1. What do you need?
Read the result before choosing an example
| Question | What an example must show |
|---|---|
| What do I have? | The source, snapshot, package, OCI, or exact files that were inspected. |
| What will it produce? | The source-native command and exact output, or a recorded no-op for literal configuration. |
| Can this destination accept it? | The named destination, current facts, exact candidate, and checks that ran. |
| Did it work? | The exact delivered revision and the controller, resource, workload, runtime, drift, or rollback evidence actually collected. |
An example may answer only one or two questions. Later stages remain blocked or not run until their required input exists.
Choose the closest job. Each link opens a tested starting point or the shortest current path to one.
| I need | Start here |
|---|---|
| A database or cache | Try the Redis configuration. Render it locally, read the 14 objects, and check the recorded Helm match and install requirements. |
| Cluster monitoring | Find Kube Prometheus Stack. Compare exact versions and delivery evidence, and see the CRD and hook work rendered YAML does not show on what charts hide. |
| Ingress and certificates | Start with ingress-nginx, then add cert-manager. The Catalog records the setup work that rendered YAML does not explain. |
| AI inference | Start with AICR. Compare existing GPU nodes without a recipe, or inspect the exact CPU-starter Applications and OCI without an account, cluster, or GPU. Then continue to the NIM and EKS examples below. |
| An internal developer platform | Build a small platform with Catalog components, Kubara, and AI. Review native Kubara configuration, generate Git and OCI outputs, then retain and promote platform components, developer tools, and applications separately in ConfigHub. |
| A chart or configuration I already have | Check my config. Bring the values, YAML, OCI, or work made by AI. Compare it with defaults, Catalog records, or what you run now. |
Missing the component or use case you need? Tell us what you are trying to run.
Six worked examples
Choose the question closest to yours. Each example links the result to the files and evidence that support it.
| Question | Worked example | Result |
|---|---|---|
| What will this package install? | Inspect Redis without an account | Render 14 Kubernetes objects, keep password material out of the package, and compare the result with Helm. Check the live comparison. |
| What did AI-written values change? | Review an NGINX values file | Keep the requested three replicas, correct six risky settings, and retain five reviewed objects as files or OCI. Read the review. |
| Can I promote the reviewed change? | Move NGINX from development to staging | Compare three and four replicas, promote the exact revision in ConfigHub, publish OCI, and record four ready replicas through Argo CD. Check the promotion. |
| How should hooks and CRDs run? | Install and upgrade Kube Prometheus Stack | See the install order and the disposition each route earns on what charts hide, then check the lifecycle proof. |
| Can I build a platform from tested parts? | Build a Kubara platform | Choose Catalog components, generate native Kubara configuration, and carry the reviewed Git and OCI result into ConfigHub. The page shows which platform and live checks are current. |
| Can I inspect AI infrastructure without a GPU? | Inspect the AICR CPU starter | Pull seven exact Argo CD Applications, verify every file, and write a local OCI without an account, cluster, cloud account, or GPU. Check the anonymous run. |
2. Try a simple example: Redis
See what Redis installs, before you install it
Turn the published Redis package into the exact Kubernetes files it produces. You need no account, no login, and no cluster.
New to cub? Install the cub CLI first. Public catalog packages pull and render anonymously, and you sign in only once a command saves or changes ConfigHub data.
Here is what the command does. cub installer is an open-source plugin for the cub CLI. cub installer setup pulls a catalog package and writes its Kubernetes files locally, leaving delivery to kubectl, Argo CD or Flux. The generated scripts stop before doing any work when the plugin or kustomize is missing.
$ cub installer setup \
--pull oci://europe-west1-docker.pkg.dev/nth-fort-499605-q5/helm-expt/bitnami-redis:25.5.3@sha256:a216ce212424e05b341ef5000f1798e6014b72b8bc3dce9f315285871037af2a \
--base reuse-existing-secret \
--work-dir ./redis \
--non-interactive \
--namespace redis
Base: reuse-existing-secret; components: []
Namespace: redis
Rendered 14 manifest(s) to ./redis/out/manifests
Rendered 0 secret(s)
Read the 14 files in ./redis/out/manifests. The package holds no password. You supply the Secret redis/redis-existing-secret yourself.
These 14 files were checked against Helm's own output and matched. See the detailed Redis walkthrough for the recorded parity, upgrade, and rollback evidence.
To keep an edit to the files as well, the same objects go into ConfigHub. There you change a value, move it from development to staging, and roll it back. Keep the result in ConfigHub.
If you do not want Redis, choose the input you have below. Every path ends with exact files and a checked result.
