fullnameOverride: "contour-external-demand-prd"
configInline:
  enableExternalNameService: true
  timeouts:
    connection-idle-timeout: 305s
  disablePermitInsecure: false
  tls:
    fallback-certificate: {}
  accesslog-format: envoy
  network:
    num-trusted-hops: 1
contour:
  enabled: true
  replicaCount: 3
  podLabels:
    bu: demand
    team: demand-devops
    env: prd
  manageCRDs: true
  resources:
    requests:
      cpu: 250m
      memory: 1024Mi
  tolerations:
    - effect: NoSchedule
      key: cloud.google.com/compute-class
      operator: Equal
      value: contour-shared-cc-v1
  nodeSelector:
    cloud.google.com/compute-class: contour-shared-cc-v1
  service:
    type: ClusterIP
    ports:
      xds: 8001
      metrics: 8000
  ingressClass:
    name: "contour-external"
    create: true
  debug: false
  podAnnotations:
    prometheus.io/path: /metrics
    prometheus.io/port: '8000'
    prometheus.io/scrape: 'true'
envoy:
  enabled: true
  podLabels:
    bu: demand
    team: demand-devops
    env: prd
  kind: deployment
  tolerations:
    - effect: NoSchedule
      key: cloud.google.com/compute-class
      operator: Equal
      value: contour-external-cc-v1
  nodeSelector:
    cloud.google.com/compute-class: contour-external-cc-v1
  logLevel: error
  autoscaling:
    behavior:
      scaleDown:
        policies:
          - periodSeconds: 60
            type: Pods
            value: 2
        selectPolicy: Min
        stabilizationWindowSeconds: 300
      scaleUp:
        policies:
          - periodSeconds: 15
            type: Percent
            value: 100
        selectPolicy: Max
        stabilizationWindowSeconds: 60
    enabled: true
    minReplicas: 3
    maxReplicas: 250
    targetCPU: "40"
    targetMemory: "40"
  podAnnotations:
    prometheus.io/path: /stats/prometheus
    prometheus.io/port: '8002'
    prometheus.io/scrape: 'true'
  extraArgs:
    - '--concurrency 2'
  resources:
    requests:
      cpu: 2
      memory: 512Mi
    limits:
      cpu: 2
      memory: 4Gi
  service:
    targetPorts:
      http: http
      https: https
    type: ClusterIP
    annotations:
      cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-ext-demand-a-prd"}}}'
    ports:
      http: 80
      https: 443
      grpc: 8080 ## only when tcpLB is true it will be used
  useHostPort: false
defaultBackend:
  enabled: false
certManager:
  externalSecret:
    enabled: true
    secretStoreRef:
      name: "vault-backend"