Master Catalog Matrix

A repository document, rendered for the site. View source markdown.

What this command does. cub installer is a released, open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally. It does not apply those files to a cluster; use kubectl, Argo CD, or Flux for delivery. The generated scripts stop before doing any work when the plugin or kustomize is missing.

Generated at: 2026-07-30T12:38:02.000Z UTC · source: committed helm-expt evidence for this rendered repository document.

ONE view of the whole catalog: one row per chart/version/catalog layer, including upstream sources, real installer bases, candidate paths, and downstream ConfigHub-derived variants. The translation attributes and per-lane status are joined from the committed sources below. This file invents no new truth - every cell comes from a source the verifier checks this view against.

Three renderings of the same rows: this summary (GitHub), matrix.csv for spreadsheet import (CSV carries words, not colors), and matrix.html - open it in a browser for the literal red/green/grey colored cells.

Legend

IconMeaning
✅yes / pass
⚠️watch - passing with a recorded caution
❌no / blocked
⬜not yet run - absence of evidence, not a failure
-not applicable - this lane does not apply to this row

Deferred accepted means the cell already has an honest disposition, usually watch or not applicable. It stays visible, but it is not where live-run time should be spent until the product scope changes.

Lane columns: R render parity (helm template vs installer setup) · C ConfigHub upload + scan + safe ops · L local kind apply · Y explicit lifecycle observation · G ConfigHub OCI + Argo live · P live Helm-vs-ConfigHub dual parity · K two-cluster kind parity · V server-side ConfigHub variant promotion. Hooks column: source hook count, disposition route, live-rehearsal status. Route is the generated lifecycle route/off-ramp contract: ✅ all route rows observed, ⚠️ route/executor named with cautions, ⬜ route work still todo, - no route row applies. unrouted ⚠️ marks a chart whose source scan flags hooks but that has no hook-disposition row yet; (from @x.y.z) marks chart-family evidence taken from a different chart version's disposition row.

Current Status

MetricValue
Chart versions110
Matrix rows389
F1 source / F2 base / candidate / F4 derived rows110 / 199 / 67 / 13
Layer rowsF1:110 / F2a:95 / F2b:104 / F2c:33 / F3:34 / F4a:7 / F4b:6
Lane cells ✅ / ⚠️ / ❌ / ⬜ / -986 / 107 / 119 / 75 / 1436
Base/derived rows with the complete core lane set131
Rows with a target run decision26
Target run decisions (runs / superseded / blocked-or-rejected)22 / 2 / 2
Server-side variant promotion (proven / watch / todo / blocked / n/a)167 / 29 / 1 / 2 / 190
Lifecycle route contracts (observed / watch / todo / n/a)12 / 0 / 2 / 375
Render-intent lifecycle records (attached / gap / no separate route)12 / 3 / 184
Render-intent prerequisite records (attached / gap / none explicitly required)67 / 132 / 0
Hook-flagged variants with no disposition row (unrouted)0
Rows currently in the active proof queue74
Cells with deferred accepted disposition111

Chart versions in the lane matrix but not in top-100 readiness (retained candidates or version drift): argo-cd/argo-cd@9.5.17, bitnami/mongodb@19.0.9, bitnami/mongodb@19.1.0, bitnami/nginx@24.0.4, bitnami/nginx@25.0.0, bitnami/postgresql@18.6.10, bitnami/postgresql@18.7.0, bitnami/redis@27.0.0, prometheus-community/kube-prometheus-stack@86.1.0, prometheus-community/prometheus@29.9.0.

How To Use This Sheet

Each row is one chart/version layer: F1 source chart, F2 base variant, F3 target-prerequisite/fill candidate, or F4 downstream ConfigHub-derived variant. Use the row to answer three questions before deciding what to do next:

QuestionColumn to check
Can I try this now, promote it, or does it need more design?Use / adoption bucket
What is the strongest evidence currently available?Evidence, R/C/L/G/P/K, Core
What prevents a stronger target-run claim?Target, Scope, Gap, Next action
Where am I in the customization flow?Layer, Kind
Can downstream ConfigHub variants be promoted from this base?V, Promotion status
If a hook or lifecycle behavior exists, where does it go?Route, Hooks, lifecycle route contract
Has this exact base recorded its lifecycle work and target prerequisites?Render-intent lifecycle and target states in the CSV/HTML view
Which non-pass live row should be rerun or reviewed now?Active proof
Is this row active work, an external dependency, or deferred for now?Action

The HTML view carries these user/product columns directly: matrix.html. The CSV carries the same fields for filtering: matrix.csv. Counts below are matrix rows unless stated otherwise.

