This note records the Helm pain surfaced during catalog review and where the current ConfigHub/cub installer proof absorbs it.
Support Boundary
| Field | Value |
|---|---|
| Catalog status | catalog-supported |
| Support level | supported-for-declared-scopes |
| Supported scopes | local-test |
| Production readiness | production-review-ready |
| Variants in this note | single-binary-filesystem, simple-scalable-minio |
Production support is not implied by this file. A chart can be supported for local proof/demo use while still needing accepted scan, gate, lifecycle, and operating-policy dispositions plus a final target-scoped support decision.
Chart Notes
- Default chart rendering fails before object creation until loki.storage.bucketNames.chunks and schemaConfig are supplied.
- single-binary-filesystem selects SingleBinary topology, filesystem storage, and one Loki StatefulSet for local proof.
- simple-scalable-minio selects the scalable topology, one read/write/backend replica, explicit S3 bucket names, and the bundled MinIO dependency as a local object-store fixture.
- Chart dependency metadata records MinIO, grafana-agent-operator, and rollout-operator from Chart.lock.
- Promoted variants render no hook objects with --no-hooks; future hook or test enablement must map to lifecycle policy.
- Loki and MinIO render StatefulSets that need storage/upgrade/rollback policy before production.
- Loki config, structuredConfig, extraEnv, and raw object slots are template-powered extension surfaces; promoted variants keep raw object slots empty.
Catalog Mitigations
- Supported for local-test and proof-demo usage through real cub installer and ConfigHub receipts.
- single-binary-filesystem is the simplest local Loki path and has live Helm-vs-ConfigHub OCI parity.
- simple-scalable-minio is supported as the local multi-component object-store variant, but remains target-resource sensitive.
- Default render blocking, storage policy, cluster RBAC, lifecycle policy, extension slots, MinIO Secret ownership, and scan/gate warnings are recorded as production review input.
- Production recommendation remains a separate decision; the first review path should prefer single-binary-filesystem unless the target explicitly accepts the scalable object-store topology.
Control Points
| Control point | Status | Mitigation / evidence | |||
|---|---|---|---|---|---|
| source-lock | handled | source-lock.yaml | |||
| dependency-lock | handled | chart declares MinIO, grafana-agent-operator, and rollout-operator dependencies; promoted variants lock their metadata. | |||
| capability-profile | handled | Kubernetes API and version branches are bound to the named Kubernetes capability profile. | |||
| blocked-default-render | handled | The chart default fails before render because required storage bucket/schema inputs are missing; the proof records the blocker and supplies two bounded variants. | |||
| storage-config | variant-controlled | Promoted variants bind storage mode, schemaConfig, and object-store settings before creating a rendered revision. | |||
| object-storage-policy | variant-controlled | The MinIO variant renders a chart-owned object-store fixture and marks its Secret as review-required before production. | |||
| lifecycle-policy | not-present-in-promoted-render | Promoted Loki variants render with --no-hooks; hook or test enablement must map to lifecycle policy before production. | |||
| stateful-workload | scan-and-review | apps/v1\ | StatefulSet\ | loki\ | loki |
| pvc-policy | scan-and-review | Loki and MinIO StatefulSets need storage, retention, upgrade, and rollback policy. | |||
| cluster-rbac | scan-and-review | rbac.authorization.k8s.io/v1\ | ClusterRole\ | \ | loki-clusterrole |
| tpl | controlled-by-empty-defaults | Loki config, structuredConfig, extraEnv, and raw object slots can use templating; promoted variants keep raw object slots empty. | |||
| installer-support-object | handled | v1\ | Namespace\ | \ | loki |
Control Point Index
- blocked-default-render
- capability-profile
- cluster-rbac
- dependency-lock
- installer-support-object
- lifecycle-policy
- object-storage-policy
- pvc-policy
- source-lock
- stateful-workload
- stateful-workload-policy
- storage-config
- tpl
- tpl-extension-slot
Proof Links
- Catalog map: CATALOG.md
- Machine index: artifact-index.yaml
- Helm plan: helm-plan.yaml
- Control points: control-points.yaml
- Chart dossier: chart-dossier.yaml