Master Catalog Matrix

Generated at: 2026-10-09T05:25:15.698Z UTC · source: committed catalog, proof, live, and target-run data.

180 chart versions · 604 matrix rows (180 F1 source / 344 F2 base / 67 candidate / 13 F4 derived) · layers F1:180 / F2a:165 / F2b:179 / F2c:33 / F3:34 / F4a:7 / F4b:6 · lane cells: 1141 pass / 107 watch / 128 blocked / 798 not yet run / 2054 n/a · target run decisions: 22 runs / 2 superseded / 2 blocked-or-rejected · variant promotion: 179 proven / 17 watch / 146 todo / 2 blocked / 260 n/a · lifecycle records: 12 attached / 17 gap / 315 no separate route · prerequisite records: 165 attached / 167 gap / 12 none explicitly required · 74 active proof queue row(s) · 114 deferred accepted cell(s) · 0 hook-flagged variants unrouted (U). Generated from committed sources by scripts/generate-master-catalog-matrix.mjs; regenerate with npm run master-matrix.

✓ pass! watch✗ blocked/failed· not yet run– not applicable

Layer marks the path from F1 source chart through F2 bases and F3 target inputs to F4 derived ConfigHub variants; candidate and human-review rows are planning rows, not proof claims. Hover any cell for the reason and next action. How to read each cell and lane letter is explained in reading the matrix; the taxonomy and retention rules are part of how the catalog is built. Not in top-100 readiness (candidates/version drift): argo-cd/argo-cd@10.1.3, argo-cd/argo-cd@10.2.1, argo-cd/argo-cd@10.7.0, argo-cd/argo-cd@9.5.17, aws-ebs-csi-driver/aws-ebs-csi-driver@2.59.0, bitnami/mongodb@19.0.9, bitnami/mongodb@19.1.0, bitnami/nginx@24.0.4, bitnami/nginx@25.0.0, bitnami/postgresql@18.6.10, bitnami/postgresql@18.7.0, bitnami/redis@27.0.0, cloudnative-pg/cloudnative-pg@0.28.2, dra-driver-nvidia/dra-driver-nvidia-gpu@0.4.1, external-secrets/external-secrets@2.10.0, external-secrets/external-secrets@2.7.0, external-secrets/external-secrets@2.8.0, grafana/alloy@1.11.0, grafana/alloy@1.8.2, grafana/loki@7.1.0, grafana/loki@7.3.0, jetstack/cert-manager@v1.21.0, jetstack/cert-manager@v1.21.1, kai-scheduler/kai-scheduler@v0.14.1, kyverno/kyverno-policies@3.8.0, kyverno/kyverno-policies@3.8.2, kyverno/kyverno@3.8.1, kyverno/kyverno@3.8.2, longhorn/longhorn@1.12.0, longhorn/longhorn@1.12.1, metallb/metallb@0.16.1, metrics-server/metrics-server@3.13.1, metrics-server/metrics-server@3.14.0, nvidia/gpu-operator@v25.10.1, nvidia/gpu-operator@v26.3.2, nvidia/gpu-operator@v26.3.3, nvidia/k8s-nim-operator@3.1.0, nvidia/nodewright@v0.17.1, nvidia/nvsentinel@v1.20.0, nvidia/nvsentinel@v1.25.0, nvidia/nvsentinel@v1.9.0, oauth2-proxy/oauth2-proxy@10.7.0, percona/psmdb-operator@1.22.0, policy-reporter/policy-reporter@3.9.1, prometheus-community/kube-prometheus-stack@84.4.0, prometheus-community/kube-prometheus-stack@86.1.0, prometheus-community/kube-prometheus-stack@87.15.1, prometheus-community/kube-prometheus-stack@87.19.2, prometheus-community/kube-prometheus-stack@88.6.3, prometheus-community/prometheus-blackbox-exporter@11.10.0, prometheus-community/prometheus-blackbox-exporter@11.15.1, prometheus-community/prometheus-operator-crds@28.0.1, prometheus-community/prometheus@29.9.0, stakater/reloader@2.2.12, stakater/reloader@2.2.14, traefik/traefik@40.2.0, traefik/traefik@41.0.2, velero/velero@12.1.0.

Current product queueRowsMeaningExamples
F1 source charts180Upstream Helm chart/version source rows. These are the starting points before any installer base is chosen.aqua/trivy-operator@0.32.1/(source), argo-cd/argo-cd@9.5.15/(source), argo-cd/argo-cd@9.5.17/(source), argo-cd/argo-cd@10.1.3/(source)
Public catalog rows42Reviewed top-20 catalog rows. Use base-readiness or the per-chart catalog page to choose the easiest first base.argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, bitnami/mongodb@19.0.7/existing-secret-replicaset, bitnami/mongodb@19.0.7/static-passwords
Promote after review72Proof-grade rows that need catalog/product review before becoming public starting points.aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-events@2.4.21/default, argo-cd/argo-events@2.4.21/no-crds
Design a more useful base46Rows where plain render proof exists but the first user-facing base is not yet good enough.argo-cd/argocd-image-updater@1.2.2/default, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default, bitnami/memcached@8.5.5/default, cloudnative-pg/cloudnative-pg@0.29.0/default
Decide a limitation first19Rows where a product or operator boundary must be chosen before promotion.bitnami/apache@11.4.29/default, bitnami/apache@11.4.29/legacy, bitnami/contour@21.1.4/default, bitnami/contour@21.1.4/legacy
Complete the core proof lane226Real base or derived rows missing at least one core evidence lane: ConfigHub proof, live Kubernetes, GitOps/OCI, or live parity.argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argo-cd@9.5.17/default, argo-cd/argo-cd@9.5.17/no-crds, argo-cd/argo-cd@10.1.3/default
Active proof queue74Rows with a current non-pass live parity result and an exact rerun or review action.argo-cd/argo-cd@9.5.17/default, autoscaler/cluster-autoscaler@9.57.0/controller-default-reviewed, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default, bitnami/apache@11.4.29/default
Deferred accepted dispositions33Rows whose current non-green cells are already accepted as watch or n/a; do not spend live-run time until scope changes.argo-cd/argo-cd@9.5.17/default, argo-cd/argocd-image-updater@1.2.2/default, autoscaler/cluster-autoscaler@9.57.0/default, elastic/eck-operator@3.4.0/default
Derived ConfigHub variants13Downstream ConfigHub variants cloned from reviewed bases. These show environment, region, customer, or target-specific post-render customization without a Helm rerender.bitnami/nginx@24.0.2/customer-acme-prod, bitnami/nginx@24.0.2/prod-us-east, bitnami/redis@25.5.3/prod-us-east, bitnami/redis@25.5.3/staging-eu-west
Candidate rows67Planned F2/F3 paths from committed work-order data. These are visible product paths, not proof claims.autoscaler/cluster-autoscaler@9.57.0/default + review, aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1/default + topology, bitnami/contour@21.1.4/legacy + review, bitnami/memcached@8.5.5/storage-default-reviewed
Custom-discussion candidates56Non-default or target-specific paths where inputs, ownership, or risk must be discussed before the row becomes runnable.autoscaler/cluster-autoscaler@9.57.0/default + review, bitnami/contour@21.1.4/legacy + review, bitnami/memcached@8.5.5/storage-default-reviewed, bitnami/phpmyadmin@20.0.0/web-ui-existing-secret
Decide target run scope331Rows without a target run decision or target-bound receipt yet.aqua/trivy-operator@0.32.1/default, aqua/trivy-operator@0.32.1/no-crds, argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argo-cd@9.5.17/default
Investigate hard gaps111Rows with a named chart/product gap rather than a simple missing receipt.argo-cd/argo-cd@9.5.15/default, argo-cd/argo-cd@9.5.15/no-crds, argo-cd/argocd-image-updater@1.2.2/default, autoscaler/cluster-autoscaler@9.57.0/default + review
ChartLayerKindVariantLinksTierUseEvidenceCoreQuirksHooksRouteRoute recordPrerequisite recordRCLYGPKVActionOutcomeTargetScopeGapActive proofNext action
aqua/trivy-operator@0.32.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––✓✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
argo-cd/argo-cd@9.5.15F1source(source)top20sourcesource lock–––––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓––––✓✓✓✓–✓✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=argocd; delivery=con...ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
F2bbaseno-crdstop20trylive parity✗––––✓✓✓✗–✗✓·✓stagelive-parity·–ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
argo-cd/argo-cd@9.5.17F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓✓✓–!!·✓deferredlocal-live·––gitops-runtime-review
F2bbaseno-crds---✗––––✓✓·✓–✗✓✓·runlive-parity·–––
argo-cd/argo-cd@10.1.3F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
argo-cd/argo-cd@10.2.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
argo-cd/argo-cd@10.7.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
argo-cd/argo-events@2.4.21F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
argo-cd/argo-rollouts@2.40.9F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
argo-cd/argo-workflows@1.0.14F1source(source)next80sourcesource lock––1––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✗–1✓✓✓✓✓✗✓✓✓✓✓stagelive-parity·–––run catalog promotion review
F2bbasecontroller-default-reviewednext80reviewlive parity✗–1·✓✓✓✓✗·✓✓✓✓stagelive-parity·–––run catalog promotion review
F2bbaseminimal-crdsnext80reviewlive parity✓–1✓✓·✓✓✓✓✓✓✓✓–live-parity·–––run catalog promotion review
argo-cd/argocd-image-updater@1.2.2F1source(source)next80sourcesource lock–––––––––––––––source-lock––no-crds (template-baked CRDs; no clean chart toggle yet)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓·✓✓✓✓deferredlive-parity·–no-crds (template-baked CRDs; no clean chart toggle yet)–add at least one user-shaped variant before catalog promotion
autoscaler/cluster-autoscaler@9.57.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓!✓deferredlive-parity·–––run catalog promotion review
F2bbasecontroller-default-reviewednext80reviewlive parity✓––––✓✓✓✓–✓✓✗✓modellive-parity·––inspect-receiptrun catalog promotion review
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate––––––––––––––scopecandidate-plan––the missing Helm input value(s)–unknown-preflight: unknown; npm run kind-parity:run -- --chart auto...