Current Product Queues

QueueRowsMeaningExamples
F1 source charts110Upstream Helm chart/version source rows. These are the starting points before any installer base is chosen.aqua/trivy-operator@0.32.1/(source), argo-cd/argo-cd@9.5.15/(source), argo-cd/argo-cd@9.5.17/(source)
Public catalog rows42Reviewed top-20 catalog rows. Use base-readiness or the per-chart catalog page to choose the easiest first base.argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, bitnami/mongodb@19.0.7/existing-secret-replicaset
Promote after review78Proof-grade rows that need catalog/product review before becoming public starting points.aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-events@2.4.21/default
Design a more useful base33Rows where plain render proof exists but the first user-facing base is not yet good enough.argo-cd/argocd-image-updater@1.2.2/default, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default, bitnami/memcached@8.5.5/default
Decide a limitation first23Rows where a product or operator boundary must be chosen before promotion.bitnami/apache@11.4.29/default, bitnami/apache@11.4.29/legacy, bitnami/contour@21.1.4/default
Complete the core proof lane81Real base or derived rows missing at least one core evidence lane: ConfigHub proof, live Kubernetes, GitOps/OCI, or live parity.argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argo-cd@9.5.17/default, argo-cd/argo-cd@9.5.17/no-crds
Active proof queue74Rows with a current non-pass live parity result and an exact rerun or review action.argo-cd/argo-cd@9.5.17/default, autoscaler/cluster-autoscaler@9.57.0/controller-default-reviewed, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default
Deferred accepted dispositions30Rows whose current non-green cells are already accepted as watch or n/a; do not spend live-run time until scope changes.argo-cd/argo-cd@9.5.17/default, argo-cd/argocd-image-updater@1.2.2/default, autoscaler/cluster-autoscaler@9.57.0/default
Derived ConfigHub variants13Downstream ConfigHub variants cloned from reviewed bases. These show environment, region, customer, or target-specific post-render customization without a Helm rerender.bitnami/nginx@24.0.2/customer-acme-prod, bitnami/nginx@24.0.2/prod-us-east, bitnami/redis@25.5.3/prod-us-east
Candidate rows67Planned F2/F3 paths from committed work-order data. These are visible product paths, not proof claims.autoscaler/cluster-autoscaler@9.57.0/default + review, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default + topology, bitnami/contour@21.1.4/legacy + review
Custom-discussion candidates56Non-default or target-specific paths where inputs, ownership, or risk must be discussed before the row becomes runnable.autoscaler/cluster-autoscaler@9.57.0/default + review, bitnami/contour@21.1.4/legacy + review, bitnami/memcached@8.5.5/storage-default-reviewed
Decide target run scope186Rows without a target run decision or target-bound receipt yet.aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-cd@9.5.15/no-crds
Investigate hard gaps117Rows with a named chart/product gap rather than a simple missing receipt.argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argocd-image-updater@1.2.2/default

Sources joined, and what this view compresses

The matrix is the variant-granularity overview, not a replacement for its sources. Per source: what is carried here, and what deliberately stays behind (follow the source link when you need it). Chart-granularity, value-path-granularity, and claim-granularity views (status dashboard, blast-radius accuracy, claims register) are different granularities, not duplicates of this one.

Source of truthCarried into the matrixStays in the source
outcome-coverage/base-outcomes.csvthe spine: variants, the five proof lanes, lifecycle observation, two-cluster kind parity (K), outcome level, core-lane completeness, recipe pathtwo_cluster_kind_parity_reason, missing_or_non_pass_lanes, evidence_notes, package_path, variant_revision
top100-readiness/readiness.csvcatalog tier, adoption bucket, quirk features, hard gap, strongest evidence, next actionworkability, user_status, per-chart lane ratios, proof_surface_rank, top500_rank, next_action_source/receipt, file paths
hook-disposition/top100-hook-dispositions.csvsource-top100 hook count, disposition, live statushook_phases, selected_route detail, evidence_status text, next_action, evidence paths, rank
hook-lifecycle/maintained-hook-queue.csvmaintained hook lifecycle fallback rows when a chart has an observed route outside the source-top100 disposition tablehook examples, route details, required receipt path, next action
hook-route-candidates/candidates.csvcandidate hook routes for charts whose hook or hook-like lifecycle work has been reviewed but not promoted to a maintained receiptpattern, phases, delete policies, dependency source, target dependencies, promotion next step
lifecycle-boundary/selected-routes.csvbase-specific hook candidate routes that have a selected route receiptreceipt evidence list, non-claim boundaries, remaining work
lifecycle-routes/routes.csvroute-contract status, route count, disposition summary, execution-mode summary, safe-as-automatic count, and chart-family evidence version when neededper-route alternatives, requirements, exact evidence/next-action text; follow the JSON/CSV route contract for agent-readable detail
production-support-decisions/decisions.csvtarget run decision and target scopedelivery_path, image/scan/lifecycle/target-fact/live-evidence sub-decisions, evidence_count, remaining_final_requirements, next_action
variant-promotion/status.csvserver-side ConfigHub promotion status, matrix value, evidence path, reason, and next actionnone; follow the source when you need the full per-row promotion route
live-helm-confighub-compare/summary.csvexact chart/version/base live GitOps/OCI and live Helm-vs-ConfigHub parity result, overriding older aggregate outcome rows when a newer receipt existsreceipt reason and path; follow the source when diagnosing the run itself
runtime-gitops/receiptsexact committed RuntimeGitOps receipt result for a chart/base, overriding stale aggregate GitOps lane values when presentcontroller logs, workload diagnostics, and target-prerequisite detail; follow the receipt when diagnosing the run itself
live-kind-parity/summary.csvexact chart/version/base two-cluster kind parity result, overriding older aggregate outcome rows when a newer receipt existssemantic parity details, reason, related lifecycle evidence, and receipt path
live-parity-rerun-plan/rerun-plan.csvactive non-pass live parity rows: current result, next step, rerun readiness, reason, support artifact, rerun commandpriority and receipt path; follow the source when diagnosing the run itself
coverage-completion-plan/actions.jsonrow-level completion action overlay: active run/fix/stage work, upstream dependency, scope decision, or deferred accepted dispositionfull cell-level completion families; follow the coverage completion plan for the exact affected cells and family ranking
../runs/derived-variant-executionreal downstream ConfigHub derived variants: source base, downstream space, clone/link/gate result, environment, region, and no-Helm-rerender prooffull command transcript, unit hash details, corrective update details, and gate counts
derived-variant-target-bound/summary.csvtarget-bound status for derived variants when a downstream variant has been reconciled through OCI/Argo and observedreceipt internals; follow the target-bound receipt when diagnosing the target run
catalog-promotion-wave2/variant-work-orders.yamlcandidate F2 base/fork rows that are explicitly not rendered yet and need recipe/package/evidence work before becoming real basesper-value detail beyond the compact inputs, blockers, and first action shown in the candidate row
useful-base-realization-wave/wave2-selection.csvcandidate F2 user-shaped base rows from the useful-base queue, including render-time knobs, target inputs, and required receiptspriority scoring internals; follow the source for full wave ordering
target-prerequisite-actions/actions.csvcandidate F3 target prerequisite/fill rows, including required facts, action kind, evidence required, and whether human review is neededduplicate lane-level rows after they are grouped by chart/base/prerequisite/action
helm-render-intents/intents.csvone lifecycle-contract state and one target-prerequisite state for every real base, plus requirement/action counts and the exact generated intentthe full route implementations, normalized prerequisite records, freshness rules, and evidence links; follow the render intent for those details

