apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: checksum/config: 8ad46ce4f1a6f121656387405c362297b26686ca4d428758b0de3c0fc3bcfd97 creationTimestamp: "2026-06-03T03:52:10Z" generateName: contour-contour-5847f7c7f9- labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 pod-template-hash: 5847f7c7f9 name: contour-contour-5847f7c7f9-vxwnb namespace: projectcontour ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: contour-contour-5847f7c7f9 uid: 13dfd005-15ce-43a0-bc2a-5643732fe4bc resourceVersion: "607" uid: 1c3748fb-1888-4e48-a1d7-48f1d7e6d7aa spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour topologyKey: kubernetes.io/hostname weight: 1 automountServiceAccountToken: true containers: - args: - serve - --incluster - --xds-address=0.0.0.0 - --xds-port=8001 - --http-port=8000 - --envoy-service-http-port=8080 - --envoy-service-https-port=8443 - --contour-cafile=/certs/ca.crt - --contour-cert-file=/certs/tls.crt - --contour-key-file=/certs/tls.key - --config-path=/config/contour.yaml - --envoy-service-namespace=projectcontour - --envoy-service-name=contour-envoy - --leader-election-resource-name=projectcontour-contour-contour - --log-format=text - --kubernetes-debug=0 command: - contour env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: BITNAMI_DEBUG value: "false" image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: 8000 timeoutSeconds: 5 name: contour ports: - containerPort: 8001 name: xds protocol: TCP - containerPort: 8000 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8000 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /certs name: contourcert readOnly: true - mountPath: /config name: contour-config readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-pzgz6 readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: chart-test-swarm-run-9-control-plane preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1001 fsGroupChangePolicy: Always serviceAccount: contour-contour serviceAccountName: contour-contour terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: contourcert secret: defaultMode: 420 secretName: contourcert - configMap: defaultMode: 420 items: - key: contour.yaml path: contour.yaml name: contour name: contour-config - name: kube-api-access-pzgz6 projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:11Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:10Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:30Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:30Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:10Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://4e0077f517920ce1416c99b19f76383b9b8c2195b51336c23848fe27f34c05d6 image: ghcr.io/projectcontour/contour:v1.33.5 imageID: ghcr.io/projectcontour/contour@sha256:fc005b50254df59fab555fc008501df4552ae2208783663f6c28931b3e5849e4 lastState: {} name: contour ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-03T03:52:11Z" hostIP: 172.20.0.3 hostIPs: - ip: 172.20.0.3 phase: Running podIP: 10.244.0.6 podIPs: - ip: 10.244.0.6 qosClass: Burstable startTime: "2026-06-03T03:52:10Z" - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-03T03:52:10Z" generateName: contour-envoy- labels: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 controller-revision-hash: 6b5ff8bb helm.sh/chart: contour-0.6.0 pod-template-generation: "1" name: contour-envoy-vxvcj namespace: projectcontour ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: DaemonSet name: contour-envoy uid: 655b7e9f-67d6-4299-8f7c-246a1dfbd4f2 resourceVersion: "621" uid: da845ba9-5817-45ff-ab87-df9cad5c2ac3 spec: affinity: nodeAffinity: requiredDuringSchedulingIgnoredDuringExecution: nodeSelectorTerms: - matchFields: - key: metadata.name operator: In values: - chart-test-swarm-run-9-control-plane automountServiceAccountToken: false containers: - args: - envoy - shutdown-manager - --serve-port=8090 command: - contour image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent lifecycle: preStop: exec: command: - contour - envoy - shutdown livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: http-shutdown timeoutSeconds: 5 name: shutdown-manager ports: - containerPort: 8090 name: http-shutdown protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: http-shutdown scheme: HTTP initialDelaySeconds: 10 periodSeconds: 3 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /admin name: empty-dir subPath: app-admin-dir - args: - -c - /config/envoy.json - --service-cluster $(CONTOUR_NAMESPACE) - --service-node $(ENVOY_POD_NAME) - --log-level info command: - envoy env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: ENVOY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: docker.io/envoyproxy/envoy:v1.35.10 imagePullPolicy: IfNotPresent lifecycle: preStop: httpGet: path: /shutdown port: 8090 scheme: HTTP livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: 8002 timeoutSeconds: 5 name: envoy ports: - containerPort: 8080 name: http protocol: TCP - containerPort: 8443 name: https protocol: TCP - containerPort: 8002 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8002 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 3 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: empty-dir subPath: app-conf-dir - mountPath: /certs name: envoycert readOnly: true - mountPath: /admin name: empty-dir subPath: app-admin-dir dnsPolicy: ClusterFirst enableServiceLinks: true initContainers: - args: - bootstrap - /config/envoy.json - --xds-address=contour - --xds-port=8001 - --resources-dir=/config/resources - --envoy-cafile=/certs/ca.crt - --envoy-cert-file=/certs/tls.crt - --envoy-key-file=/certs/tls.key command: - contour env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent name: envoy-initconfig resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: empty-dir subPath: app-conf-dir - mountPath: /certs name: envoycert readOnly: true - mountPath: /admin name: empty-dir subPath: app-admin-dir nodeName: chart-test-swarm-run-9-control-plane preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 0 fsGroupChangePolicy: Always serviceAccount: contour-envoy serviceAccountName: contour-envoy terminationGracePeriodSeconds: 300 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists - effect: NoSchedule key: node.kubernetes.io/disk-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/memory-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/pid-pressure operator: Exists - effect: NoSchedule key: node.kubernetes.io/unschedulable operator: Exists volumes: - emptyDir: {} name: empty-dir - name: envoycert secret: defaultMode: 420 secretName: envoycert status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:11Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:11Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:34Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:34Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-03T03:52:10Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://89873b9c8c6872b78eaac53ff1283384994f7f62bc7bc0b4e74ee1dc3f74390d image: docker.io/envoyproxy/envoy:v1.35.10 imageID: docker.io/envoyproxy/envoy@sha256:8537189cdf7beb9369ed3584dc263141b8eeb556576d297182ba747591722ae5 lastState: {} name: envoy ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-03T03:52:14Z" - containerID: containerd://cbd0f5ac99e853084b3587d9cc99feec94b6b34ca93b37bcf6e9a4197cda9921 image: ghcr.io/projectcontour/contour:v1.33.5 imageID: ghcr.io/projectcontour/contour@sha256:fc005b50254df59fab555fc008501df4552ae2208783663f6c28931b3e5849e4 lastState: {} name: shutdown-manager ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-03T03:52:12Z" hostIP: 172.20.0.3 hostIPs: - ip: 172.20.0.3 initContainerStatuses: - containerID: containerd://c17db58e0ca1ddd4ab7488c601c3f76dd08c4df321c1848dc45f3125e4593996 image: ghcr.io/projectcontour/contour:v1.33.5 imageID: ghcr.io/projectcontour/contour@sha256:fc005b50254df59fab555fc008501df4552ae2208783663f6c28931b3e5849e4 lastState: {} name: envoy-initconfig ready: true restartCount: 0 started: false state: terminated: containerID: containerd://c17db58e0ca1ddd4ab7488c601c3f76dd08c4df321c1848dc45f3125e4593996 exitCode: 0 finishedAt: "2026-06-03T03:52:11Z" reason: Completed startedAt: "2026-06-03T03:52:10Z" phase: Running podIP: 10.244.0.7 podIPs: - ip: 10.244.0.7 qosClass: Burstable startTime: "2026-06-03T03:52:10Z" - apiVersion: v1 kind: Service metadata: annotations: meta.helm.sh/release-name: contour meta.helm.sh/release-namespace: projectcontour creationTimestamp: "2026-06-03T03:52:10Z" labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 name: contour namespace: projectcontour resourceVersion: "512" uid: b0901633-ac7b-48e1-ac6d-3218df6d69cd spec: clusterIP: 10.96.199.190 clusterIPs: - 10.96.199.190 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: tcp-xds port: 8001 protocol: TCP targetPort: xds selector: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: v1 kind: Service metadata: annotations: meta.helm.sh/release-name: contour meta.helm.sh/release-namespace: projectcontour service.beta.kubernetes.io/aws-load-balancer-backend-protocol: tcp creationTimestamp: "2026-06-03T03:52:10Z" labels: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 name: contour-envoy namespace: projectcontour resourceVersion: "517" uid: 5fb89110-3c1d-4b4b-97d9-b9adb6139bc2 spec: allocateLoadBalancerNodePorts: true clusterIP: 10.96.176.67 clusterIPs: - 10.96.176.67 externalTrafficPolicy: Local healthCheckNodePort: 