autoscaler/vertical-pod-autoscaler@0.9.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––✓✓✓✓✓✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––✓✓✓✓✓✓✓✓✓–live-parity·–––run catalog promotion review
aws-controllers-k8s/ec2-chart@1.18.4F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseeks-inferencenext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
aws-controllers-k8s/eks-chart@1.16.3F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseeks-inferencenext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
aws-controllers-k8s/iam-chart@1.7.3F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseeks-inferencenext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
aws-ebs-csi-driver/aws-ebs-csi-driver@2.59.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training-v0-20-0---✗––––·✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training-v1-0-0---✗––––·✓··–····stagerender-parity·–––
aws-ebs-csi-driver/aws-ebs-csi-driver@2.60.1F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗tpl;capabilities;cluster-rbac–––·✓✓✗–!!✗✓modelin-confighub·––target-fit-reviewadd at least one user-shaped variant before catalog promotion
F3candidatedefault + topologycandidatecandidatecandidate–tpl;capabilities;cluster-rbac––––––––––––stagecandidate-plan––AWS/EKS metadata + node providerID–provide-storage-or-topology: AWS/EKS metadata + node providerID; np...
bitnami/apache@11.4.29F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities–––·✓✓✓–!!✗✓imagelocal-live·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
bitnami/contour@21.1.4F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac–––✓✓✓✗·!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac1✓✓✓✓✓✗✓!!✓✓stagetwo-cluster-kind-parity·–existing-secret (chart ships no Secret toggle)runtime-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaseno-crdsnext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac–––✓✓✓✗·!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F3candidate reviewlegacy + reviewcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
bitnami/elasticsearch@22.1.6F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbasehanext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✓–!!✗✓imagelocal-live·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
bitnami/memcached@8.5.5F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–existing-secret (chart ships no Secret toggle)–add at least one user-shaped variant before catalog promotion
F2ccandidate reviewstorage-default-reviewedcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;stateful-storage––––––––––––modelcandidate-plan––StorageClass; persistence; CRD ownership if present; pr...–design effective-values-storage-default-reviewed.yaml from the name...
bitnami/mongodb@19.0.7F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret-replicasettop20trylive parity✓lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––✓✓✓✓–✓✓·✓–live-parity·–––
F2bbasestatic-passwordstop20trylive parity✓lookup;generated-facts;tpl;capabilities;cluster-rbac;stateful-storage––––✓✓✓–✓✓·!runlive-parity✓cub-lk-kind-vanilla; namespace=mongodb; delivery=co...––choose whether static-passwords is in production scope; close or do...
bitnami/mongodb@19.0.9F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret-replicaset---✗––––✓✓✓✓–!!·!runlocal-live·––gitops-runtime-review
F2bbasestatic-passwords---✓––––·✓✓✓–✓✓·✓–live-parity·–––
bitnami/mongodb@19.1.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret-replicaset---✗––––✓✓✓✓–!!✓!runtwo-cluster-kind-parity·––gitops-runtime-review
F2bbasestatic-passwords---✓––––·✓✓✓–✓✓✓!runlive-parity·–––
bitnami/mysql@14.0.3F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2bbaseexisting-secrettop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage–––✓✓✓✓–✓✓✓✓–live-parity·–ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
F2bbasestatic-passwordstop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage––––✓✓✓–✓✓✓!runlive-parity✓cub-lk-kind-vanilla; namespace=mysql; delivery=conf...ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
bitnami/nginx@24.0.2F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2bbaseexisting-tls-ingresstop20trylive parity✓lookup;generated-facts;tpl;capabilities–––✓✓✓✓–✓✓·✓–live-parity·–existing-secret (chart ships no Secret toggle)–
F2bbasehttp-clusteriptop20trylive parity✓lookup;generated-facts;tpl;capabilities–––·✓✓✓–✓✓·✓–live-parity✓cub-lk-kind-vanilla; namespace=nginx; delivery=conf...existing-secret (chart ships no Secret toggle)–choose whether http-clusterip is in production scope; close or docu...
F4bderived from http-clusteripcustomer-acme-prodderivedderivedtarget-bound✓lookup;generated-facts;tpl;capabilities–––––✓––✓––––target-bound-derived✓helm-expt-derived-nginx-cust-0605-cluster/oci––keep the target-bound derived variant receipt fresh when the source...
F4bderived from http-clusteripprod-us-eastderivedderivedtarget-bound✓lookup;generated-facts;tpl;capabilities–––––✓––✓––––target-bound-derived✓helm-expt-derived-nginx-0605-cluster/oci––keep the target-bound derived variant receipt fresh when the source...
bitnami/nginx@24.0.4F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-tls-ingress---✗––––✓✓✓✓–!!·!runlocal-live·––gitops-runtime-review
F2bbasehttp-clusterip---✓––––·✓✓✓–✓✓·!runlive-parity·–––
bitnami/nginx@25.0.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-tls-ingress---✗––––✓✓✓✓–!!✓!runtwo-cluster-kind-parity·––gitops-runtime-review
F2bbasehttp-clusterip---✓––––·✓✓✓–✓✓✓!runlive-parity·–––
bitnami/opensearch@2.0.10F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlocal live✗––––·✓✓✗–!!✗✓imagein-confighub·––image-retention-reviewrun catalog promotion review
F2bbasehanext80reviewlocal live✗––––·✓✓✗–!!✗✓imagein-confighub·––image-retention-reviewrun catalog promotion review
F2bbaselegacynext80reviewlocal live✗––––·✓✓✓–!!✗✓imagelocal-live·––image-retention-reviewrun catalog promotion review
bitnami/phpmyadmin@20.0.0F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✓–!!✗✓imagelocal-live·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2ccandidate reviewweb-ui-existing-secretcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;stateful-storage––––––––––––modelcandidate-plan––Service/Ingress shape; TLS Secret reference; auth or ad...–design effective-values-web-ui-existing-secret.yaml from the named ...
