Kube Prometheus Stack lifecycle route proof

A repository document, rendered for the site. View source markdown.

New to cub? Install the cub CLI first. You can pull and render public catalog packages without an account. Commands that save or change ConfigHub data require you to sign in.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

These tests install kube-prometheus-stack 85.3.3 from its local cub installer package. The package contains the checked Kubernetes objects plus the CRDs and admission-webhook work that regular Helm runs around them.

Both catalog bases were tested on new kind clusters. Each package output matched its committed catalog render. The runner then applied ten CRDs, created the admission certificate, applied the workload, patched the webhooks, checked the running system, and removed the temporary Jobs and RBAC objects.

BaseChecked chart objectsEstablished CRDsReady workloadsResultEvidence
default124106passreceipt
no-crds114106passreceipt

What this proves

The package can perform this chart's fresh-install work in the recorded order for both catalog bases. It uses the chart's own certificate and patch Jobs. The checked manifest set is unchanged.

What remains

default

RouteDirect resultAutomaticWhat happened
crds-firstpassyes, in the direct scriptApplied ten CRDs and waited for Established before dependent objects.
postsync-check-or-observationpassyes, in the direct scriptRan the chart's admission-patch Job after the webhook objects existed.
preflight-or-presyncpassyes, in the direct scriptRan the chart's admission-create Job and observed the ca, cert, and key Secret.
preserve-cleanup-policypassyes, in the direct scriptRemoved the successful hook Jobs and their temporary RBAC support objects.
preserve-orderingpassyes, in the direct scriptExecuted CRDs, certificate creation, ordinary objects, and webhook patching in order.
target-facts-or-preflightpassyes, in the direct scriptCreated the chart-required admission Secret through the recorded pre-install Job.
upgrade-action-with-receiptnot-runnoThis receipt covers a fresh install only; chart upgrade behavior remains unproved.
webhook-readiness-observationpassyes, in the direct scriptObserved three matching CA bundles, a ready operator endpoint, and a successful server dry-run.
Workload kindNameResult
daemonsetkube-prometheus-stack-prometheus-node-exporterpass
deploymentkube-prometheus-stack-grafanapass
deploymentkube-prometheus-stack-kube-state-metricspass
deploymentkube-prometheus-stack-operatorpass
statefulsetalertmanager-kube-prometheus-stack-alertmanagerpass
statefulsetprometheus-kube-prometheus-stack-prometheuspass

Receipt: runs/kps-lifecycle-route-proof/receipt.yaml.

no-crds

RouteDirect resultAutomaticWhat happened
crds-firstpassyes, in the direct scriptApplied ten CRDs and waited for Established before dependent objects.
postsync-check-or-observationpassyes, in the direct scriptRan the chart's admission-patch Job after the webhook objects existed.
preflight-or-presyncpassyes, in the direct scriptRan the chart's admission-create Job and observed the ca, cert, and key Secret.
preserve-cleanup-policypassyes, in the direct scriptRemoved the successful hook Jobs and their temporary RBAC support objects.
preserve-orderingpassyes, in the direct scriptExecuted CRDs, certificate creation, ordinary objects, and webhook patching in order.
target-facts-or-preflightpassyes, in the direct scriptCreated the chart-required admission Secret through the recorded pre-install Job.
upgrade-action-with-receiptnot-runnoThis receipt covers a fresh install only; chart upgrade behavior remains unproved.
webhook-readiness-observationpassyes, in the direct scriptObserved three matching CA bundles, a ready operator endpoint, and a successful server dry-run.
Workload kindNameResult
daemonsetkube-prometheus-stack-prometheus-node-exporterpass
deploymentkube-prometheus-stack-grafanapass
deploymentkube-prometheus-stack-kube-state-metricspass
deploymentkube-prometheus-stack-operatorpass
statefulsetalertmanager-kube-prometheus-stack-alertmanagerpass
statefulsetprometheus-kube-prometheus-stack-prometheuspass

Receipt: runs/kps-lifecycle-route-proof/no-crds-receipt.yaml.