The CSV and HTML carry adoption bucket, hard gap, strongest evidence, next action, target run scope, and active proof queue details. The Markdown table below stays compact for GitHub readability; open matrix.html when you want the user/product view with those columns visible.

Matrix

ChartLayerKindVariantTierQuirksHooksRouteRCLYGPKVActionOutcomeTarget
aqua/trivy-operator@0.32.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
argo-cd/argo-cd@9.5.15F1source(source)top20------------source-lock-
F2abasedefaulttop20---✅✅✅-✅✅✅⚠️runlive-parity✅
F2bbaseno-crdstop20---✅✅❌-❌✅⬜✅stagelive-parity⬜
argo-cd/argo-cd@9.5.17F1source(source)-------------source-lock-
F2abasedefault----✅✅✅-⚠️⚠️⬜✅deferredlocal-live⬜
F2bbaseno-crds----✅⬜✅-❌✅✅⬜runlive-parity⬜
argo-cd/argo-events@2.4.21F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
argo-cd/argo-rollouts@2.40.9F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
argo-cd/argo-workflows@1.0.14F1source(source)next80-1 observed ✅----------source-lock-
F2abasedefaultnext80-1 observed ✅✅✅✅❌⬜✅✅✅✅stagelive-parity⬜
F2bbasecontroller-default-reviewednext80-1 candidate-route ⬜⬜✅✅❌⬜✅✅✅✅stagelive-parity⬜
F2bbaseminimal-crdsnext80-1 observed ✅✅✅✅✅✅✅✅✅✅-live-parity⬜
argo-cd/argocd-image-updater@1.2.2F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅⬜✅✅✅✅deferredlive-parity⬜
autoscaler/cluster-autoscaler@9.57.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅⚠️✅deferredlive-parity⬜
F2bbasecontroller-default-reviewednext80---✅✅✅-✅✅❌✅modellive-parity⬜
F3candidate reviewdefault + reviewcandidate-----------scopecandidate-plan-
autoscaler/vertical-pod-autoscaler@0.9.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅✅✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅✅✅✅✅✅-live-parity⬜
aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1F1source(source)next80tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac--✅✅❌-⚠️⚠️❌✅modelin-confighub⬜
F3candidatedefault + topologycandidatetpl;capabilities;cluster-rbac----------stagecandidate-plan-
bitnami/apache@11.4.29F1source(source)next80lookup;generated-facts;tpl;capabilities-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities--✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
bitnami/contour@21.1.4F1source(source)next80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac--✅✅❌⬜⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac1 observed ✅✅✅✅❌✅⚠️⚠️✅✅stagetwo-cluster-kind-parity⬜
F2bbaseno-crdsnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac--✅✅❌⬜⚠️⚠️❌✅imagein-confighub⬜
F3candidate reviewlegacy + reviewcandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac----------scopecandidate-plan-
bitnami/elasticsearch@22.1.6F1source(source)next80lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbasehanext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
bitnami/memcached@8.5.5F1source(source)next80lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewstorage-default-reviewedcandidatelookup;generated-facts;tpl;capabilities;stateful-storage----------modelcandidate-plan-
bitnami/mongodb@19.0.7F1source(source)top20lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2bbaseexisting-secret-replicasettop20lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅⬜✅-live-parity⬜
F2bbasestatic-passwordstop20lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅⬜⚠️runlive-parity✅
bitnami/mongodb@19.0.9F1source(source)-------------source-lock-
F2bbaseexisting-secret-replicaset----✅✅✅-⚠️⚠️⬜⚠️runlocal-live⬜
F2bbasestatic-passwords----✅✅✅-✅✅⬜✅-live-parity⬜
bitnami/mongodb@19.1.0F1source(source)-------------source-lock-
F2bbaseexisting-secret-replicaset----✅✅✅-⚠️⚠️✅⚠️runtwo-cluster-kind-parity⬜
F2bbasestatic-passwords----✅✅✅-✅✅✅⚠️runlive-parity⬜
bitnami/mysql@14.0.3F1source(source)top20lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2bbaseexisting-secrettop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasestatic-passwordstop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅✅⚠️runlive-parity✅
bitnami/nginx@24.0.2F1source(source)top20lookup;generated-facts;tpl;capabilities-----------source-lock-
F2bbaseexisting-tls-ingresstop20lookup;generated-facts;tpl;capabilities--✅✅✅-✅✅⬜✅-live-parity⬜
F2bbasehttp-clusteriptop20lookup;generated-facts;tpl;capabilities--✅✅✅-✅✅⬜✅-live-parity✅
F4bderived from http-clusteripcustomer-acme-prodderivedlookup;generated-facts;tpl;capabilities---✅--✅----target-bound-derived✅
F4bderived from http-clusteripprod-us-eastderivedlookup;generated-facts;tpl;capabilities---✅--✅----target-bound-derived✅
bitnami/nginx@24.0.4F1source(source)-------------source-lock-
F2bbaseexisting-tls-ingress----✅✅✅-⚠️⚠️⬜⚠️runlocal-live⬜
F2bbasehttp-clusterip----✅✅✅-✅✅⬜⚠️runlive-parity⬜
bitnami/nginx@25.0.0F1source(source)-------------source-lock-
F2bbaseexisting-tls-ingress----✅✅✅-⚠️⚠️✅⚠️runtwo-cluster-kind-parity⬜
F2bbasehttp-clusterip----✅✅✅-✅✅✅⚠️runlive-parity⬜
bitnami/opensearch@2.0.10F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbasehanext80---✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80---✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
bitnami/phpmyadmin@20.0.0F1source(source)next80lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
