Derived from each chart's real control-points.yaml using the per-chart-recipes.md method: a standard variant is recommended only where a detected behavior calls for it (no padding), minus the variants the chart already ships. This scopes the wave-based variant build; it does not author the variants (those are bespoke per chart - see data/catalog-promotion-wave2/variant-work-orders.yaml for the worked shape).
Headline
charts: 107
charts needing variant work: 65
charts already variant-complete: 42
total variants to build: 78Build volume by dimension (highest-leverage first)
existing-secret: 51 chartsha: 14 chartsno-crds: 9 chartsingress-tls: 3 chartstls: 1 charts
Per-chart backlog (charts needing work)
| Chart | Has | Build next |
|---|---|---|
aqua/trivy-operator@0.32.1 | 2 | existing-secret |
argo-cd/argo-cd@9.5.15 | 2 | existing-secret, ha |
argo-cd/argo-cd@9.5.17 | 2 | existing-secret, ha |
argo-cd/argocd-image-updater@1.2.2 | 1 | existing-secret, no-crds |
autoscaler/vertical-pod-autoscaler@0.9.0 | 2 | existing-secret |
bitnami/apache@11.4.29 | 1 | existing-secret |
bitnami/contour@21.1.4 | 2 | existing-secret |
bitnami/elasticsearch@22.1.6 | 2 | existing-secret |
bitnami/memcached@8.5.5 | 1 | existing-secret |
bitnami/mysql@14.0.3 | 2 | ha |
bitnami/nginx@24.0.2 | 2 | existing-secret |
bitnami/nginx@24.0.4 | 2 | existing-secret |
bitnami/opensearch@2.0.10 | 2 | existing-secret |
bitnami/phpmyadmin@20.0.0 | 1 | existing-secret |
bitnami/postgresql@18.6.10 | 2 | ha |
bitnami/postgresql@18.6.7 | 2 | ha |
bitnami/rabbitmq@16.0.14 | 2 | ha |
bitnami/spark@10.0.3 | 2 | existing-secret |
bitnami/zookeeper@13.8.7 | 2 | existing-secret |
cloudnative-pg/cloudnative-pg@0.28.2 | 2 | existing-secret |
coredns/coredns@1.45.2 | 1 | existing-secret |
crossplane-stable/crossplane@2.3.1 | 1 | existing-secret |
dex/dex@0.24.0 | 1 | existing-secret |
elastic/eck-operator@3.4.0 | 3 | existing-secret |
external-dns/external-dns@1.21.1 | 3 | existing-secret |
external-secrets/external-secrets@2.5.0 | 2 | existing-secret |
fairwinds-stable/goldilocks@10.3.0 | 1 | existing-secret |
falcosecurity/falco@9.0.0 | 1 | existing-secret |
falcosecurity/falcosidekick@0.13.1 | 1 | existing-secret |
gatekeeper/gatekeeper@3.22.2 | 2 | existing-secret |
gitlab/gitlab-runner@0.89.0 | 1 | existing-secret |
grafana/promtail@6.17.1 | 1 | existing-secret |
grafana/pyroscope@2.0.2 | 3 | existing-secret |
grafana/tempo@1.24.4 | 2 | no-crds, ha, ingress-tls |
haproxytech/kubernetes-ingress@1.52.0 | 1 | existing-secret |
hashicorp/consul@2.0.0 | 2 | no-crds, ha, ingress-tls |
hashicorp/vault@0.32.0 | 3 | ingress-tls, tls |
istio/istiod@1.30.0 | 1 | existing-secret |
jaegertracing/jaeger@4.8.0 | 1 | existing-secret |
jetstack/trust-manager@v0.22.1 | 2 | existing-secret |
kyverno/kyverno@3.8.1 | 2 | existing-secret |
linkerd/linkerd-crds@1.8.0 | 1 | existing-secret, no-crds |
longhorn/longhorn@1.11.2 | 2 | no-crds, ha |
metrics-server/metrics-server@3.13.0 | 2 | existing-secret |
minio-operator/operator@7.1.1 | 1 | no-crds |
minio-operator/tenant@7.1.1 | 1 | existing-secret |
nats/nack@0.34.0 | 2 | existing-secret |
nats/nats@2.14.0 | 2 | existing-secret |
open-telemetry/opentelemetry-operator@0.114.0 | 2 | existing-secret |
prometheus-community/kube-prometheus-stack@85.3.3 | 2 | existing-secret |
prometheus-community/kube-prometheus-stack@86.1.0 | 2 | existing-secret |
prometheus-community/kube-state-metrics@7.4.0 | 1 | existing-secret |
prometheus-community/prometheus-node-exporter@4.55.0 | 1 | existing-secret |
prometheus-community/prometheus-operator-crds@29.0.0 | 1 | existing-secret, no-crds |
prometheus-community/prometheus@29.8.0 | 2 | ha |
prometheus-community/prometheus@29.9.0 | 2 | ha |
rook-release/rook-ceph-cluster@v1.19.5 | 1 | existing-secret |
rook-release/rook-ceph@v1.19.5 | 1 | no-crds |
runix/pgadmin4@1.62.0 | 1 | existing-secret, ha |
sealed-secrets/sealed-secrets@2.18.6 | 2 | existing-secret |
secrets-store-csi-driver/secrets-store-csi-driver@1.6.0 | 2 | no-crds |
traefik/traefik@40.2.0 | 2 | existing-secret |
velero/velero@12.0.1 | 2 | existing-secret |
vm/victoria-logs-single@0.12.5 | 1 | existing-secret, ha |
vm/victoria-metrics-single@0.39.0 | 1 | ha |
How to use this
- Take a wave of charts from the top of the build-volume dimensions (
existing-secret,haare broadest). - For each, author the variant like the wave-2 work orders (real values delta that changes the object set), render it, prove Helm-equivalence, write the revision + scan/gate receipts, and declare its scope.
- Re-run
npm run completeness:generate- the chart flips tovariant_completeand, once it has a pain report + scope, to model-complete.