bitnami/postgresql@18.6.7F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2bbaseexisting-secrettop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage–––✓✓✓✓–✓✓·✓–live-parity·–ha (curated proof lane - bespoke teaching needed)–
F2bbasestatic-passwordstop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage––––✓✓✓–✓✓·!runlive-parity✓cub-lk-kind-vanilla; namespace=postgresql; delivery...ha (curated proof lane - bespoke teaching needed)–choose whether static-passwords is in production scope; close or do...
bitnami/postgresql@18.6.10F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret---✓––––✓✓✓✓–✓✓·!runlive-parity·–––
F2bbasestatic-passwords---✓––––·✓✓✓–✓✓·✓–live-parity·–––
bitnami/postgresql@18.7.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret---✓––––✓✓✓✓–✓✓✓!runlive-parity·–––
F2bbasestatic-passwords---✓––––·✓✓✓–✓✓✓!runlive-parity·–––
bitnami/rabbitmq@16.0.14F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2bbaseexisting-secrettop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage–––✓✓✓✓–✓✓✓✓–live-parity·–ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
F2bbasestatic-passwordstop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage––––✓✓✓–✓✓✓!runlive-parity✓cub-lk-kind-vanilla; namespace=rabbitmq; delivery=c...ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
bitnami/redis@25.5.3F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage––––✓✓✓–✓✓·✓–live-parity✓cub-lk-kind-vanilla; namespace=redis; delivery=conf...––choose whether default is in production scope; close or document it...
F2bbasereuse-existing-secrettop20trylive parity✓lookup;generated-facts;tpl;capabilities;stateful-storage–––✓✓✓✓–✓✓·✓–live-parity·–––
F4aderived from defaultprod-us-eastderivedderivedderived clone✗lookup;generated-facts;tpl;capabilities;stateful-storage–––––✓––·–––runderived-intended-state·redis-targets/prod-us-east–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
F4bderived from defaultstaging-eu-westderivedderivedderived clone✗lookup;generated-facts;tpl;capabilities;stateful-storage–––––✓––✗–––stagederived-intended-state✗<target-space>/ocinamespace-mutation-not-yet-modeled;redis-secret-deliver...target-bound-derived-variantAdd a derived namespace mutation check for Redis or keep namespace ...
bitnami/redis@27.0.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓!runlive-parity·–––
F2bbasereuse-existing-secret---✓––––✓✓✓✓–✓✓✓!runlive-parity·–––
bitnami/spark@10.0.3F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbasehanext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✓–!!✗✓imagelocal-live·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
bitnami/zookeeper@13.8.7F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbasehanext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✗–!!✗✓imagein-confighub·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaselegacynext80limit firstlocal live✗lookup;generated-facts;tpl;capabilities;stateful-storage–––·✓✓✓–!!✗✓imagelocal-live·–existing-secret (chart ships no Secret toggle)image-retention-reviewreview limitation before promotion: existing-secret (chart ships no...
cloudnative-pg/cloudnative-pg@0.28.2F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
F2bbaseno-crds---✗––––✓✓✓✗–✓✓✓✓stagelive-parity·–––
cloudnative-pg/cloudnative-pg@0.29.0F1source(source)next80sourcesource lock–generated-facts;tpl;crds;cluster-rbac;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗generated-facts;tpl;crds;cluster-rbac;webhooks–––·✓·······stagerender-parity·–––add at least one user-shaped variant before catalog promotion
cloudpirates/nginx@0.16.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗––––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
cloudpirates/rabbitmq@0.21.13F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewrender✗––––·✓··–····stagerender-parity·–––run catalog promotion review
F2bbaseexisting-secretnext80reviewrender✗––––✓✓··–····stagerender-parity·–––run catalog promotion review
cloudpirates/redis@0.34.11F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewrender✗––––·✓··–····stagerender-parity·–––run catalog promotion review
F2bbasereuse-existing-secretnext80reviewrender✗––––✓✓··–····stagerender-parity·–––run catalog promotion review
coredns/coredns@1.45.2F1source(source)next80sourcesource lock–generated-facts;tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓generated-facts;tpl;capabilities;cluster-rbac–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcontroller-default-reviewedcandidatehuman reviewcandidate–generated-facts;tpl;capabilities;cluster-rbac––––––––––––modelcandidate-plan––CRD ownership; admission/webhook behavior; RBAC scope; ...–design effective-values-controller-default-reviewed.yaml from the n...
crossplane-stable/crossplane@2.3.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
descheduler/descheduler@0.36.0F1source(source)next80sourcesource lock–tpl;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓tpl;cluster-rbac–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcluster-metrics-readonlycandidatehuman reviewcandidate–tpl;cluster-rbac––––––––––––modelcandidate-plan––service exposure; RBAC scope; persistence if the chart ...–design effective-values-cluster-metrics-readonly.yaml from the name...
dex/dex@0.24.0F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗tpl;capabilities;cluster-rbac–––·✓✓✗–!!✗✓stagein-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewweb-ui-existing-secretcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac––––––––––––modelcandidate-plan––Service/Ingress shape; TLS Secret reference; auth or ad...–design effective-values-web-ui-existing-secret.yaml from the named ...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
dra-driver-nvidia/dra-driver-nvidia-gpu@0.4.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
F2bbasegpu-resources---✗––––✓✓··–····stagerender-parity·–––
dra-driver-nvidia/dra-driver-nvidia-gpu@0.5.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-trainingnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasegpu-resourcesnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
eks/aws-efa-k8s-device-plugin@v0.5.29F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-trainingnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
elastic/eck-operator@3.4.0F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbasehanext80reviewlive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
elastic/filebeat@8.5.1F1source(source)next80sourcesource lock–tpl;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewConfigHub✗tpl;cluster-rbac–––✓✓✓✗–!!✗✓stagein-confighub·––runtime-reviewrun catalog promotion review
F2bbasenode-or-cluster-collectornext80reviewConfigHub✗tpl;cluster-rbac–––✓✓✓✗–!!✗✓stagein-confighub·––runtime-reviewrun catalog promotion review
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl;cluster-rbac––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidatedefault + secretcandidatecandidatecandidate–tpl;cluster-rbac––––––––––––stagecandidate-plan––Secret elasticsearch-master-certs–stage-secret: Secret elasticsearch-master-certs; npm run kind-parit...
F3candidate reviewnode-or-cluster-collector + external-apicandidatehuman reviewcandidate–tpl;cluster-rbac––––––––––––scopecandidate-plan––the upstream service/endpoint the workload connects to–provide-external-service: unknown; npm run kind-parity:run -- --cha...
F3candidate reviewnode-or-cluster-collector + reviewcandidatehuman reviewcandidate–tpl;cluster-rbac––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
elastic/kibana@8.5.1F1source(source)next80sourcesource lock–tpl–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗tpl–––·✓✓✗–!!✗✓stagein-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewweb-ui-existing-secretcandidatehuman reviewcandidate–tpl––––––––––––modelcandidate-plan––Service/Ingress shape; TLS Secret reference; auth or ad...–design effective-values-web-ui-existing-secret.yaml from the named ...
F3candidate reviewdefault + external-apicandidatehuman reviewcandidate–tpl––––––––––––scopecandidate-plan––the upstream service/endpoint the workload connects to–provide-external-service: unknown; npm run kind-parity:run -- --cha...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
elastic/logstash@8.5.1F1source(source)next80sourcesource lock–tpl;capabilities;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;capabilities;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasehanext80reviewlive parity✗tpl;capabilities;stateful-storage–––✓✓✓✗–✓✓✓✓stagelive-parity·–––run catalog promotion review
elastic/metricbeat@8.5.1F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗tpl;capabilities;cluster-rbac;stateful-storage–––✓✓✓✗–!!✗✓stagein-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidatedefault + secretcandidatecandidatecandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––stagecandidate-plan––Secret elasticsearch-master-certs–stage-secret: Secret elasticsearch-master-certs; npm run kind-parit...
external-dns/external-dns@1.21.1F1source(source)next80sourcesource lock–tpl;crds;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;crds;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbasedry-run-txt-registrynext80reviewlive parity✓tpl;crds;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓tpl;crds;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2ccandidate reviewcloudflare-existing-secretcandidatehuman reviewcandidate–tpl;crds;cluster-rbac––––––––––––modelcandidate-plan––provider.name=cloudflare; env uses valueFrom secretKeyR...–Cloudflare install with API token supplied by an existing Secret.; ...
