apiVersion: v1 items: - apiVersion: v1 kind: Pod metadata: annotations: prometheus.io/port: "19001" prometheus.io/scrape: "true" creationTimestamp: "2026-06-09T13:23:36Z" generateName: envoy-gateway-56b969757f- labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway pod-template-hash: 56b969757f name: envoy-gateway-56b969757f-wzbv2 namespace: envoy-gateway-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: ReplicaSet name: envoy-gateway-56b969757f uid: ee426f8a-0547-4f9d-9484-71e2587a35fd resourceVersion: "599" uid: b7d3daf2-0872-4905-8198-650ae5f1b416 spec: containers: - args: - server - --config-path=/config/envoy-gateway.yaml env: - name: ENVOY_GATEWAY_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: KUBERNETES_CLUSTER_DOMAIN value: cluster.local image: docker.io/envoyproxy/gateway:v1.1.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: envoy-gateway ports: - containerPort: 18000 name: grpc protocol: TCP - containerPort: 18001 name: ratelimit protocol: TCP - containerPort: 18002 name: wasm protocol: TCP - containerPort: 19001 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 1Gi requests: cpu: 100m memory: 256Mi securityContext: allowPrivilegeEscalation: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: envoy-gateway-config readOnly: true - mountPath: /certs name: certs readOnly: true - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-lnrkz readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: chart-test-swarm-run-45-control-plane preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true serviceAccount: envoy-gateway serviceAccountName: envoy-gateway terminationGracePeriodSeconds: 10 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - configMap: defaultMode: 420 name: envoy-gateway-config name: envoy-gateway-config - name: certs secret: defaultMode: 420 secretName: envoy-gateway - name: kube-api-access-lnrkz projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:37Z" status: "True" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:36Z" status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:46Z" status: "True" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:46Z" status: "True" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:36Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://8e09e04581aa6603cefb110f355b235838f2e8d105a9c270b4754a7e4d9a9ba8 image: docker.io/envoyproxy/gateway:v1.1.2 imageID: docker.io/envoyproxy/gateway@sha256:fd0d63e24e814238767687bc2329b908d8a0239bafe39ef542faeeacc6dc7321 lastState: {} name: envoy-gateway ready: true restartCount: 0 started: true state: running: startedAt: "2026-06-09T13:23:37Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Running podIP: 10.244.0.6 podIPs: - ip: 10.244.0.6 qosClass: Burstable startTime: "2026-06-09T13:23:36Z" - apiVersion: v1 kind: Pod metadata: creationTimestamp: "2026-06-09T13:23:29Z" generateName: envoy-gateway-gateway-helm-certgen- labels: app: certgen batch.kubernetes.io/controller-uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da batch.kubernetes.io/job-name: envoy-gateway-gateway-helm-certgen controller-uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da job-name: envoy-gateway-gateway-helm-certgen name: envoy-gateway-gateway-helm-certgen-95g2k namespace: envoy-gateway-system ownerReferences: - apiVersion: batch/v1 blockOwnerDeletion: true controller: true kind: Job name: envoy-gateway-gateway-helm-certgen uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da resourceVersion: "544" uid: 14f35a1b-3921-4bd8-b307-5edd03e64acc spec: containers: - command: - envoy-gateway - certgen env: - name: ENVOY_GATEWAY_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: KUBERNETES_CLUSTER_DOMAIN value: cluster.local image: docker.io/envoyproxy/gateway:v1.1.2 imagePullPolicy: IfNotPresent name: envoy-gateway-certgen resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /var/run/secrets/kubernetes.io/serviceaccount name: kube-api-access-9srbj readOnly: true dnsPolicy: ClusterFirst enableServiceLinks: true nodeName: chart-test-swarm-run-45-control-plane preemptionPolicy: PreemptLowerPriority priority: 0 restartPolicy: Never schedulerName: default-scheduler securityContext: runAsGroup: 65534 runAsNonRoot: true runAsUser: 65534 serviceAccount: envoy-gateway-gateway-helm-certgen serviceAccountName: envoy-gateway-gateway-helm-certgen terminationGracePeriodSeconds: 30 tolerations: - effect: NoExecute key: node.kubernetes.io/not-ready operator: Exists tolerationSeconds: 300 - effect: NoExecute key: node.kubernetes.io/unreachable operator: Exists tolerationSeconds: 300 volumes: - name: kube-api-access-9srbj projected: defaultMode: 420 sources: - serviceAccountToken: expirationSeconds: 3607 path: token - configMap: items: - key: ca.crt path: ca.crt name: kube-root-ca.crt - downwardAPI: items: - fieldRef: apiVersion: v1 fieldPath: metadata.namespace path: namespace status: conditions: - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:35Z" status: "False" type: PodReadyToStartContainers - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:29Z" reason: PodCompleted status: "True" type: Initialized - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:29Z" reason: PodCompleted status: "False" type: Ready - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:29Z" reason: PodCompleted status: "False" type: ContainersReady - lastProbeTime: null lastTransitionTime: "2026-06-09T13:23:29Z" status: "True" type: PodScheduled containerStatuses: - containerID: containerd://dedb27499515ee03cf18e8fd1960f8f1c44c03c6f7dec1c0fb157fe676b1b708 image: docker.io/envoyproxy/gateway:v1.1.2 imageID: docker.io/envoyproxy/gateway@sha256:fd0d63e24e814238767687bc2329b908d8a0239bafe39ef542faeeacc6dc7321 lastState: {} name: envoy-gateway-certgen ready: false restartCount: 0 started: false state: terminated: containerID: containerd://dedb27499515ee03cf18e8fd1960f8f1c44c03c6f7dec1c0fb157fe676b1b708 exitCode: 0 finishedAt: "2026-06-09T13:23:33Z" reason: Completed startedAt: "2026-06-09T13:23:33Z" hostIP: 172.20.0.2 hostIPs: - ip: 172.20.0.2 phase: Succeeded podIP: 10.244.0.5 podIPs: - ip: 10.244.0.5 qosClass: BestEffort startTime: "2026-06-09T13:23:29Z" - apiVersion: v1 kind: Service metadata: annotations: meta.helm.sh/release-name: envoy-gateway meta.helm.sh/release-namespace: envoy-gateway-system creationTimestamp: "2026-06-09T13:23:36Z" labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: gateway-helm app.kubernetes.io/version: v1.1.2 control-plane: envoy-gateway helm.sh/chart: gateway-helm-v1.1.2 name: envoy-gateway namespace: envoy-gateway-system resourceVersion: "556" uid: 28568df4-8bc3-4a0a-a8e1-403bc0bcb206 spec: clusterIP: 10.96.76.220 clusterIPs: - 10.96.76.220 internalTrafficPolicy: Cluster ipFamilies: - IPv4 ipFamilyPolicy: SingleStack ports: - name: grpc port: 18000 protocol: TCP targetPort: 18000 - name: ratelimit port: 18001 protocol: TCP targetPort: 18001 - name: wasm port: 18002 protocol: TCP targetPort: 18002 - name: metrics port: 19001 protocol: TCP targetPort: 19001 selector: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway sessionAffinity: None type: ClusterIP status: loadBalancer: {} - apiVersion: apps/v1 kind: Deployment metadata: annotations: deployment.kubernetes.io/revision: "1" meta.helm.sh/release-name: envoy-gateway meta.helm.sh/release-namespace: envoy-gateway-system creationTimestamp: "2026-06-09T13:23:36Z" generation: 1 labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: gateway-helm app.kubernetes.io/version: v1.1.2 control-plane: envoy-gateway helm.sh/chart: gateway-helm-v1.1.2 name: envoy-gateway namespace: envoy-gateway-system resourceVersion: "603" uid: e324206e-403d-4ecc-8b40-f5f7f5cd5f34 spec: progressDeadlineSeconds: 600 replicas: 1 revisionHistoryLimit: 10 selector: matchLabels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway strategy: rollingUpdate: maxSurge: 25% maxUnavailable: 25% type: RollingUpdate template: metadata: annotations: prometheus.io/port: "19001" prometheus.io/scrape: "true" creationTimestamp: null labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway spec: containers: - args: - server - --config-path=/config/envoy-gateway.yaml env: - name: ENVOY_GATEWAY_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: KUBERNETES_CLUSTER_DOMAIN value: cluster.local image: docker.io/envoyproxy/gateway:v1.1.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: envoy-gateway ports: - containerPort: 18000 name: grpc protocol: TCP - containerPort: 18001 name: ratelimit protocol: TCP - containerPort: 18002 name: wasm protocol: TCP - containerPort: 19001 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 1Gi requests: cpu: 100m memory: 256Mi securityContext: allowPrivilegeEscalation: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: envoy-gateway-config readOnly: true - mountPath: /certs name: certs readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true serviceAccount: envoy-gateway serviceAccountName: envoy-gateway terminationGracePeriodSeconds: 10 volumes: - configMap: defaultMode: 420 name: envoy-gateway-config name: envoy-gateway-config - name: certs secret: defaultMode: 420 secretName: envoy-gateway status: availableReplicas: 1 conditions: - lastTransitionTime: "2026-06-09T13:23:46Z" lastUpdateTime: "2026-06-09T13:23:46Z" message: Deployment has minimum availability. reason: MinimumReplicasAvailable status: "True" type: Available - lastTransitionTime: "2026-06-09T13:23:36Z" lastUpdateTime: "2026-06-09T13:23:46Z" message: ReplicaSet "envoy-gateway-56b969757f" has successfully progressed. reason: NewReplicaSetAvailable status: "True" type: Progressing observedGeneration: 1 readyReplicas: 1 replicas: 1 updatedReplicas: 