Each example includes the source files and the evidence behind its result.
| What you have | Start with this example |
|---|---|
| A ready-made Helm package | Start with Redis. Render 14 objects and check the recorded Helm match and install requirements. Detailed walkthrough · Package and evidence · GitHub source · ConfigHub example |
| Your own Helm chart and values | Check the chart and values your AI produced. Render locally with cub helm, compare exact objects, and keep a review record. The worked NGINX case keeps the requested change and corrects six risky settings.Commands · NGINX review · OCI publication · GitHub source · ConfigHub example |
| An AICR recipe or inference stack | Choose an AICR question. Compare GPU-node snapshots without a recipe, or pull and verify the seven-Application CPU starter without an account, cluster, or GPU. Then compare the real CPU model request, NIM, and full EKS paths below. AICR v0.20 H100 training starting configuration · v0.19 managed stages |
| A Timoni module | Inspect the Timoni Redis example. Compare its immutable module source, typed options, seven exact objects, lifecycle order, public OCI, and ConfigHub base and development variant. Base guide · Development variant · Proof and limits |
| An existing OCI package | Inspect the OCI. Extract its exact objects, compare them in the browser, or change one field. Pull the result back and compare it before publishing. Transform proof · GitHub source · Publication and import proof · ConfigHub example |
| Kubernetes YAML or an existing app | Check or compare the YAML in the browser. Keep the review beside the files, then follow the existing-app guide to upload four ordinary Kubernetes objects and read them back unchanged. Exact import proof · GitHub fixture · ConfigHub example. The official tutorial continues into change, release, production, and promotion. |
Get inference running
Choose the row that answers your immediate question. The first path runs a model on ordinary ARM64 hardware. The later paths explain larger AI platforms without claiming that their GPU workloads have run here.
| Start here | What it gives you | What you need | What we checked |
|---|---|---|---|
| Run one small model on CPU | A pinned vLLM server, a pinned public Qwen model, and one OpenAI-compatible request. | An ARM64 Kubernetes cluster with 4 CPUs and 10 GiB available. No GPU, cloud account, ConfigHub account, or model credential. | ConfigHub retained the two changed Units, published OCI, Argo CD pulled the same digest, the pod became ready, and the model answered. Read the proof. |
| Inspect GPU state or an AICR platform | Use snapshot and diff for existing GPU nodes without a recipe, or anonymously pull the retained AICR platform and select a reviewed seven-Application CPU starter. Read the detailed configuration record. | Snapshot needs read access to a Kubernetes cluster. The retained-configuration path needs only ORAS and a laptop; no GPU, cloud account, NGC key, ConfigHub account, registry login, or cluster. | The retained path checks the source digest, seven selected file hashes, source-and-intent record, local OCI digest, and pull-back comparison. Read the anonymous run. Snapshot findings, configuration inspection, destination checks, and model inference remain separate results. |
| Plan NVIDIA NIM serving | Choose the AICR platform or a specific KServe model shape. | AWS or equivalent GPU capacity and NGC access to run the model images. Reading the retained configuration needs neither. | Sources, versions, model shapes, credentials boundary, ConfigHub changes, and config-plane delivery are checked. No NIM container or model ran. |
| Build the full EKS inference platform | Eight ordered bundles for ACK, networking, EKS, Karpenter, the GPU runtime, and inference workloads. | A ConfigHub account for the configuration sandbox. AWS and GPU capacity for the real cloud path. | All eight source bundles, the ConfigHub sandbox, one promoted change, Argo CD delivery, and the separate CPU model request are checked. AWS and NVIDIA GPU execution remain open. Open the plugin. |
Review an AI agent fleet before it runs
An agent service has settings for its model, runtime images, budget, concurrency, credentials, storage, and access. The c3agent example turns those choices into ten exact Kubernetes objects without storing a credential or starting the service.
The recorded test kept one base configuration. It changed only the fleet settings for staging and production. The accepted result was promoted, published as OCI, and reconciled by Argo CD on Kubernetes. Both Deployments stayed at zero replicas. This proves the configuration and delivery path, not the private c3agent runtime or an agent task.
Read the c3agent walkthrough · Open the source files · Check the live proof
Bring your own Helm chart and values
Render your own chart with cub helm template, check the exact objects on Check my config, then keep the result as files, as OCI, or in ConfigHub with cub helm install. See the four paths for a chart the catalog does not have, and where each setting belongs. The worked NGINX review starts with AI-written values, keeps the requested replica count, and corrects six settings before deployment.
3. Choose how to run a starting example
Local or CI — available now
Use public tools and packages without ConfigHub Server or an account. Public catalog packages also need no Google registry login.
Hosted without sign-in — available for rendered YAML
Check my config can inventory and compare rendered Kubernetes YAML in your browser. The files are not uploaded. It does not render a chart, pull OCI, contact Kubernetes, or run live tests.
ConfigHub — available now
Save the reviewed objects and work with a team. An account is required. Follow the official tutorial.