F2ccandidate reviewroute53-irsacandidatehuman reviewcandidate–tpl;crds;cluster-rbac––––––––––––modelcandidate-plan––provider.name=aws; serviceAccount.annotations includes ...–AWS Route53 install using IAM role for service account rather than ...
external-secrets/external-secrets@2.5.0F1source(source)top20sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓––––✓✓✓✓✓✗✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=external-secrets; de...––image policy decision recorded for a target scope; create digest-pi...
F2bbaseno-crdstop20trylive parity✓––––✓✓✓✓✓✗✓✓✓–live-parity·–––image policy decision recorded for a target scope; create digest-pi...
external-secrets/external-secrets@2.7.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–✗···stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
external-secrets/external-secrets@2.8.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–✗···stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
external-secrets/external-secrets@2.10.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–✗···stagerender-parity·–––
F2bbaseno-crds---✗––––✓✓··–✗···stagerender-parity·–––
fairwinds-stable/goldilocks@10.3.0F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks–––·✓✓✓·✓✓✓✓deferredlive-parity·–existing-secret (chart ships no Secret toggle)–add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcluster-metrics-readonlycandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks––––––––––––modelcandidate-plan––service exposure; RBAC scope; persistence if the chart ...–design effective-values-cluster-metrics-readonly.yaml from the name...
fairwinds-stable/vpa@4.11.0F1source(source)next80sourcesource lock–lookup;tpl;capabilities;crds;cluster-rbac;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓lookup;tpl;capabilities;crds;cluster-rbac;webhooks–––✓✓✓✓✓✓✓✓✓–live-parity·–––review APIService render-path notes: current maintained bases do no...
F2bbaseno-crdsnext80reviewlive parity✓lookup;tpl;capabilities;crds;cluster-rbac;webhooks–––✓✓✓✓✓✓✓✓✓–live-parity·–––review APIService render-path notes: current maintained bases do no...
falcosecurity/falco@9.0.0F1source(source)next80sourcesource lock–lookup;tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓lookup;tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewnode-or-cluster-collectorcandidatehuman reviewcandidate–lookup;tpl;capabilities;cluster-rbac;stateful-storage––––––––––––modelcandidate-plan––DaemonSet versus Deployment shape; destination Secret o...–design effective-values-node-or-cluster-collector.yaml from the nam...
falcosecurity/falcosidekick@0.13.1F1source(source)next80sourcesource lock–capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓capabilities;cluster-rbac;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
fluent/fluent-bit@0.57.6F1source(source)next80sourcesource lock–tpl;capabilities;hooks;cluster-rbac1––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓tpl;capabilities;hooks;cluster-rbac1✓✓·✓✓✓✓✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewnode-or-cluster-collectorcandidatehuman reviewcandidate–tpl;capabilities;hooks;cluster-rbac––––––––––––modelcandidate-plan––DaemonSet versus Deployment shape; destination Secret o...–design effective-values-node-or-cluster-collector.yaml from the nam...
fluent/fluentd@0.5.3F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantkind parity✗tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✓–!!✓✓deferredtwo-cluster-kind-parity·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewnode-or-cluster-collectorcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––modelcandidate-plan––DaemonSet versus Deployment shape; destination Secret o...–design effective-values-node-or-cluster-collector.yaml from the nam...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
gatekeeper/gatekeeper@3.22.2F1source(source)next80sourcesource lock–capabilities;hooks;crds;cluster-rbac;webhooks4––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓capabilities;hooks;crds;cluster-rbac;webhooks4✓✓·✓✓✓✓✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓capabilities;hooks;crds;cluster-rbac;webhooks4–·✓✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
gitlab/gitlab-runner@0.89.0F1source(source)next80sourcesource lock–generated-facts;tpl;capabilities–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗generated-facts;tpl;capabilities–––·✓✓✗–!!!✓stagein-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewrunner-existing-secretcandidatehuman reviewcandidate–generated-facts;tpl;capabilities––––––––––––modelcandidate-plan––registration Secret reference; runner RBAC; namespace; ...–design effective-values-runner-existing-secret.yaml from the named ...
F3candidate reviewdefault + external-apicandidatehuman reviewcandidate–generated-facts;tpl;capabilities––––––––––––scopecandidate-plan––the upstream service/endpoint the workload connects to–provide-external-service: unknown; npm run kind-parity:run -- --cha...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–generated-facts;tpl;capabilities––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
grafana/alloy@1.8.2F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓✗runlive-parity·–––
F2bbaseno-crds---✓––––·✓✓✓–✓✓✓✗runlive-parity·–––
grafana/alloy@1.11.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
grafana/alloy@1.12.1F1source(source)next80sourcesource lock–tpl;capabilities;crds;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗tpl;capabilities;crds;cluster-rbac;stateful-storage–––·✓·······stagerender-parity·–––add at least one user-shaped variant before catalog promotion
grafana/grafana@10.5.15F1source(source)top20sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbaseexisting-secret-ingresstop20trylive parity✓––––✓✓✓✓–✓✓✓✓–live-parity–vanilla-kubernetes; namespace=grafana; delivery=con...––resolve image digests for each affected variant before production O...
F2bbasestatic-passwordstop20trylive parity✓––––·✓✓✓–✓✓✓!runlive-parity·–––resolve image digests for each affected variant before production O...
F4aderived from static-passwordscustomer-acme-prodderivedderivedderived clone✗––––––✓––·–––runderived-intended-state·observability-targets/customer-acme-prod–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
F4aderived from static-passwordsprod-us-eastderivedderivedderived clone✗––––––✓––·–––runderived-intended-state·observability-targets/prod-us-east–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
grafana/loki@7.0.0F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2bbasesimple-scalable-miniotop20trylive parity✓lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity·–––image policy decision recorded for a target scope; create digest-pi...
F2bbasesingle-binary-filesystemtop20trylive parity✓lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage––––✓✓✓·✓✓✓✓deferredlive-parity✓cub-lk-kind-vanilla; namespace=loki; delivery=confi...––image policy decision recorded for a target scope; create digest-pi...
grafana/loki@7.1.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
grafana/loki@7.3.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
grafana/promtail@6.17.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
grafana/pyroscope@2.0.2F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage–––·✓✓✓·!!✓✓deferredtwo-cluster-kind-parity·–existing-secret (chart ships no Secret toggle)runtime-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbasehanext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage–––·✓✓✗·!!✗✓modelin-confighub·–existing-secret (chart ships no Secret toggle)runtime-reviewreview limitation before promotion: existing-secret (chart ships no...
F2bbaseno-crdsnext80limit firstkind parity✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage–––·✓✓✓·!!✓✓deferredtwo-cluster-kind-parity·–existing-secret (chart ships no Secret toggle)runtime-reviewreview limitation before promotion: existing-secret (chart ships no...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidate reviewha + reviewcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidate reviewno-crds + reviewcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
grafana/rollout-operator@0.49.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗––––✓✓✓✗–✓✓✓✓stagelive-parity·–––run catalog promotion review
grafana/tempo@1.24.4F1source(source)top20sourcesource lock–––––––––––––––source-lock––ha (tempo single-binary chart; HA is the separate tempo...–choose or create an F2 base before rendering or deploying
F2bbaselocal-persistenttop20trylive parity✓––––·✓✓✓–✓✓✓✓–live-parity–vanilla-kubernetes; namespace=tempo; delivery=confi...ha (tempo single-binary chart; HA is the separate tempo...–resolve image digests for each affected variant before production O...