1 - apiVersion: apps/v1 kind: ReplicaSet metadata: annotations: deployment.kubernetes.io/desired-replicas: "1" deployment.kubernetes.io/max-replicas: "2" deployment.kubernetes.io/revision: "1" meta.helm.sh/release-name: envoy-gateway meta.helm.sh/release-namespace: envoy-gateway-system creationTimestamp: "2026-06-09T13:23:36Z" generation: 1 labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway pod-template-hash: 56b969757f name: envoy-gateway-56b969757f namespace: envoy-gateway-system ownerReferences: - apiVersion: apps/v1 blockOwnerDeletion: true controller: true kind: Deployment name: envoy-gateway uid: e324206e-403d-4ecc-8b40-f5f7f5cd5f34 resourceVersion: "602" uid: ee426f8a-0547-4f9d-9484-71e2587a35fd spec: replicas: 1 selector: matchLabels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway pod-template-hash: 56b969757f template: metadata: annotations: prometheus.io/port: "19001" prometheus.io/scrape: "true" creationTimestamp: null labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/name: gateway-helm control-plane: envoy-gateway pod-template-hash: 56b969757f spec: containers: - args: - server - --config-path=/config/envoy-gateway.yaml env: - name: ENVOY_GATEWAY_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: KUBERNETES_CLUSTER_DOMAIN value: cluster.local image: docker.io/envoyproxy/gateway:v1.1.2 imagePullPolicy: IfNotPresent livenessProbe: failureThreshold: 3 httpGet: path: /healthz port: 8081 scheme: HTTP initialDelaySeconds: 15 periodSeconds: 20 successThreshold: 1 timeoutSeconds: 1 name: envoy-gateway ports: - containerPort: 18000 name: grpc protocol: TCP - containerPort: 18001 name: ratelimit protocol: TCP - containerPort: 18002 name: wasm protocol: TCP - containerPort: 19001 name: metrics protocol: TCP readinessProbe: failureThreshold: 3 httpGet: path: /readyz port: 8081 scheme: HTTP initialDelaySeconds: 5 periodSeconds: 10 successThreshold: 1 timeoutSeconds: 1 resources: limits: cpu: 500m memory: 1Gi requests: cpu: 100m memory: 256Mi securityContext: allowPrivilegeEscalation: false terminationMessagePath: /dev/termination-log terminationMessagePolicy: File volumeMounts: - mountPath: /config name: envoy-gateway-config readOnly: true - mountPath: /certs name: certs readOnly: true dnsPolicy: ClusterFirst restartPolicy: Always schedulerName: default-scheduler securityContext: runAsNonRoot: true serviceAccount: envoy-gateway serviceAccountName: envoy-gateway terminationGracePeriodSeconds: 10 volumes: - configMap: defaultMode: 420 name: envoy-gateway-config name: envoy-gateway-config - name: certs secret: defaultMode: 420 secretName: envoy-gateway status: availableReplicas: 1 fullyLabeledReplicas: 1 observedGeneration: 1 readyReplicas: 1 replicas: 1 - apiVersion: batch/v1 kind: Job metadata: annotations: helm.sh/hook: pre-install, pre-upgrade creationTimestamp: "2026-06-09T13:23:29Z" generation: 1 labels: app.kubernetes.io/instance: envoy-gateway app.kubernetes.io/managed-by: Helm app.kubernetes.io/name: gateway-helm app.kubernetes.io/version: v1.1.2 helm.sh/chart: gateway-helm-v1.1.2 name: envoy-gateway-gateway-helm-certgen namespace: envoy-gateway-system resourceVersion: "545" uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da spec: backoffLimit: 1 completionMode: NonIndexed completions: 1 manualSelector: false parallelism: 1 podReplacementPolicy: TerminatingOrFailed selector: matchLabels: batch.kubernetes.io/controller-uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da suspend: false template: metadata: creationTimestamp: null labels: app: certgen batch.kubernetes.io/controller-uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da batch.kubernetes.io/job-name: envoy-gateway-gateway-helm-certgen controller-uid: 0ff17ddd-87fb-4c2f-836b-5a7695abb1da job-name: envoy-gateway-gateway-helm-certgen spec: containers: - command: - envoy-gateway - certgen env: - name: ENVOY_GATEWAY_NAMESPACE valueFrom: fieldRef: apiVersion: v1 fieldPath: metadata.namespace - name: KUBERNETES_CLUSTER_DOMAIN value: cluster.local image: docker.io/envoyproxy/gateway:v1.1.2 imagePullPolicy: IfNotPresent name: envoy-gateway-certgen resources: {} terminationMessagePath: /dev/termination-log terminationMessagePolicy: File dnsPolicy: ClusterFirst restartPolicy: Never schedulerName: default-scheduler securityContext: runAsGroup: 65534 runAsNonRoot: true runAsUser: 65534 serviceAccount: envoy-gateway-gateway-helm-certgen serviceAccountName: envoy-gateway-gateway-helm-certgen terminationGracePeriodSeconds: 30 ttlSecondsAfterFinished: 30 status: completionTime: "2026-06-09T13:23:36Z" conditions: - lastProbeTime: "2026-06-09T13:23:36Z" lastTransitionTime: "2026-06-09T13:23:36Z" status: "True" type: Complete ready: 0 startTime: "2026-06-09T13:23:29Z" succeeded: 1 terminating: 0 uncountedTerminatedPods: {} kind: List metadata: resourceVersion: ""