This generated file tracks maintained charts whose source scan found Helm hooks. Render equivalence makes hook resources explicit; it does not prove hook execution. Production support requires a lifecycle route and a lifecycle or observation receipt for that route.
Hook rows move through explicit states: inventoried, render-proven, route-selected, lifecycle-observed, or blocked. The first two states are useful evidence, but they are not hook lifecycle support. Some hooks may remain blocked until chart-specific review finds a safe route.
Current Reading
top-500 charts with Helm hooks: 54
top-100 source-scan hook rows: 11
maintained hook queue rows: 5
catalog-supported hook charts: 1
proof-grade hook charts: 4
hook route receipts present: 5/5
hook lifecycle observations present: 5/5
hook partial lifecycle observations: 0/5
hook routes awaiting observation: 0/5
hook rows still needing route receipt: 0/5
related Helm-hook lifecycle rows: 2/2
related Helm-hook lifecycle charts: 1
related lifecycle observations passing: 4/4Files
| File | Purpose |
|---|---|
source-top100-hooks.csv | Source-scan inventory of top-100 public charts where the retained scanned source row contains Helm hooks. |
maintained-hook-queue.csv | Maintained recipe/package entries whose retained source-scan row found Helm hooks and need lifecycle receipts. |
top100-hooks.csv | Legacy alias for maintained-hook-queue.csv; prefer the clearer filenames above. |
receipt-index.csv | Required receipt path and minimum checks for each hook lifecycle proof. |
Rule
A row is not hook-lifecycle-proven just because a route receipt exists. A route receipt records the selected handling for the hook. Lifecycle proof requires an execution or observation receipt with runtime outcome and freshness timestamp.
Related lifecycle observations can exist outside this hook queue when a chart-specific lane is proving runtime behavior that rendered YAML alone cannot prove. Cert-manager is the deliberate cross-lane hook case: its known startupapicheck Helm post-install hook is tracked in the lifecycle observation lane because the retained top-100 source-scan row does not carry the hook feature. External Secrets is different: the current receipts cover controller/webhook behavior in bases that do not use a Helm hook. These receipts demonstrate the lifecycle-observation pattern, not universal hook support.
Related Lifecycle Observation Lane
This lane is separate from the top100 hook queue. It proves the observation shape for CRD/webhook/controller behavior that rendered YAML alone cannot prove.
| Chart | Base | Result | Lifecycle policy | Receipt |
|---|---|---|---|---|
| jetstack/cert-manager@v1.20.2 | default | pass | startupapicheck-becomes-post-apply-api-dry-run | runs/lifecycle-observations/cert-manager-eso/jetstack-cert-manager-default/receipt.yaml |
| jetstack/cert-manager@v1.20.2 | crds-enabled | pass | startupapicheck-becomes-post-apply-api-dry-run | runs/lifecycle-observations/cert-manager-eso/jetstack-cert-manager-crds-enabled/receipt.yaml |
| external-secrets/external-secrets@2.5.0 | default | pass | no-helm-hook | runs/lifecycle-observations/cert-manager-eso/external-secrets-external-secrets-default/receipt.yaml |
| external-secrets/external-secrets@2.5.0 | no-crds | pass | no-helm-hook | runs/lifecycle-observations/cert-manager-eso/external-secrets-external-secrets-no-crds/receipt.yaml |
Maintained Hook Chart Details
| Chart | Hooks | Hook types | Route hint | Example templates |
|---|---|---|---|---|
| prometheus-community/kube-prometheus-stack@85.3.3 | 2 | post-install, post-upgrade, pre-install, pre-upgrade | preflight-or-presync;postsync-check-or-observation;upgrade-action-with-receipt;preserve-ordering;preserve-cleanup-policy;webhook-readiness-observation;target-facts-or-preflight | kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/ciliumnetworkpolicy-createSecret.yaml<br>kube-prometheus-stack/templates/prometheus-operator/admission-webhooks/job-patch/ciliumnetworkpolicy-patchWebhook.yaml |
| kyverno/kyverno@3.8.1 | 8 | post-upgrade, pre-delete, test | upgrade-action-with-receipt;delete-cleanup-policy;explicit-test-check;preserve-ordering;preserve-cleanup-policy;target-facts-or-preflight | kyverno/charts/reports-server/templates/hooks/pre-delete-api-service-cleanup.yaml<br>kyverno/templates/hooks/post-upgrade-migrate-resources.yaml |
| fluent/fluent-bit@0.57.6 | 1 | test | explicit-test-check;preserve-cleanup-policy | fluent-bit/templates/tests/test-connection.yaml |
| projectcalico/tigera-operator@v3.32.0 | 1 | pre-delete | delete-cleanup-policy;preserve-ordering;preserve-cleanup-policy;target-facts-or-preflight | tigera-operator/templates/tigera-operator/00-uninstall.yaml |
| gatekeeper/gatekeeper@3.22.2 | 4 | pre-install, pre-upgrade | preflight-or-presync;upgrade-action-with-receipt;preserve-ordering;preserve-cleanup-policy;webhook-readiness-observation | gatekeeper/templates/upgrade-crds-hook.yaml |