhooks, and secret prerequisites.

What A User Can Safely Do Today

Use default-control-plane for the declared proof scope. Secure mesh, TLS, ACL, gateway, UI, production quorum, and digest-pinned paths need separate bases.

What Remains Before Broader Production Use

Keep the target-scoped evidence fresh before using this supported scope as a production-support example; create separate secure-mesh, TLS, ACL, gateway, UI, external-CRD, production-quorum, hardening, and digest-pinned bases for real customer Consul workloads.

Bases

Base	User readiness	Lane summary	Target facts	Command
`default-control-plane`	start-here	render=pass; confighub=pass; local=pass; gitops=pass; live-parity=pass; two-cluster=pass	none	`cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0 --base default-control-plane --work-dir <tmp> --non-interactive --namespace consul`
`secure-mesh-existing-secrets`	runtime-watch	render=pass; confighub=pass; local=fail; gitops=watch; live-parity=watch; two-cluster=pass	required Secret consul/consul-ca-cert keys tls.crt; required Secret consul/consul-server-cert keys tls.crt,tls.key; required Secret consul/consul-gossip-encryption-key keys key; required Secret consul/consul-bootstrap-acl-token keys token; topology minSchedulableNodes=3	`cub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/hashicorp-consul:2.0.0 --base secure-mesh-existing-secrets --work-dir <tmp> --non-interactive --namespace consul`

Quirks And Inputs

Field	Value
Quirks surfaced	webhooks;extension-slots;install-vs-upgrade-divergence;required-values;tpl;capabilities;rbac;storage
User must provide	a StorageClass / storage decision; webhook/cert readiness at delivery time; mandatory chart inputs
ConfigHub / installer absorbs	exact rendered objects with render parity and receipts; extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision
Extension slot route	none recorded

Decision Details

Decision	State
Image policy	`mutable-image-exception-accepted-for-target-scope`
Scan policy	`default-control-plane-resource-policy-accepted-for-target-scope`
Lifecycle policy	`lifecycle-observed-for-proof-scope`
Target facts	`no-unresolved-target-prerequisite-in-candidate-base`
Live evidence	`fresh-target-evidence-passed`

Evidence Links

Regenerate:

npm run hard-charts:packets
npm run hard-charts:packets:verify