F2ccandidate reviewweb-ui-existing-secretcandidatelookup;generated-facts;tpl;capabilities;stateful-storage----------modelcandidate-plan-
bitnami/postgresql@18.6.7F1source(source)top20lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2bbaseexisting-secrettop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅⬜✅-live-parity⬜
F2bbasestatic-passwordstop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅⬜⚠️runlive-parity✅
bitnami/postgresql@18.6.10F1source(source)-------------source-lock-
F2bbaseexisting-secret----✅✅✅-✅✅⬜⚠️runlive-parity⬜
F2bbasestatic-passwords----✅✅✅-✅✅⬜✅-live-parity⬜
bitnami/postgresql@18.7.0F1source(source)-------------source-lock-
F2bbaseexisting-secret----✅✅✅-✅✅✅⚠️runlive-parity⬜
F2bbasestatic-passwords----✅✅✅-✅✅✅⚠️runlive-parity⬜
bitnami/rabbitmq@16.0.14F1source(source)top20lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2bbaseexisting-secrettop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasestatic-passwordstop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅✅⚠️runlive-parity✅
bitnami/redis@25.5.3F1source(source)top20lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaulttop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅⬜✅-live-parity✅
F2bbasereuse-existing-secrettop20lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-✅✅⬜✅-live-parity⬜
F4aderived from defaultprod-us-eastderivedlookup;generated-facts;tpl;capabilities;stateful-storage---✅--⬜---runderived-intended-state⬜
F4bderived from defaultstaging-eu-westderivedlookup;generated-facts;tpl;capabilities;stateful-storage---✅--❌---stagederived-intended-state❌
bitnami/redis@27.0.0F1source(source)-------------source-lock-
F2abasedefault----✅✅✅-✅✅✅⚠️runlive-parity⬜
F2bbasereuse-existing-secret----✅✅✅-✅✅✅⚠️runlive-parity⬜
bitnami/spark@10.0.3F1source(source)next80lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbasehanext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
bitnami/zookeeper@13.8.7F1source(source)next80lookup;generated-facts;tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbasehanext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbaselegacynext80lookup;generated-facts;tpl;capabilities;stateful-storage--✅✅✅-⚠️⚠️❌✅imagelocal-live⬜
cloudnative-pg/cloudnative-pg@0.28.2F1source(source)next80generated-facts;tpl;crds;cluster-rbac;webhooks-----------source-lock-
F2abasedefaultnext80generated-facts;tpl;crds;cluster-rbac;webhooks--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80generated-facts;tpl;crds;cluster-rbac;webhooks--✅✅❌⬜✅✅✅✅stagelive-parity⬜
coredns/coredns@1.45.2F1source(source)next80generated-facts;tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80generated-facts;tpl;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewcontroller-default-reviewedcandidategenerated-facts;tpl;capabilities;cluster-rbac----------modelcandidate-plan-
crossplane-stable/crossplane@2.3.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
descheduler/descheduler@0.36.0F1source(source)next80tpl;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewcluster-metrics-readonlycandidatetpl;cluster-rbac----------modelcandidate-plan-
dex/dex@0.24.0F1source(source)next80tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F2ccandidate reviewweb-ui-existing-secretcandidatetpl;capabilities;cluster-rbac----------modelcandidate-plan-
F3candidate reviewdefault + reviewcandidatetpl;capabilities;cluster-rbac----------scopecandidate-plan-
elastic/eck-operator@3.4.0F1source(source)next80tpl;capabilities;cluster-rbac;webhooks;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbasehanext80tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
elastic/filebeat@8.5.1F1source(source)next80tpl;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;cluster-rbac--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F2bbasenode-or-cluster-collectornext80tpl;cluster-rbac--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F3candidate reviewdefault + reviewcandidatetpl;cluster-rbac----------scopecandidate-plan-
F3candidatedefault + secretcandidatetpl;cluster-rbac----------stagecandidate-plan-
F3candidate reviewnode-or-cluster-collector + external-apicandidatetpl;cluster-rbac----------scopecandidate-plan-
F3candidate reviewnode-or-cluster-collector + reviewcandidatetpl;cluster-rbac----------scopecandidate-plan-
elastic/kibana@8.5.1F1source(source)next80tpl-----------source-lock-
F2abasedefaultnext80tpl--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F2ccandidate reviewweb-ui-existing-secretcandidatetpl----------modelcandidate-plan-
F3candidate reviewdefault + external-apicandidatetpl----------scopecandidate-plan-
F3candidate reviewdefault + reviewcandidatetpl----------scopecandidate-plan-
elastic/logstash@8.5.1F1source(source)next80tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasehanext80tpl;capabilities;stateful-storage--✅✅❌-✅✅✅✅stagelive-parity⬜
elastic/metricbeat@8.5.1F1source(source)next80tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac;stateful-storage--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F3candidate reviewdefault + reviewcandidatetpl;capabilities;cluster-rbac;stateful-storage----------scopecandidate-plan-
