prometheus-community/kube-prometheus-stack@85.3.3 Production Packet

A repository document, rendered for the site. View source markdown.

What this command does. cub installer is a released, open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally. It does not apply those files to a cluster; use kubectl, Argo CD, or Flux for delivery. The generated scripts stop before doing any work when the plugin or kustomize is missing.

New to cub? Install the cub CLI first. You can pull and render public catalog packages without an account. Commands that save or change ConfigHub data require you to sign in.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

This generated packet summarizes the current support story for a hard chart. It is a navigation surface over existing evidence, not a new support decision.

Current Answer

FieldValue
Supported basedefault
Support decisionsupported
Production dispositionproduction-review-ready
Target scopecub-lk-kind-vanilla; namespace=monitoring; delivery=confighub-oci; controller=argo
Delivery pathconfighub-oci
Evidence count16
Strongest user-facing evidencelive-helm-vs-confighub-parity
Live summarylocal:2/2 gitops:2/2 live-parity:2/2 two-cluster:0/2

Why This Chart Is Hard

Large monitoring stack with CRDs, admission webhooks, hooks, RBAC, generated facts, extension slots, high fanout, and upgrade-sensitive operator behavior.

What A User Can Safely Do Today

Use the default base only inside the declared support scope while keeping the target-scoped evidence fresh. Treat no-crds and hardened monitoring profiles as separate support decisions.

What Remains Before Broader Production Use

Keep the target-scoped evidence fresh before using this supported scope as a production-support example.

Bases

BaseUser readinessLane summaryTarget factsCommand
defaultrender-onlyrender=pass; confighub=pass; local=pass; gitops=pass; live-parity=pass; two-cluster=missingrequired Secret monitoring/kube-prometheus-stack-admission keys cert,keycub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3 --base default --work-dir <tmp> --non-interactive --namespace monitoring
no-crdsrender-onlyrender=pass; confighub=pass; local=pass; gitops=pass; live-parity=pass; two-cluster=missingrequired Secret monitoring/kube-prometheus-stack-admission keys cert,key; required CRD alertmanagerconfigs.monitoring.coreos.com; required CRD alertmanagers.monitoring.coreos.com; required CRD podmonitors.monitoring.coreos.com; required CRD probes.monitoring.coreos.com; required CRD prometheusagents.monitoring.coreos.com; required CRD prometheuses.monitoring.coreos.com; required CRD prometheusrules.monitoring.coreos.com; required CRD scrapeconfigs.monitoring.coreos.com; required CRD servicemonitors.monitoring.coreos.com; required CRD thanosrulers.monitoring.coreos.comcub installer setup --pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/prometheus-community-kube-prometheus-stack:85.3.3 --base no-crds --work-dir <tmp> --non-interactive --namespace monitoring

Quirks And Inputs

FieldValue
Quirks surfacedhooks;crds;generated-secrets;existing-secret;webhooks;extension-slots;install-vs-upgrade-divergence;required-values;lookup;generated-facts;tpl;capabilities;rbac;storage
User must providean existing Secret for some bases (NOT built - chart ships no Secret toggle); a StorageClass / storage decision; a CRD ownership choice (crds vs no-crds base); webhook/cert readiness at delivery time; target facts at variant time; mandatory chart inputs
ConfigHub / installer absorbsexact rendered objects with render parity and receipts; generated Secrets separated out of the published artifact; CRD handling split into explicit bases; hooks classified and routed (not silently executed); extension slots routed to reviewed bases; install-vs-upgrade render divergence captured per revision; cluster lookups lifted into declared target facts
Extension slot routenone recorded

Decision Details

DecisionState
Image policymutable-image-exception-accepted-for-target-scope
Scan policysecurity-accepted-for-target-scope
Lifecycle policylifecycle-observed-for-proof-scope
Target factsno-unresolved-target-prerequisite-in-candidate-base
Live evidencefresh-target-evidence-passed

Regenerate:

npm run hard-charts:packets
npm run hard-charts:packets:verify