contour
Chart · Gateway · standard · v0.0.2
Project Contour, the CNCF Kubernetes ingress controller that programs Envoy over xDS. Serves HTTPProxy and Ingress plus Gateway API, and one binary covers every role, including the xDS control plane, Envoy bootstrap generation, certgen, shutdown-manager and the Gateway provisioner. Pairs with the QuenchWorks envoy data plane.
Chart OCI version
oci://ghcr.io/quenchworks/charts/contour:0.0.2The chart pins its image by this signed digest, so you never track it yourself. Signatures, SBOM, and provenance attach to the same digest.
Security report (Trivy)
Security report (Trivy) · image contour 1.33.7
Install the chart
Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.
Install (latest)
helm install my-contour oci://ghcr.io/quenchworks/charts/contour --version 0.0.2Deploys image (digest-pinned)
ghcr.io/quenchworks/images/contour@sha256:1ab31a2288bff947cf78f583d5a346be7da0394964797620d4534f06ac71ca04
ghcr.io/quenchworks/images/envoy@sha256:99cf0132c2d9521d564329f78512f5ba521d8e147a824bf64f3c27352efbc0af- Chart version
- 0.0.2
- App version
- 1.33.7
- Chart license
- MIT
- App license
- Apache-2.0
- Signed
- no
- Values schema
- no
Verify the chart
cosign verify ghcr.io/quenchworks/charts/contour:0.0.2 \
--certificate-identity-regexp 'https://github.com/quenchworks/.+' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comTransparency
The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.
Upstream project: https://projectcontour.io