F3candidatedefault + secretcandidatetpl;capabilities;cluster-rbac;stateful-storage----------stagecandidate-plan-
external-dns/external-dns@1.21.1F1source(source)next80tpl;crds;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;crds;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbasedry-run-txt-registrynext80tpl;crds;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80tpl;crds;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2ccandidate reviewcloudflare-existing-secretcandidatetpl;crds;cluster-rbac----------modelcandidate-plan-
F2ccandidate reviewroute53-irsacandidatetpl;crds;cluster-rbac----------modelcandidate-plan-
external-secrets/external-secrets@2.5.0F1source(source)top20------------source-lock-
F2abasedefaulttop20---✅✅✅✅❌✅✅⚠️runlive-parity✅
F2bbaseno-crdstop20---✅✅✅✅❌✅✅✅-live-parity⬜
fairwinds-stable/goldilocks@10.3.0F1source(source)next80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2ccandidate reviewcluster-metrics-readonlycandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks----------modelcandidate-plan-
fairwinds-stable/vpa@4.11.0F1source(source)next80lookup;tpl;capabilities;crds;cluster-rbac;webhooks-----------source-lock-
F2abasedefaultnext80lookup;tpl;capabilities;crds;cluster-rbac;webhooks--✅✅✅✅✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80lookup;tpl;capabilities;crds;cluster-rbac;webhooks--✅✅✅✅✅✅✅✅-live-parity⬜
falcosecurity/falco@9.0.0F1source(source)next80lookup;tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewnode-or-cluster-collectorcandidatelookup;tpl;capabilities;cluster-rbac;stateful-storage----------modelcandidate-plan-
falcosecurity/falcosidekick@0.13.1F1source(source)next80capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
fluent/fluent-bit@0.57.6F1source(source)next80tpl;capabilities;hooks;cluster-rbac1 observed ✅----------source-lock-
F2abasedefaultnext80tpl;capabilities;hooks;cluster-rbac1 observed ✅✅✅✅✅✅✅✅✅✅-live-parity⬜
F2ccandidate reviewnode-or-cluster-collectorcandidatetpl;capabilities;hooks;cluster-rbac----------modelcandidate-plan-
fluent/fluentd@0.5.3F1source(source)next80tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
F2ccandidate reviewnode-or-cluster-collectorcandidatetpl;capabilities;cluster-rbac;stateful-storage----------modelcandidate-plan-
F3candidate reviewdefault + reviewcandidatetpl;capabilities;cluster-rbac;stateful-storage----------scopecandidate-plan-
gatekeeper/gatekeeper@3.22.2F1source(source)next80capabilities;hooks;crds;cluster-rbac;webhooks4 observed ✅----------source-lock-
F2abasedefaultnext80capabilities;hooks;crds;cluster-rbac;webhooks4 observed ✅✅✅✅✅✅✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80capabilities;hooks;crds;cluster-rbac;webhooks4 observed ✅-✅✅✅⬜✅✅✅✅deferredlive-parity⬜
gitlab/gitlab-runner@0.89.0F1source(source)next80generated-facts;tpl;capabilities-----------source-lock-
F2abasedefaultnext80generated-facts;tpl;capabilities--✅✅❌-⚠️⚠️⚠️✅stagein-confighub⬜
F2ccandidate reviewrunner-existing-secretcandidategenerated-facts;tpl;capabilities----------modelcandidate-plan-
F3candidate reviewdefault + external-apicandidategenerated-facts;tpl;capabilities----------scopecandidate-plan-
F3candidate reviewdefault + reviewcandidategenerated-facts;tpl;capabilities----------scopecandidate-plan-
grafana/alloy@1.8.2F1source(source)next80tpl;capabilities;crds;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;crds;cluster-rbac;stateful-storage--✅✅✅⬜✅✅✅❌runlive-parity⬜
F2bbaseno-crdsnext80tpl;capabilities;crds;cluster-rbac;stateful-storage--✅✅✅⬜✅✅✅❌runlive-parity⬜
grafana/grafana@10.5.15F1source(source)top20------------source-lock-
F2bbaseexisting-secret-ingresstop20---✅✅✅-✅✅✅✅-live-paritysuperseded
F2bbasestatic-passwordstop20---✅✅✅-✅✅✅⚠️runlive-parity⬜
F4aderived from static-passwordscustomer-acme-prodderived----✅--⬜---runderived-intended-state⬜
F4aderived from static-passwordsprod-us-eastderived----✅--⬜---runderived-intended-state⬜
grafana/loki@7.0.0F1source(source)top20lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage-----------source-lock-
F2bbasesimple-scalable-miniotop20lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbasesingle-binary-filesystemtop20lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅⚠️runlive-parity✅
grafana/promtail@6.17.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
grafana/pyroscope@2.0.2F1source(source)next80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage--✅✅✅⬜⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
F2bbasehanext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage--✅✅❌⬜⚠️⚠️❌✅modelin-confighub⬜
F2bbaseno-crdsnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage--✅✅✅⬜⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
F3candidate reviewdefault + reviewcandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage----------scopecandidate-plan-
F3candidate reviewha + reviewcandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage----------scopecandidate-plan-
F3candidate reviewno-crds + reviewcandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage----------scopecandidate-plan-
grafana/rollout-operator@0.49.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅❌-✅✅✅✅stagelive-parity⬜