F2bbases3-query-observabilitytop20trylive parity✗––––✓✓✓✗–!!✓✓stagetwo-cluster-kind-parity·–ha (tempo single-binary chart; HA is the separate tempo...gitops-runtime-reviewresolve image digests for each affected variant before production O...
haproxytech/kubernetes-ingress@1.52.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
hashicorp/consul@2.0.0F1source(source)top20sourcesource lock–tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2bbasedefault-control-planetop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage––––✓✓✓·✓✓✓✓deferredlive-parity✓cub-lk-kind-vanilla; namespace=consul; delivery=con...ha (curated proof lane - bespoke teaching needed)–image policy decision recorded for a target scope; create digest-pi...
F2bbasesecure-mesh-existing-secretstop20trylive parity✗tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––✓✓✓✗·✗!✓✓stagetwo-cluster-kind-parity·–ha (curated proof lane - bespoke teaching needed)gitops-runtime-reviewimage policy decision recorded for a target scope; create digest-pi...
hashicorp/terraform@1.1.2F1source(source)next80sourcesource lock–crds–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewConfigHub✗crds–––✓✓✓✗·!!✗✓modelin-confighub·––runtime-reviewrun catalog promotion review
F2bbaseno-crdsnext80reviewConfigHub✗crds–––✓✓✓✗·!!✗✓stagein-confighub·––runtime-reviewrun catalog promotion review
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–crds––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidate reviewno-crds + reviewcandidatehuman reviewcandidate–crds––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidateno-crds + secretcandidatecandidatecandidate–crds––––––––––––stagecandidate-plan––Secret workspacesecrets; Secret terraformrc–stage-secret: Secret workspacesecrets; Secret terraformrc; npm run ...
hashicorp/vault@0.32.0F1source(source)top20sourcesource lock–tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity✗kind-vanilla; namespace=vault; delivery=confighub-o...––resolve image digests for each affected variant before production O...
F2bbasedev-modetop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––·✓✓✓·✓✓✓✓deferredlive-parity·–––resolve image digests for each affected variant before production O...
F2bbaseha-raft-uitop20trylive parity✗tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––✓✓✓✗·!!✓✓stagetwo-cluster-kind-parity·––operating-policyresolve image digests for each affected variant before production O...
F3candidate reviewha-raft-ui + reviewcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;webhooks;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F4aderived from defaultregulated-prod-us-eastderivedderivedderived clone✗tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––––✓––·–––runderived-intended-state·security-targets/regulated-prod-us-east–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
F4aderived from defaultstaging-us-eastderivedderivedderived clone✗tpl;capabilities;cluster-rbac;webhooks;stateful-storage–––––✓––·–––runderived-intended-state·security-targets/staging-us-east–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
ingress-nginx/ingress-nginx@4.15.1F1source(source)top20sourcesource lock–tpl;capabilities;cluster-rbac;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks–––✓✓✓✓✓✓✓✓✓–live-parity·–––record the target-scoped lifecycle support decision, then refresh l...
F2bbaseadmission-disabledtop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks–––·✓✓✓·!✓✓✓deferredlive-parity·–––record the target-scoped lifecycle support decision, then refresh l...
F2bbaseinternal-clusteriptop20trylive parity✓tpl;capabilities;cluster-rbac;webhooks–––·✓✓✓·✓✓✓✓deferredlive-parity✓cub-lk-kind-vanilla; namespace=ingress-nginx; deliv...––record the target-scoped lifecycle support decision, then refresh l...
istio/gateway@1.30.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewConfigHub✗––––·✓✓✗–!!✗✓imagein-confighub·––image-retention-reviewrun catalog promotion review
F2bbasecontroller-default-reviewednext80reviewConfigHub✗––––·✓✓✗–!!✗✓imagein-confighub·––image-retention-reviewrun catalog promotion review
istio/istiod@1.30.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗––––✓✓✓✗–✗✗✗✓stagein-confighub·––stage-prerequisiteadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewexternal-cacandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––external CA / certificate provider values set after sou...–Use externally managed CA material rather than implicit control-pla...
F2ccandidateminimal-profilecandidatecandidatecandidate––––––––––––––modelcandidate-plan––pilot resource profile lowered; telemetry/addons left out–Smallest reasonable control plane for proof/test clusters.
F2ccandidate reviewrevisioned-control-planecandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––revision set; pilot autoscale reviewed; namespace injec...–Install a revisioned Istio control plane for safe canary/promotion.
F3candidatedefault + namespacecandidatecandidatecandidate––––––––––––––stagecandidate-plan––the target Namespace named by the chart–create-namespace: unknown; npm run live-parity:run -- --recipe reci...
jaegertracing/jaeger@4.8.0F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓lookup;generated-facts;tpl;capabilities–––·✓✓✓–✓✓✓✓–live-parity·–existing-secret (chart ships no Secret toggle)–add at least one user-shaped variant before catalog promotion
F2ccandidate reviewnode-or-cluster-collectorcandidatehuman reviewcandidate–lookup;generated-facts;tpl;capabilities––––––––––––modelcandidate-plan––DaemonSet versus Deployment shape; destination Secret o...–design effective-values-node-or-cluster-collector.yaml from the nam...
jaegertracing/jaeger-operator@2.57.0F1source(source)next80sourcesource lock–crds;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✗crds;webhooks–––✓✓✓✓·✗✗✗✓stagelocal-live·––stage-prerequisiterun catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗crds;webhooks–––✓✓✓✗·✓✓✗✓stagelive-parity·––stage-prerequisiterun catalog promotion review
F3candidate reviewdefault + crdcandidatehuman reviewcandidate–crds;webhooks––––––––––––scopecandidate-plan––cert-manager CRDs–install-crds: cert-manager CRDs; npm run live-parity:run -- --recip...
F3candidate reviewno-crds + crdcandidatehuman reviewcandidate–crds;webhooks––––––––––––scopecandidate-plan––cert-manager CRDs–install-crds: cert-manager CRDs; npm run kind-parity:run -- --chart...
jetstack/cert-manager@v1.20.2F1source(source)top20sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓––––✓✓✓✓✓✓✓✓✓–live-parity·–––write or fix the receipt for target fact preflight
F2bbasecrds-enabledtop20trylive parity✓–––––✓✓✓✓✓✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=cert-manager; delive...––write or fix the receipt for target fact preflight
jetstack/cert-manager@v1.21.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbasecrds-enabled---✗––––·✓··–····stagerender-parity·–––
jetstack/cert-manager@v1.21.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbasecrds-enabled---✗––––·✓··–····stagerender-parity·–––
jetstack/cert-manager-csi-driver@v0.14.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
jetstack/trust-manager@v0.22.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✗––––✓✓✓✗–!!✓✓stagetwo-cluster-kind-parity·––gitops-runtime-reviewrun catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗––––✓✓✓✗–✓✓✓✓stagelive-parity·–––run catalog promotion review
k8s-ephemeral-storage-metrics/k8s-ephemeral-storage-metrics@1.19.2F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-training-v0-20-0next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-training-v1-0-0next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
kai-scheduler/kai-scheduler@v0.14.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
kai-scheduler/kai-scheduler@v0.16.9F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-trainingnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
karpenter/karpenter@1.14.0F1source(source)next80sourcesource lock–capabilities;crds;cluster-rbac;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗capabilities;crds;cluster-rbac;webhooks–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
F2bbasecrds-managednext80-render✗capabilities;crds;cluster-rbac;webhooks–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
F2bbaseeks-inferencenext80-render✗capabilities;crds;cluster-rbac;webhooks–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
kedacore/keda@2.19.0F1source(source)next80sourcesource lock–tpl;capabilities;crds;cluster-rbac;webhooks–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;capabilities;crds;cluster-rbac;webhooks–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run APIService promotion review: choose supported base, target scop...
