apiVersion: v2
name: bp-cert-manager
# 1.2.1 (Fix #158, 2026-05-11): crdGate hook image switched from
# docker.io/bitnami/kubectl:1.30.4 to docker.io/bitnamilegacy/kubectl:
# 1.30.7. Bitnami's 2025-08 secure-images cutover deleted every versioned
# tag from docker.io/bitnami/kubectl (only :latest + sha256-named tags
# remain), causing ImagePullBackOff on fresh Sovereign provisions
# (prov #27 wedge). bitnamilegacy is Bitnami's deprecation-fallback
# path with bash/sh preserved.
#
# 1.2.2 (Fix #163, 2026-05-11, MIRROR-EVERYTHING): crdGate hook image
# switched from bitnamilegacy/kubectl:1.30.7 to
# harbor.openova.io/proxy-dockerhub/bitnamilegacy/kubectl:1.30.7.
# Per CLAUDE.md inviolable rule, ALL chart-hook references MUST be
# explicit Harbor proxy-cache form — not just rely on the node-level
# containerd mirror in registries.yaml.
version: 1.2.2
description: |
  Catalyst-curated Blueprint umbrella chart for cert-manager. Depends on the
  upstream `cert-manager` chart (Jetstack) as a Helm subchart so
  `helm dependency build` pulls the upstream payload into this artifact;
  the Catalyst overlay templates in templates/ (ClusterIssuers, NetworkPolicy,
  ExternalSecret, ServiceMonitor) sit alongside the upstream subchart and
  Helm renders both at install time. Catalyst-curated values flow into the
  upstream subchart under the `cert-manager:` key in values.yaml.
type: application
keywords: [catalyst, blueprint, cert-manager]
maintainers:
  - name: OpenOva Catalyst
    email: catalyst@openova.io

# Upstream chart pulled in as a Helm subchart so `helm dependency build`
# bundles it into the OCI artifact. Pinned to jetstack/cert-manager v1.16.2
# (matches platform/cert-manager/blueprint.yaml + values.yaml
# `catalystBlueprint.upstream.version`). Per
# docs/INVIOLABLE-PRINCIPLES.md #4 (never hardcode) the version is
# operator-bumpable via PR + Blueprint release.
dependencies:
  - name: cert-manager
    version: "v1.16.2"
    repository: "https://charts.jetstack.io"