These three choices apply to starting examples. The examples below use ConfigHub Server because their job is to manage saved configuration.
4. Continue in ConfigHub
ConfigHub keeps reviewed Kubernetes configuration as shared data. Teams can change it, approve it, promote it, and publish releases for deployment.
| Job | Working example | Where to go |
|---|---|---|
| Save and change | Upload reviewed objects as a base variant. Make an exact development or customer change without changing the source chart. | Variants · Command walkthrough |
| Promote | Redis and NGINX examples record derived changes, promote them in order, publish reviewed OCI artifacts, and check the resulting workloads. | Compare my next change · BYO Helm promotion · Redis promotion and rollback |
| Deliver through OCI | NGINX and the hook fixture have passed recorded OCI delivery through Argo CD and Flux without rerendering the reviewed objects. Separate direct local tests consumed the same artifacts. | Delivery guide · Argo CD and Flux proof |
| Apply checks and approvals | Schema, placeholder, and lifecycle-route checks can block bad configuration. Image and probe checks warn. Selected production and system configuration also requires approval. | Functional proof · Policy assignments |
5. Build or roll out a platform
Build a small Kubara platform from tested Catalog components. Choose services, record optional digest-pinned runtime images, and review the native Kubara config before generation. The advanced examples below continue into ConfigHub and a fleet.
A platform team runs the same components on many clusters. Tools like Kubara and Sveltos build these platforms. Sveltos installs one component across a group of clusters. Kubara describes a whole platform at once and generates its files.
ConfigHub does the same job for both. It stores the result, checks it, and moves a change from one environment to the next. You cannot run a whole fleet in a web page, so each row links a walkthrough and the recorded evidence.
| Example | What has run | Open |
|---|---|---|
| Kubara | Choose components and custom runtime images, generate the platform with Kubara, then keep reviewed versions and fleet operations in ConfigHub. | Build a platform · Six-step adoption tutorial · GUI tour · Evidence checkpoints · Technical mini-IDP runbook · Importer reference · Matrix and wiring evidence · Ordinary Kubara output · Prepared importer handoff · Preparation receipt · Catalog parity receipt · Historical v0.12 proof |
| Sveltos | A reviewed ClusterProfile moved from one pilot cluster to two staging clusters at a second OCI digest, and Sveltos restored a deliberately drifted value. | Walkthrough · GitHub source · Proof · Space guide |
An internal developer platform with apps on it
ConfigHub simplifies Kubara without making it fundamentally different. Kubara's catalogs, config.yaml, values overlays, generated components, and hub-and-spoke model remain recognizable. ConfigHub adds exact component retention, semantic review, approvals, promotion, rollback, a component-by-cluster matrix with explicit live or unknown state, and visible wiring. Argo CD still reconciles.
The current Kubara source selects seven platform roles across one hub and three spokes. The Kubara page holds the architecture, the exact observation boundaries, and what the receipts do and do not prove.
Start with the Kubara buyer journey · Follow the six-step tutorial · Open the matrix and wiring evidence.
6. Use saved configuration for a repeated job
Each row has a working example. The final column says what is still needed before the same result can be offered more generally.
| App | Working example | Open | Still to build |
|---|---|---|---|
| Upgrade App | Redis upgrades from chart 25.5.3 to 27.0.0 without losing a post-render replica change, moves through development and staging, reaches two Argo CD clusters, and rolls back. | Walkthrough · GitHub source · Proof · Space guide | This is a guarded demonstration and receipt, not a finished ConfigHub App interface. |
| Hooks and CRDs App | Kube Prometheus Stack passes the recorded CRD, certificate, workload, webhook, and runtime sequence on fresh installs and on an 85.3.3 to 86.1.0 upgrade through Argo CD and Flux. | Walkthrough · GitHub source · Proof · Space guide | ConfigHub does not yet select and execute the chart-specific route automatically. |
| RBAC Review App | One review removes unnecessary Secret access, keeps ConfigMap access, requires approval, publishes OCI, and reaches Kubernetes through Argo CD. | Walkthrough · GitHub source · Proof · no permanent demo Space | The example does not yet build a complete RBAC binding graph across a live fleet. |
| Fleet Platform App | Kubara proves one platform target, while Sveltos proves a pilot and two-cluster expansion with separate reviewed OCI digests and drift recovery. | Walkthrough · GitHub source · Proof · Space guide | A large mixed-source fleet rollout with failure-based pausing remains open. |
| AI Change Review App | The example finds an unpinned image and inline API key, clears the reviewed replacement, and proves that approval controls the ConfigHub apply dry-run. | Walkthrough · GitHub source · Proof · no permanent demo Space | Kubernetes delivery, promotion, rollback, GPU workload health, and live observation have not run for this candidate. |