contour
Chart · Gateway · standard · v0.0.6
Project Contour, the CNCF Kubernetes ingress controller that programs Envoy over xDS. Serves HTTPProxy and Ingress plus Gateway API, and one binary covers every role, including the xDS control plane, Envoy bootstrap generation, certgen, shutdown-manager and the Gateway provisioner. Pairs with the QuenchWorks envoy data plane.
Chart OCI version
oci://ghcr.io/quenchworks/charts/contour:0.0.6The chart pins its image by this signed digest, so you never track it yourself. Signatures, SBOM, and provenance attach to the same digest.
Security report (Trivy)
Security report (Trivy) · image contour 1.33.7
Install the chart
Deploy to Kubernetes with hardened defaults. The chart pins its image by signed digest, so you never track it yourself.
Install (latest)
helm install my-contour oci://ghcr.io/quenchworks/charts/contour --version 0.0.6Deploys image (digest-pinned)
ghcr.io/quenchworks/images/contour@sha256:fa7095f971cca3e3387f6afa86dc79786c09728277df174f316b8e19edc9160c
ghcr.io/quenchworks/images/envoy@sha256:01dd593f09677efb8c06661d45a74120827584ca3ce47b5bcfa2375fd4fd9457- Chart version
- 0.0.6
- App version
- 1.33.7
- Chart license
- MIT
- App license
- Apache-2.0
- Signed
- no
- Values schema
- no
Verify the chart
cosign verify ghcr.io/quenchworks/charts/contour:0.0.6 \
--certificate-identity-regexp 'https://github.com/quenchworks/.+' \
--certificate-oidc-issuer https://token.actions.githubusercontent.comTransparency
The chart publishes its attestations on GitHub and the image it deploys carries its own on the same digest, publicly verifiable with the commands above. Both log to the Sigstore transparency log (Rekor), which cosign verify checks for you.
Upstream project: https://projectcontour.io