{
  "hetzner_csi": {
    "allow_volume_expansion": true,
    "concerns": {
      "backup": {
        "kind": "disabled",
        "reason": "state in K8s API captured by SystemBackupDef.cluster_resources; persistent volumes captured by per-component policies"
      },
      "certs": {
        "kind": "disabled",
        "reason": "no ACME issuer required"
      },
      "dns": {
        "kind": "disabled",
        "reason": "no DNS records owned by this component"
      },
      "observability": {
        "backlog_ref": "OBS-001",
        "kind": "pending",
        "reason": "ObservabilityImpl iteration deferred — surface stub only"
      },
      "security": {
        "backlog_ref": "SEC-001",
        "kind": "pending",
        "reason": "SecurityImpl iteration deferred — surface stub only"
      },
      "tls": {
        "kind": "disabled",
        "reason": "controller-level RBAC, not TLS endpoint"
      }
    },
    "default_fs_type": "ext4",
    "enable_snapshot_class": false,
    "live_check": {
      "namespace": "kube-system",
      "scope": "cp_only",
      "selector": "hcloud-csi",
      "strategy": "k8s_pods"
    },
    "mode": "cluster",
    "operations": {
      "delete": true,
      "health": true,
      "install": true,
      "reinstall": true
    },
    "reclaim_policy": "Retain",
    "storage_class_name": "hcloud-volumes",
    "token_secret_name": "hcloud",
    "version": "2.9.0"
  }
}