F2bbaseno-crdsnext80reviewlive parity✓tpl;capabilities;crds;cluster-rbac;webhooks1✓✓✓✓✓✓✓✓✓✓✓–live-parity·–––run APIService promotion review: choose supported base, target scop...
kubeflow/kubeflow-trainer@2.2.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-training-v0-20-0next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-training-v1-0-0next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
kyverno/kyverno@3.8.1F1source(source)-sourcesource lock––8––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓–8✓✓·✓✓✓·✓✓✓✓runlive-parity·–––
F2bbaseno-crds---✓–8✓✓✓✓✓✓·✓✓✓✓runlive-parity·–––
F2ccandidate reviewdefault-admissioncandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––admissionController replicas/resources reviewed; webhoo...–Normal Kyverno admission controller path with explicit webhook disp...
F2ccandidate reviewexternal-crdscandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––CRD install disabled after source review; Kyverno CRDs ...–Install controller assuming CRDs are managed by platform lifecycle....
F2ccandidate reviewha-admission-reportscandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––replica counts >1; reports/background controller settin...–Production-shaped HA admission and reports controller split.; webho...
kyverno/kyverno@3.8.2F1source(source)-sourcesource lock––8––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗–8✓··✓·······stagerender-parity·–––
kyverno/kyverno@3.9.0F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage8––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;stateful-storage8✓··✓··✓····stagelifecycle-observed·–––add at least one user-shaped variant before catalog promotion
kyverno/kyverno-policies@3.8.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓✓✓–!!!✓deferredlocal-live·––gitops-runtime-review
kyverno/kyverno-policies@3.8.2F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
kyverno/kyverno-policies@3.9.0F1source(source)next80sourcesource lock–lookup;tpl–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗lookup;tpl–––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
linkerd/linkerd-crds@1.8.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantkind parity✗––––·✓✓✓–!!✓✓deferredtwo-cluster-kind-parity·––gitops-runtime-reviewadd at least one user-shaped variant before catalog promotion
longhorn/longhorn@1.11.2F1source(source)top20sourcesource lock–generated-facts;tpl;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓generated-facts;tpl;cluster-rbac––––✓✓✓–✓✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=longhorn-system; del...––choose the target-ready base, then record explicit security accepta...
F2bbaseui-ingresstop20trylive parity✓generated-facts;tpl;cluster-rbac–––·✓✓✓–✓✓✓✓–live-parity·–––choose the target-ready base, then record explicit security accepta...
longhorn/longhorn@1.12.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
longhorn/longhorn@1.12.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
metallb/metallb@0.16.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
metrics-server/metrics-server@3.13.0F1source(source)top20sourcesource lock–lookup;generated-facts;capabilities;cluster-rbac–––––––––––––source-lock––existing-secret (chart ships no Secret toggle)–choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓lookup;generated-facts;capabilities;cluster-rbac––––✓✓✓–✓✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=kube-system; deliver...existing-secret (chart ships no Secret toggle)–image policy decision recorded for a target scope; create digest-pi...
F2bbaseexternal-tls-catop20trylive parity✓lookup;generated-facts;capabilities;cluster-rbac–––✓✓✓✓–✓✓✓✓–live-parity·–existing-secret (chart ships no Secret toggle)–image policy decision recorded for a target scope; create digest-pi...
F4bderived from defaultprod-us-eastderivedderivedtarget-bound✓lookup;generated-facts;capabilities;cluster-rbac–––––✓––✓––––target-bound-derived✓helm-expt-derived-ms-0605-cluster/oci––keep the target-bound derived variant receipt fresh when the source...
metrics-server/metrics-server@3.13.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–✓···stagerender-parity·–––
F2bbaseexternal-tls-ca---✗––––✓✓··–····stagerender-parity·–––
metrics-server/metrics-server@3.14.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–✓···stagerender-parity·–––
F2bbaseexternal-tls-ca---✗––––✓✓··–····stagerender-parity·–––
minio-operator/operator@7.1.1F1source(source)next80sourcesource lock–cluster-rbac–––––––––––––source-lock––no-crds (template-baked CRDs; no clean chart toggle yet)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–no-crds (template-baked CRDs; no clean chart toggle yet)–add at least one user-shaped variant before catalog promotion
F2ccandidate reviewstorage-default-reviewedcandidatehuman reviewcandidate–cluster-rbac––––––––––––modelcandidate-plan––StorageClass; persistence; CRD ownership if present; pr...–design effective-values-storage-default-reviewed.yaml from the name...
minio-operator/tenant@7.1.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantkind parity✗––––✓✓✓✓–!!✓✓deferredtwo-cluster-kind-parity·––gitops-runtime-reviewadd at least one user-shaped variant before catalog promotion
mysql/mysql-operator@2.3.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗––––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
nats/nack@0.34.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✗✓modellive-parity·––inspect-parity-diffrun catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
nats/nats@2.14.0F1source(source)next80sourcesource lock–tpl–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasehanext80reviewlive parity✓tpl–––·✓✓✓–✓✓✗✓modellive-parity·––inspect-parity-diffrun catalog promotion review
nats/surveyor@0.20.9F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewConfigHub✗––––·✓✓✗–!!✗✓stagein-confighub·––runtime-reviewrun catalog promotion review
F2bbasedefault-reviewednext80reviewConfigHub✗––––·✓✓✗–!!✗✓stagein-confighub·––runtime-reviewrun catalog promotion review
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate––––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
F3candidate reviewdefault-reviewed + external-apicandidatehuman reviewcandidate––––––––––––––scopecandidate-plan––the upstream service/endpoint the workload connects to–provide-external-service: unknown; npm run kind-parity:run -- --cha...
F3candidate reviewdefault-reviewed + reviewcandidatehuman reviewcandidate––––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
nfs-subdir-external-provisioner/nfs-subdir-external-provisioner@4.0.18F1source(source)next80sourcesource lock–capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗capabilities;cluster-rbac;stateful-storage–––·✓✓✗–✗✗✗✓modelin-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewstorage-default-reviewedcandidatehuman reviewcandidate–capabilities;cluster-rbac;stateful-storage––––––––––––modelcandidate-plan––StorageClass; persistence; CRD ownership if present; pr...–design effective-values-storage-default-reviewed.yaml from the name...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–capabilities;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––value nfs.server–unknown-preflight: value nfs.server; npm run kind-parity:run -- --c...
node-feature-discovery/node-feature-discovery@0.19.0F1source(source)next80sourcesource lock–crds;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗crds;cluster-rbac–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
F2bbaseaicr-eks-training-v0-20-0next80-render✗crds;cluster-rbac–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
F2bbaseaicr-eks-training-v1-0-0next80-render✗crds;cluster-rbac–––✓✓·······stagerender-parity·–––review source/current-version drift and refresh recipe if needed
nvidia/cluster-readiness-engine@v0.6.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗––––✓✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
nvidia/gpu-operator@v25.10.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-580.126.20---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-595.91.07---✗––––✓✓··–····stagerender-parity·–––
F2bbaseexternal-nfd---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver-and-toolkit---✗––––✓✓··–····stagerender-parity·–––
nvidia/gpu-operator@v26.3.2F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-580.105.08---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-595.91.07---✗––––✓✓··–····stagerender-parity·–––
F2bbaseexternal-nfd---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver-and-toolkit---✗––––✓✓··–····stagerender-parity·–––
nvidia/gpu-operator@v26.3.3F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-580.105.08---✗––––✓✓··–····stagerender-parity·–––
F2bbasedriver-595.91.07---✗––––✓✓··–····stagerender-parity·–––
F2bbaseexternal-nfd---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver---✗––––✓✓··–····stagerender-parity·–––
F2bbasepreinstalled-driver-and-toolkit---✗––––✓✓··–····stagerender-parity·–––
nvidia/gpu-operator@v26.7.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-trainingnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasedriver-580.105.08next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasedriver-580.126.20next80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseexternal-nfdnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasepreinstalled-drivernext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasepreinstalled-driver-and-toolkitnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
nvidia/k8s-nim-operator@3.1.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-inference---✗––––✓✓··–····stagerender-parity·–––
nvidia/k8s-nim-operator@3.1.2F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗––––✓✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
nvidia/nodewright@v0.17.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
nvidia/nodewright@v0.19.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseaicr-eks-trainingnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
nvidia/nvidia-device-plugin@0.19.3F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseeks-inferencenext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbasenfd-enablednext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
nvidia/nvsentinel@v1.9.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-pod-monitor---✗––––·✓··–····stagerender-parity·–––
nvidia/nvsentinel@v1.20.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-pod-monitor---✗––––·✓··–····stagerender-parity·–––
nvidia/nvsentinel@v1.25.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
F2bbaseno-pod-monitor---✗––––·✓··–····stagerender-parity·–––
nvidia/nvsentinel@v1.26.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-render✗––––✓✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
F2bbaseno-pod-monitornext80-render✗––––·✓··–····stagerender-parity·–––review chart analysis and create a recipe candidate
oauth2-proxy/oauth2-proxy@10.7.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
open-telemetry/opentelemetry-operator@0.114.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✗––––✓✓✓✗–!!✓✓stagetwo-cluster-kind-parity·––gitops-runtime-reviewrun catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗––––✓✓✓✗–✓✓✓✓stagelive-parity·–––run catalog promotion review
opencost/opencost@2.5.21F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantConfigHub✗tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✗–!!✗✓stagein-confighub·––runtime-reviewadd at least one user-shaped variant before catalog promotion
F2ccandidate reviewcluster-metrics-readonlycandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––modelcandidate-plan––service exposure; RBAC scope; persistence if the chart ...–design effective-values-cluster-metrics-readonly.yaml from the name...