31112 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: http nodePort: 30608 port: 80 protocol: TCP targetPort: http - name: https nodePort: 31116 port: 443 protocol: TCP targetPort: https selector: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/name: contour sessionAffinity: None type: LoadBalancer status: loadBalancer: {} - apiVersion: apps/v1 kind: DaemonSet metadata: annotations: deprecated.daemonset.template.generation: "1" meta.helm.sh/release-name: contour meta.helm.sh/release-namespace: projectcontour creationTimestamp: "2026-06-03T03:52:10Z" generation: 1 labels: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 name: contour-envoy namespace: projectcontour resourceVersion: "624" uid: 655b7e9f-67d6-4299-8f7c-246a1dfbd4f2 spec: revisionHistoryLimit: 10 selector: matchLabels: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/name: contour template: metadata: creationTimestamp: null labels: app.kubernetes.io/component: envoy app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 spec: affinity: {} automountServiceAccountToken: false containers: - args: - envoy - shutdown-manager - --serve-port=8090 command: - contour image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent lifecycle: preStop: exec: command: - contour - envoy - shutdown livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: http-shutdown timeoutSeconds: 5 name: shutdown-manager ports: - containerPort: 8090 name: http-shutdown protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: http-shutdown scheme: HTTP initialDelaySeconds: 10 periodSeconds: 3 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /admin name: empty-dir subPath: app-admin-dir - args: - -c - /config/envoy.json - --service-cluster $(CONTOUR_NAMESPACE) - --service-node $(ENVOY_POD_NAME) - --log-level info command: - envoy env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: ENVOY_POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name image: docker.io/envoyproxy/envoy:v1.35.10 imagePullPolicy: IfNotPresent lifecycle: preStop: httpGet: path: /shutdown port: 8090 scheme: HTTP livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: 8002 timeoutSeconds: 5 name: envoy ports: - containerPort: 8080 name: http protocol: TCP - containerPort: 8443 name: https protocol: TCP - containerPort: 8002 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /ready port: 8002 scheme: HTTP initialDelaySeconds: 10 periodSeconds: 3 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: empty-dir subPath: app-conf-dir - mountPath: /certs name: envoycert readOnly: true - mountPath: /admin name: empty-dir subPath: app-admin-dir dnsPolicy: ClusterFirst initContainers: - args: - bootstrap - /config/envoy.json - --xds-address=contour - --xds-port=8001 - --resources-dir=/config/resources - --envoy-cafile=/certs/ca.crt - --envoy-cert-file=/certs/tls.crt - --envoy-key-file=/certs/tls.key command: - contour env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent name: envoy-initconfig resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: empty-dir subPath: app-conf-dir - mountPath: /certs name: envoycert readOnly: true - mountPath: /admin name: empty-dir subPath: app-admin-dir restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 0 fsGroupChangePolicy: Always serviceAccount: contour-envoy serviceAccountName: contour-envoy terminationGracePeriodSeconds: 300 volumes: - emptyDir: {} name: empty-dir - name: envoycert secret: defaultMode: 420 secretName: envoycert updateStrategy: rollingUpdate: maxSurge: 0 maxUnavailable: 1 type: RollingUpdate status: currentNumberScheduled: 1 desiredNumberScheduled: 1 numberAvailable: 1 numberMisscheduled: 0 numberReady: 1 observedGeneration: 1 updatedNumberScheduled: 1 - apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "1" meta.helm.sh/release-name: contour meta.helm.sh/release-namespace: projectcontour creationTimestamp: "2026-06-03T03:52:10Z" generation: 1 labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 name: contour-contour namespace: projectcontour resourceVersion: "611" uid: d173f299-2b40-4000-9603-1634b8cd1de1 spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: annotations: checksum/config: 8ad46ce4f1a6f121656387405c362297b26686ca4d428758b0de3c0fc3bcfd97 creationTimestamp: null labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour topologyKey: kubernetes.io/hostname weight: 1 automountServiceAccountToken: true containers: - args: - serve - --incluster - --xds-address=0.0.0.0 - --xds-port=8001 - --http-port=8000 - --envoy-service-http-port=8080 - --envoy-service-https-port=8443 - --contour-cafile=/certs/ca.crt - --contour-cert-file=/certs/tls.crt - --contour-key-file=/certs/tls.key - --config-path=/config/contour.yaml - --envoy-service-namespace=projectcontour - --envoy-service-name=contour-envoy - --leader-election-resource-name=projectcontour-contour-contour - --log-format=text - --kubernetes-debug=0 command: - contour env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: BITNAMI_DEBUG value: "false" image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: 8000 timeoutSeconds: 5 name: contour ports: - containerPort: 8001 name: xds protocol: TCP - containerPort: 8000 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8000 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /certs name: contourcert readOnly: true - mountPath: /config name: contour-config readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1001 fsGroupChangePolicy: Always serviceAccount: contour-contour serviceAccountName: contour-contour terminationGracePeriodSeconds: 30 volumes: - name: contourcert secret: defaultMode: 420 secretName: contourcert - configMap: defaultMode: 420 items: - key: contour.yaml path: contour.yaml name: contour name: contour-config status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-06-03T03:52:30Z" lastUpdateTime: "2026-06-03T03:52:30Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-06-03T03:52:10Z" lastUpdateTime: "2026-06-03T03:52:30Z" message: ReplicaSet "contour-contour-5847f7c7f9" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "2" deployment.kubernetes.io/revision: "1" meta.helm.sh/release-name: contour meta.helm.sh/release-namespace: projectcontour creationTimestamp: "2026-06-03T03:52:10Z" generation: 1 labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 pod-template-hash: 5847f7c7f9 name: contour-contour-5847f7c7f9 namespace: projectcontour ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: contour-contour uid: d173f299-2b40-4000-9603-1634b8cd1de1 resourceVersion: "610" uid: 13dfd005-15ce-43a0-bc2a-5643732fe4bc spec: replicas: 1 selector: matchLabels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour pod-template-hash: 5847f7c7f9 template: metadata: annotations: checksum/config: 8ad46ce4f1a6f121656387405c362297b26686ca4d428758b0de3c0fc3bcfd97 creationTimestamp: null labels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: contour app.kubernetes.io/version: 1.33.5 helm.sh/chart: contour-0.6.0 pod-template-hash: 5847f7c7f9 spec: affinity: podAntiAffinity: preferredDuringSchedulingIgnoredDuringExecution: - podAffinityTerm: labelSelector: matchLabels: app.kubernetes.io/component: contour app.kubernetes.io/instance: contour app.kubernetes.io/name: contour topologyKey: kubernetes.io/hostname weight: 1 automountServiceAccountToken: true containers: - args: - serve - --incluster - --xds-address=0.0.0.0 - --xds-port=8001 - --http-port=8000 - --envoy-service-http-port=8080 - --envoy-service-https-port=8443 - --contour-cafile=/certs/ca.crt - --contour-cert-file=/certs/tls.crt - --contour-key-file=/certs/tls.key - --config-path=/config/contour.yaml - --envoy-service-namespace=projectcontour - --envoy-service-name=contour-envoy - --leader-election-resource-name=projectcontour-contour-contour - --log-format=text - --kubernetes-debug=0 command: - contour env: - name: CONTOUR_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: POD_NAME valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.name - name: BITNAMI_DEBUG value: "false" image: ghcr.io/projectcontour/contour:v1.33.5 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 6 initialDelaySeconds: 120 periodSeconds: 20 successThreshold: 1 tcpSocket: port: 8000 timeoutSeconds: 5 name: contour ports: - containerPort: 8001 name: xds protocol: TCP - containerPort: 8000 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8000 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 5 resources: limits: cpu: 150m ephemeral-storage: 2Gi memory: 192Mi requests: cpu: 100m ephemeral-storage: 50Mi memory: 128Mi securityContext: allowPrivilegeEscalation: false capabilities: drop: - ALL privileged: false readOnlyRootFilesystem: true runAsGroup: 1001 runAsNonRoot: true runAsUser: 1001 seLinuxOptions: {} seccompProfile: type: RuntimeDefault terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /certs name: contourcert readOnly: true - mountPath: /config name: contour-config readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: fsGroup: 1001 fsGroupChangePolicy: Always serviceAccount: contour-contour serviceAccountName: contour-contour terminationGracePeriodSeconds: 30 volumes: - name: contourcert secret: defaultMode: 420 secretName: contourcert - configMap: defaultMode: 420 items: - key: contour.yaml path: contour.yaml name: contour name: contour-config status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 kind: List metadata: resourceVersion: ""