grafana/tempo@1.24.4F1source(source)top20------------source-lock-
F2bbaselocal-persistenttop20---✅✅✅-✅✅✅⚠️runlive-paritysuperseded
F2bbases3-query-observabilitytop20---✅✅❌-⚠️⚠️✅✅stagetwo-cluster-kind-parity⬜
haproxytech/kubernetes-ingress@1.52.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
hashicorp/consul@2.0.0F1source(source)top20tpl;capabilities;cluster-rbac;webhooks;stateful-storage-----------source-lock-
F2bbasedefault-control-planetop20tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅⚠️runlive-parity✅
F2bbasesecure-mesh-existing-secretstop20tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅❌⬜❌⚠️✅✅stagetwo-cluster-kind-parity⬜
hashicorp/terraform@1.1.2F1source(source)next80crds-----------source-lock-
F2abasedefaultnext80crds--✅✅❌⬜⚠️⚠️❌✅modelin-confighub⬜
F2bbaseno-crdsnext80crds--✅✅❌⬜⚠️⚠️❌✅stagein-confighub⬜
F3candidate reviewdefault + reviewcandidatecrds----------scopecandidate-plan-
F3candidate reviewno-crds + reviewcandidatecrds----------scopecandidate-plan-
F3candidateno-crds + secretcandidatecrds----------stagecandidate-plan-
hashicorp/vault@0.32.0F1source(source)top20tpl;capabilities;cluster-rbac;webhooks;stateful-storage-----------source-lock-
F2abasedefaulttop20tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅✅deferredlive-parity❌
F2bbasedev-modetop20tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅✅⚠️runlive-parity⬜
F2bbaseha-raft-uitop20tpl;capabilities;cluster-rbac;webhooks;stateful-storage--✅✅❌⬜⚠️⚠️✅✅stagetwo-cluster-kind-parity⬜
F3candidate reviewha-raft-ui + reviewcandidatetpl;capabilities;cluster-rbac;webhooks;stateful-storage----------scopecandidate-plan-
F4aderived from defaultregulated-prod-us-eastderivedtpl;capabilities;cluster-rbac;webhooks;stateful-storage---✅--⬜---runderived-intended-state⬜
F4aderived from defaultstaging-us-eastderivedtpl;capabilities;cluster-rbac;webhooks;stateful-storage---✅--⬜---runderived-intended-state⬜
ingress-nginx/ingress-nginx@4.15.1F1source(source)top20tpl;capabilities;cluster-rbac;webhooks-----------source-lock-
F2abasedefaulttop20tpl;capabilities;cluster-rbac;webhooks--✅✅✅✅✅✅✅✅-live-parity⬜
F2bbaseadmission-disabledtop20tpl;capabilities;cluster-rbac;webhooks--✅✅✅⬜⚠️✅✅✅deferredlive-parity⬜
F2bbaseinternal-clusteriptop20tpl;capabilities;cluster-rbac;webhooks--✅✅✅⬜✅✅✅⚠️runlive-parity✅
istio/gateway@1.30.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
F2bbasecontroller-default-reviewednext80---✅✅❌-⚠️⚠️❌✅imagein-confighub⬜
istio/istiod@1.30.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-❌❌❌✅stagein-confighub⬜
F2ccandidate reviewexternal-cacandidate-----------modelcandidate-plan-
F2ccandidateminimal-profilecandidate-----------modelcandidate-plan-
F2ccandidate reviewrevisioned-control-planecandidate-----------modelcandidate-plan-
F3candidatedefault + namespacecandidate-----------stagecandidate-plan-
jaegertracing/jaeger@4.8.0F1source(source)next80lookup;generated-facts;tpl;capabilities-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewnode-or-cluster-collectorcandidatelookup;generated-facts;tpl;capabilities----------modelcandidate-plan-
jaegertracing/jaeger-operator@2.57.0F1source(source)next80crds;webhooks-----------source-lock-
F2abasedefaultnext80crds;webhooks--✅✅✅⬜❌❌❌✅stagelocal-live⬜
F2bbaseno-crdsnext80crds;webhooks--✅✅❌⬜✅✅❌✅stagelive-parity⬜
F3candidate reviewdefault + crdcandidatecrds;webhooks----------scopecandidate-plan-
F3candidate reviewno-crds + crdcandidatecrds;webhooks----------scopecandidate-plan-
jetstack/cert-manager@v1.20.2F1source(source)top20------------source-lock-
F2abasedefaulttop20---✅✅✅✅✅✅✅✅-live-parity⬜
F2bbasecrds-enabledtop20---✅✅✅✅✅✅✅⚠️runlive-parity✅
jetstack/cert-manager-csi-driver@v0.14.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
jetstack/trust-manager@v0.22.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-⚠️⚠️✅✅stagetwo-cluster-kind-parity⬜
F2bbaseno-crdsnext80---✅✅❌-✅✅✅✅stagelive-parity⬜
kedacore/keda@2.19.0F1source(source)next80tpl;capabilities;crds;cluster-rbac;webhooks-----------source-lock-
F2abasedefaultnext80tpl;capabilities;crds;cluster-rbac;webhooks--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80tpl;capabilities;crds;cluster-rbac;webhooks1 observed ✅✅✅✅✅✅✅✅✅✅-live-parity⬜
kyverno/kyverno@3.8.1F1source(source)next80lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage8 observed ✅----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage8 observed ✅✅✅✅✅✅✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage8 observed ✅✅✅✅✅⬜✅✅✅✅runlive-parity⬜
F2ccandidate reviewdefault-admissioncandidatelookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage----------modelcandidate-plan-
F2ccandidate reviewexternal-crdscandidatelookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage----------modelcandidate-plan-
F2ccandidate reviewha-admission-reportscandidatelookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage----------modelcandidate-plan-
kyverno/kyverno-policies@3.8.0F1source(source)next80lookup;tpl-----------source-lock-
F2abasedefaultnext80lookup;tpl--✅✅✅-⚠️⚠️⚠️✅deferredlocal-live⬜
linkerd/linkerd-crds@1.8.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
longhorn/longhorn@1.11.2F1source(source)top20generated-facts;tpl;cluster-rbac-----------source-lock-