F3candidate reviewdefault + reviewcandidatehuman reviewcandidate–tpl;capabilities;cluster-rbac;stateful-storage––––––––––––scopecandidate-plan––operator review of the runtime residue–operator-review: unknown; npm run live-parity:run -- --recipe recip...
percona/pg-operator@3.0.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––✓✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
percona/psmdb-operator@1.22.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
F2bbaseno-crds---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
percona/psmdb-operator@1.23.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗––––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
percona/pxc-operator@1.19.1F1source(source)next80sourcesource lock–lookup;crds;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓lookup;crds;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗lookup;crds;cluster-rbac–––✓✓✓✗·✓✓✓✓stagelive-parity·–––run catalog promotion review
policy-reporter/policy-reporter@3.9.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
policy-reporter/policy-reporter@3.10.0F1source(source)next80sourcesource lock–generated-facts;tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗generated-facts;tpl;capabilities;cluster-rbac–––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
projectcalico/tigera-operator@v3.32.0F1source(source)next80sourcesource lock–lookup;hooks;cluster-rbac1––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✗lookup;hooks;cluster-rbac1✓✓✓✓✓✗✓✓✓✓✓runlive-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcontroller-default-reviewedcandidatehuman reviewcandidate–lookup;hooks;cluster-rbac––––––––––––modelcandidate-plan––CRD ownership; admission/webhook behavior; RBAC scope; ...–design effective-values-controller-default-reviewed.yaml from the n...
prometheus-community/alertmanager@1.37.0F1source(source)next80sourcesource lock–tpl;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasehanext80reviewlive parity✓tpl;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
prometheus-community/kube-prometheus-stack@84.4.0F1source(source)-sourcesource lock––2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗–2✓·✓✓···✓···stagerender-parity·–––
F2bbaseaicr-eks-training-v0-20-0---✗–2✓·✓✓·······stagerender-parity·–––
F2bbaseaicr-eks-training-v1-0-0---✗–2✓·✓✓·······stagerender-parity·–––
prometheus-community/kube-prometheus-stack@85.3.3F1source(source)top20sourcesource lock–lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2✓✓✓✓✓✓✓✓✓·✓stagelive-parity✓cub-lk-kind-vanilla; namespace=monitoring; delivery...––choose the target-ready base, then record explicit security accepta...
F2bbaseno-crdstop20trylive parity✓lookup;generated-facts;tpl;capabilities;hooks;crds;cluster-rbac;webhooks;stateful-storage2✓✓✓✓✓✓✓✓✓·✓–live-parity·–––choose the target-ready base, then record explicit security accepta...
prometheus-community/kube-prometheus-stack@86.1.0F1source(source)-sourcesource lock––2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓–2✓·✓✓✓✓✓✓✓✗✓modellive-parity·––inspect-parity-diff
F2bbaseno-crds---✓–2✓·✓✓✓✓✓✓✓✓✓–live-parity·–––
prometheus-community/kube-prometheus-stack@87.15.1F1source(source)-sourcesource lock––2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗–2✓·✓✓···✓···stagerender-parity·–––
F2bbaseexisting-secret---✗–2✓·✓✓·······stagerender-parity·–––
F2bbaseno-crds---✗–2✓·✓✓···✓···stagerender-parity·–––
prometheus-community/kube-prometheus-stack@87.19.2F1source(source)-sourcesource lock––2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗–2✓·✓✓···✓···stagerender-parity·–––
F2bbaseexisting-secret---✗–2✓·✓✓·······stagerender-parity·–––
F2bbaseno-crds---✗–2✓·✓✓···✓···stagerender-parity·–––
prometheus-community/kube-prometheus-stack@88.6.3F1source(source)-sourcesource lock––2––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗–2✓·✓✓···✓···stagerender-parity·–––
F2bbaseexisting-secret---✗–2✓·✓✓·······stagerender-parity·–––
F2bbaseno-crds---✗–2✓·✓✓···✓···stagerender-parity·–––
prometheus-community/kube-state-metrics@7.4.0F1source(source)next80sourcesource lock–generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasecluster-metrics-readonlynext80reviewlive parity✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
prometheus-community/prometheus@29.8.0F1source(source)top20sourcesource lock–generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––––––––––source-lock––ha (curated proof lane - bespoke teaching needed)–choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––·✓✓✓–✓✓·✓–live-parity·–ha (curated proof lane - bespoke teaching needed)–choose the target-ready base, then record explicit security accepta...
F2bbaseserver-only-ephemeraltop20trylive parity✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage––––✓✓✓–✓✓·✓–live-parity✓cub-lk-kind-vanilla; namespace=monitoring; delivery...ha (curated proof lane - bespoke teaching needed)–choose the target-ready base, then record explicit security accepta...
F4aderived from defaultprod-us-eastderivedderivedderived clone✗generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––✓––·–––runderived-intended-state·monitoring-targets/prod-us-east–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
F4aderived from defaultstaging-eu-westderivedderivedderived clone✗generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––✓––·–––runderived-intended-state·monitoring-targets/staging-eu-west–target-bound-derived-variantbind the derived ConfigHub variant to a target and run the target-b...
F4bderived from server-only-ephemeralprod-us-eastderivedderivedtarget-bound✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––✓––✓––––target-bound-derived✓helm-expt-derived-prometheus-0605-cluster/oci––keep the target-bound derived variant receipt fresh when the source...
F4bderived from server-only-ephemeralstaging-eu-westderivedderivedtarget-bound✓generated-facts;tpl;capabilities;cluster-rbac;stateful-storage–––––✓––✓––––target-bound-derived✓helm-expt-derived-prom-stg-0605-cluster/oci––keep the target-bound derived variant receipt fresh when the source...
prometheus-community/prometheus@29.9.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓✓✓–!!✓✓deferredtwo-cluster-kind-parity·––gitops-runtime-review
F2bbaseserver-only-ephemeral---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
prometheus-community/prometheus-adapter@5.3.0F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80-live parity✗tpl;capabilities;cluster-rbac–––·✓✓✗·✗✗✗✓modelin-confighub·––capability-profile-baseRun ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and...
F2bbaseapiservice-v1-capabilitynext80-live parity✓tpl;capabilities;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––Run ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and...