F2abasedefaulttop20generated-facts;tpl;cluster-rbac--✅✅✅-✅✅✅⚠️runlive-parity✅
F2bbaseui-ingresstop20generated-facts;tpl;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
metrics-server/metrics-server@3.13.0F1source(source)top20lookup;generated-facts;capabilities;cluster-rbac-----------source-lock-
F2abasedefaulttop20lookup;generated-facts;capabilities;cluster-rbac--✅✅✅-✅✅✅⚠️runlive-parity✅
F2bbaseexternal-tls-catop20lookup;generated-facts;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
F4bderived from defaultprod-us-eastderivedlookup;generated-facts;capabilities;cluster-rbac---✅--✅----target-bound-derived✅
minio-operator/operator@7.1.1F1source(source)next80cluster-rbac-----------source-lock-
F2abasedefaultnext80cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2ccandidate reviewstorage-default-reviewedcandidatecluster-rbac----------modelcandidate-plan-
minio-operator/tenant@7.1.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
nats/nack@0.34.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅❌✅modellive-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
nats/nats@2.14.0F1source(source)next80tpl-----------source-lock-
F2abasedefaultnext80tpl--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasehanext80tpl--✅✅✅-✅✅❌✅modellive-parity⬜
nats/surveyor@0.20.9F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F2bbasedefault-reviewednext80---✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F3candidate reviewdefault + reviewcandidate-----------scopecandidate-plan-
F3candidate reviewdefault-reviewed + external-apicandidate-----------scopecandidate-plan-
F3candidate reviewdefault-reviewed + reviewcandidate-----------scopecandidate-plan-
nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18F1source(source)next80capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80capabilities;cluster-rbac;stateful-storage--✅✅❌-❌❌❌✅modelin-confighub⬜
F2ccandidate reviewstorage-default-reviewedcandidatecapabilities;cluster-rbac;stateful-storage----------modelcandidate-plan-
F3candidate reviewdefault + reviewcandidatecapabilities;cluster-rbac;stateful-storage----------scopecandidate-plan-
open-telemetry/opentelemetry-operator@0.114.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-⚠️⚠️✅✅stagetwo-cluster-kind-parity⬜
F2bbaseno-crdsnext80---✅✅❌-✅✅✅✅stagelive-parity⬜
opencost/opencost@2.5.21F1source(source)next80tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac;stateful-storage--✅✅❌-⚠️⚠️❌✅stagein-confighub⬜
F2ccandidate reviewcluster-metrics-readonlycandidatetpl;capabilities;cluster-rbac;stateful-storage----------modelcandidate-plan-
F3candidate reviewdefault + reviewcandidatetpl;capabilities;cluster-rbac;stateful-storage----------scopecandidate-plan-
percona/pg-operator@3.0.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
percona/psmdb-operator@1.22.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
percona/pxc-operator@1.19.1F1source(source)next80lookup;crds;cluster-rbac-----------source-lock-
F2abasedefaultnext80lookup;crds;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80lookup;crds;cluster-rbac--✅✅❌⬜✅✅✅✅stagelive-parity⬜
projectcalico/tigera-operator@v3.32.0F1source(source)next80lookup;hooks;cluster-rbac1 observed ✅----------source-lock-
F2abasedefaultnext80lookup;hooks;cluster-rbac1 observed ✅✅✅✅❌✅✅✅✅✅runlive-parity⬜
F2ccandidate reviewcontroller-default-reviewedcandidatelookup;hooks;cluster-rbac----------modelcandidate-plan-
prometheus-community/alertmanager@1.37.0F1source(source)next80tpl;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasehanext80tpl;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
prometheus-community/kube-prometheus-stack@85.3.3F1source(source)top20lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2 observed ✅----------source-lock-
F2abasedefaulttop20lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2 observed ✅⬜✅✅✅✅✅✅⬜✅stagelive-parity✅
F2bbaseno-crdstop20lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2 observed ✅✅✅✅✅✅✅✅⬜✅-live-parity⬜
prometheus-community/kube-prometheus-stack@86.1.0F1source(source)--2 observed ✅ (from @85.3.0)----------source-lock-
F2abasedefault--2 observed ✅ (from @85.3.0)✅✅✅✅✅✅✅❌✅modellive-parity⬜
F2bbaseno-crds--2 observed ✅ (from @85.3.0)✅✅✅✅✅✅✅✅✅-live-parity⬜
prometheus-community/kube-state-metrics@7.4.0F1source(source)next80generated-facts;tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaultnext80generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasecluster-metrics-readonlynext80generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
prometheus-community/prometheus@29.8.0F1source(source)top20generated-facts;tpl;capabilities;cluster-rbac;stateful-storage-----------source-lock-
F2abasedefaulttop20generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅⬜✅-live-parity⬜
F2bbaseserver-only-ephemeraltop20generated-facts;tpl;capabilities;cluster-rbac;stateful-storage--✅✅✅-✅✅⬜⚠️runlive-parity✅
F4aderived from defaultprod-us-eastderivedgenerated-facts;tpl;capabilities;cluster-rbac;stateful-storage---✅--⬜---runderived-intended-state⬜
F4aderived from defaultstaging-eu-westderivedgenerated-facts;tpl;capabilities;cluster-rbac;stateful-storage---✅--⬜---runderived-intended-state⬜
F4bderived from server-only-ephemeralprod-us-eastderivedgenerated-facts;tpl;capabilities;cluster-rbac;stateful-storage---✅--✅----target-bound-derived✅
F4bderived from server-only-ephemeralstaging-eu-westderivedgenerated-facts;tpl;capabilities;cluster-rbac;stateful-storage---✅--✅----target-bound-derived✅
prometheus-community/prometheus@29.9.0F1source(source)-------------source-lock-
F2abasedefault----✅✅✅-⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
F2bbaseserver-only-ephemeral----✅✅✅-✅✅✅✅-live-parity⬜
prometheus-community/prometheus-adapter@5.3.0F1source(source)next80tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac--✅✅❌⬜❌❌❌✅modelin-confighub⬜
F2bbaseapiservice-v1-capabilitynext80tpl;capabilities;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbasecluster-metrics-readonlynext80tpl;capabilities;cluster-rbac--✅✅❌⬜❌❌❌✅modelin-confighub⬜
F3candidatecluster-metrics-readonly + crdcandidatetpl;capabilities;cluster-rbac----------stagecandidate-plan-
F3candidatedefault + crdcandidatetpl;capabilities;cluster-rbac----------stagecandidate-plan-
prometheus-community/prometheus-blackbox-exporter@11.10.0F1source(source)next80tpl;capabilities-----------source-lock-
F2abasedefaultnext80tpl;capabilities--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasecluster-metrics-readonlynext80tpl;capabilities--✅✅✅-✅✅✅✅-live-parity⬜
prometheus-community/prometheus-node-exporter@4.55.0F1source(source)next80generated-facts;tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80generated-facts;tpl;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasecluster-metrics-readonlynext80generated-facts;tpl;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
prometheus-community/prometheus-operator-crds@29.0.0F1source(source)next80generated-facts;crds-----------source-lock-
F2abasedefaultnext80generated-facts;crds--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2ccandidate reviewcluster-metrics-readonlycandidategenerated-facts;crds----------modelcandidate-plan-
prometheus-community/prometheus-pushgateway@3.6.0F1source(source)next80tpl;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewcluster-metrics-readonlycandidatetpl;stateful-storage----------modelcandidate-plan-
rook-release/rook-ceph@v1.19.5F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅⬜✅✅✅✅deferredlive-parity⬜
rook-release/rook-ceph-cluster@v1.19.5F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-❌❌❌✅stagelocal-live⬜
F3candidatedefault + namespacecandidate-----------stagecandidate-plan-
runix/pgadmin4@1.62.0F1source(source)next80tpl;capabilities;stateful-storage-----------source-lock-
F2abasedefaultnext80tpl;capabilities;stateful-storage--✅✅✅-✅✅✅✅-live-parity⬜
F2ccandidate reviewweb-ui-existing-secretcandidatetpl;capabilities;stateful-storage----------modelcandidate-plan-
sealed-secrets/sealed-secrets@2.18.6F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbaseno-crdsnext80---✅✅✅-✅✅✅✅-live-parity⬜
secrets-store-csi-driver/secrets-store-csi-driver@1.6.0F1source(source)top20------------source-lock-
F2abasedefaulttop20---✅✅✅-✅✅✅⚠️runlive-parity✅
F2bbasesync-secret-rotationtop20---✅✅✅-✅✅✅✅-live-parity⬜
stakater/reloader@2.2.12F1source(source)next80tpl;capabilities;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
F2bbasecontroller-default-reviewednext80tpl;capabilities;cluster-rbac--✅✅✅-✅✅✅✅-live-parity⬜
strimzi/strimzi-kafka-operator@1.0.0F1source(source)next80tpl;capabilities;crds;cluster-rbac-----------source-lock-
F2abasedefaultnext80tpl;capabilities;crds;cluster-rbac--✅✅✅⬜✅✅✅✅deferredlive-parity⬜
F2bbaseno-crdsnext80tpl;capabilities;crds;cluster-rbac--✅✅❌⬜✅✅✅✅stagelive-parity⬜
traefik/traefik@40.2.0F1source(source)next80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage-----------source-lock-
F2abasedefaultnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜✅✅❌✅modellive-parity⬜
F2bbaseno-crdsnext80lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage--✅✅✅⬜⚠️⚠️✅✅deferredtwo-cluster-kind-parity⬜
F2ccandidate reviewcloud-loadbalancercandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage----------modelcandidate-plan-
F2ccandidate reviewexternal-crdscandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage----------modelcandidate-plan-
F2ccandidateinternal-clusterip-dashboard-offcandidatelookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage----------modelcandidate-plan-
velero/velero@12.0.1F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅❌-❌❌❌✅modelin-confighub⬜
F2bbaseno-crdsnext80---✅✅❌-❌❌❌✅modelin-confighub⬜
F2ccandidate reviewaws-s3-existing-secretcandidate-----------modelcandidate-plan-
F2ccandidate reviewazure-blob-existing-secretcandidate-----------modelcandidate-plan-
F2ccandidate reviewfilesystem-backup-node-agentcandidate-----------modelcandidate-plan-
F3candidateno-crds + crdcandidate-----------stagecandidate-plan-
vm/victoria-logs-single@0.12.5F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
vm/victoria-metrics-single@0.39.0F1source(source)next80------------source-lock-
F2abasedefaultnext80---✅✅✅-✅✅✅✅-live-parity⬜
F2bbasedefault-reviewednext80---✅✅✅-✅✅✅✅-live-parity⬜

Regenerate

npm run master-matrix
npm run master-matrix:verify