F2bbasecluster-metrics-readonlynext80-live parity✗tpl;capabilities;cluster-rbac–––·✓✓✗·✗✗✗✓modelin-confighub·––capability-profile-baseRun ConfigHub proof, local live, live Helm-vs-ConfigHub parity, and...
F3candidatecluster-metrics-readonly + crdcandidatecandidatecandidate–tpl;capabilities;cluster-rbac––––––––––––stagecandidate-plan––the chart's CRDs–install-crds: unknown; npm run kind-parity:run -- --chart prometheu...
F3candidatedefault + crdcandidatecandidatecandidate–tpl;capabilities;cluster-rbac––––––––––––stagecandidate-plan––the chart's CRDs–install-crds: unknown; npm run kind-parity:run -- --chart prometheu...
prometheus-community/prometheus-blackbox-exporter@11.10.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
F2bbasecluster-metrics-readonly---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
prometheus-community/prometheus-blackbox-exporter@11.15.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
prometheus-community/prometheus-blackbox-exporter@11.18.0F1source(source)next80sourcesource lock–tpl;capabilities–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗tpl;capabilities–––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
prometheus-community/prometheus-node-exporter@4.55.0F1source(source)next80sourcesource lock–generated-facts;tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓generated-facts;tpl;capabilities;cluster-rbac–––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasecluster-metrics-readonlynext80reviewlive parity✓generated-facts;tpl;capabilities;cluster-rbac–––✓✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
prometheus-community/prometheus-operator-crds@28.0.1F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––✓✓··–····stagerender-parity·–––
F2bbaseaicr-eks-training---✗––––✓✓··–····stagerender-parity·–––
prometheus-community/prometheus-operator-crds@29.0.0F1source(source)next80sourcesource lock–generated-facts;crds–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓generated-facts;crds–––·✓✓✓·✓✓✓✓deferredlive-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcluster-metrics-readonlycandidatehuman reviewcandidate–generated-facts;crds––––––––––––modelcandidate-plan––service exposure; RBAC scope; persistence if the chart ...–design effective-values-cluster-metrics-readonly.yaml from the name...
prometheus-community/prometheus-pushgateway@3.6.0F1source(source)next80sourcesource lock–tpl;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓tpl;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewcluster-metrics-readonlycandidatehuman reviewcandidate–tpl;stateful-storage––––––––––––modelcandidate-plan––service exposure; RBAC scope; persistence if the chart ...–design effective-values-cluster-metrics-readonly.yaml from the name...
rook-release/rook-ceph@v1.19.5F1source(source)next80sourcesource lock–––––––––––––––source-lock––no-crds (template-baked CRDs; no clean chart toggle yet)–choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓·✓✓✓✓deferredlive-parity·–no-crds (template-baked CRDs; no clean chart toggle yet)–add at least one user-shaped variant before catalog promotion
rook-release/rook-ceph-cluster@v1.19.5F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlocal live✗––––✓✓✓✓–✗✗✗✓stagelocal-live·––stage-prerequisiteadd at least one user-shaped variant before catalog promotion
F3candidatedefault + namespacecandidatecandidatecandidate––––––––––––––stagecandidate-plan––Namespace rook-ceph–create-namespace: Namespace rook-ceph; npm run live-parity:run -- -...
runix/pgadmin4@1.62.0F1source(source)next80sourcesource lock–tpl;capabilities;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓tpl;capabilities;stateful-storage–––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
F2ccandidate reviewweb-ui-existing-secretcandidatehuman reviewcandidate–tpl;capabilities;stateful-storage––––––––––––modelcandidate-plan––Service/Ingress shape; TLS Secret reference; auth or ad...–design effective-values-web-ui-existing-secret.yaml from the named ...
sealed-secrets/sealed-secrets@2.18.6F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
secrets-store-csi-driver/secrets-store-csi-driver@1.6.0F1source(source)top20sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaulttop20trylive parity✓–––––✓✓✓–✓✓✓✓–live-parity✓cub-lk-kind-vanilla; namespace=kube-system; deliver...––choose the target-ready base, then record explicit security accepta...
F2bbasesync-secret-rotationtop20trylive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––choose the target-ready base, then record explicit security accepta...
stakater/reloader@2.2.12F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
F2bbasecontroller-default-reviewed---✓––––·✓✓✓–✓✓✓✓–live-parity·–––
stakater/reloader@2.2.14F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
stakater/reloader@2.2.16F1source(source)next80sourcesource lock–tpl;capabilities;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗tpl;capabilities;cluster-rbac–––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
strimzi/strimzi-kafka-operator@1.0.0F1source(source)next80sourcesource lock–tpl;capabilities;crds;cluster-rbac–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓tpl;capabilities;crds;cluster-rbac–––·✓✓✓·✓✓✓✓deferredlive-parity·–––run catalog promotion review
F2bbaseno-crdsnext80reviewlive parity✗tpl;capabilities;crds;cluster-rbac–––✓✓✓✗·✓✓✓✓stagelive-parity·–––run catalog promotion review
traefik/traefik@40.2.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✓––––·✓✓✓–✓✓✗✓modellive-parity·––inspect-parity-diff
F2bbaseno-crds---✗––––·✓✓✓–!!✓✓deferredtwo-cluster-kind-parity·––gitops-runtime-review
F2ccandidate reviewcloud-loadbalancercandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––service.type=LoadBalancer; ingressClass.isDefaultClass ...–Normal cloud ingress-controller shape with explicit load balancer o...
F2ccandidate reviewexternal-crdscandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––providers.kubernetesCRD.enabled=false or CRD install di...–Use Traefik while CRD ownership is handled outside the package.; co...
F2ccandidateinternal-clusterip-dashboard-offcandidatecandidatecandidate––––––––––––––modelcandidate-plan––service.type=ClusterIP; ingressRoute.dashboard.enabled=...–Safe local/internal install with no public LoadBalancer and dashboa...
traefik/traefik@41.0.2F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
traefik/traefik@41.4.0F1source(source)next80sourcesource lock–lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗lookup;generated-facts;tpl;capabilities;crds;cluster-rbac;webhooks;stateful-storage–––·✓·······stagerender-parity·–––add at least one user-shaped variant before catalog promotion
valkey/valkey@0.11.0F1source(source)next80sourcesource lock–tpl;stateful-storage–––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantrender✗tpl;stateful-storage–––·✓··–····stagerender-parity·–––add at least one user-shaped variant before catalog promotion
velero/velero@12.0.1F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewConfigHub✗––––·✓✓✗–✗✗✗✓modelin-confighub·––render-input-modelrun catalog promotion review
F2bbaseno-crdsnext80reviewConfigHub✗––––·✓✓✗–✗✗✗✓modelin-confighub·––render-input-modelrun catalog promotion review
F2ccandidate reviewaws-s3-existing-secretcandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––configuration.backupStorageLocation provider=aws; confi...–AWS S3 backup location with cloud credentials supplied externally.;...
F2ccandidate reviewazure-blob-existing-secretcandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––configuration.backupStorageLocation provider=azure; buc...–Azure Blob backup location with credentials supplied externally.
F2ccandidate reviewfilesystem-backup-node-agentcandidatehuman reviewcandidate––––––––––––––modelcandidate-plan––deployNodeAgent=true; configuration.features reviewed; ...–Enable node-agent path for filesystem backup coverage.; daemonset p...
F3candidateno-crds + crdcandidatecandidatecandidate––––––––––––––stagecandidate-plan––the chart's CRDs–install-crds: unknown; npm run kind-parity:run -- --chart velero/ve...
velero/velero@12.1.0F1source(source)-sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefault---✗––––·✓··–····stagerender-parity·–––
vm/victoria-logs-single@0.12.5F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80needs variantlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––add at least one user-shaped variant before catalog promotion
vm/victoria-metrics-single@0.39.0F1source(source)next80sourcesource lock–––––––––––––––source-lock––––choose or create an F2 base before rendering or deploying
F2abasedefaultnext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review
F2bbasedefault-reviewednext80reviewlive parity✓––––·✓✓✓–✓✓✓✓–live-parity·–––run catalog promotion review