configInline:
  enableExternalNameService: true
  timeouts:
    connection-idle-timeout: 305s
    connection-shutdown-grace-period: 300s
    max-connection-duration: 1200s
  disablePermitInsecure: false
  tls:
    fallback-certificate: {}
  accesslog-format: envoy
  accesslog-level: disabled
contour:
  enabled: true
  replicaCount: 3
  podLabels:
    bu: admin
    team: devops
    env: prd
  manageCRDs: true
  resources:
    requests:
      cpu: 250m
      memory: 1024Mi
  tolerations:
    - effect: NoSchedule
      key: dedicated
      operator: Equal
      value: devops
  nodeSelector:
    dedicated: devops
  service:
    type: ClusterIP
    ports:
      xds: 8001
      metrics: 8000
  ingressClass:
    name: "contour-internal-0"
    create: true
  debug: false
  podAnnotations:
    prometheus.io/path: /metrics
    prometheus.io/port: '8000'
    prometheus.io/scrape: 'true'
envoy:
  enabled: true
  podLabels:
    bu: admin
    team: devops
    env: prd
  kind: deployment
  tolerations:
    - effect: NoSchedule
      key: dedicated
      operator: Equal
      value: devops
  nodeSelector:
    dedicated: devops
  logLevel: error
  autoscaling:
    enabled: true
    minReplicas: 2
    maxReplicas: 250
    targetCPU: "40"
    targetMemory: "40"
  podAnnotations:
    prometheus.io/path: /stats/prometheus
    prometheus.io/port: '8002'
    prometheus.io/scrape: 'true'
  extraArgs:
    - '--concurrency 6'
  resources:
    requests:
      cpu: 6
      memory: 3Gi
    limits:
      cpu: 6
      memory: 29Gi
  service:
    tcpLB: true
    export:
      enabled: true
    targetPorts:
      http: http
      https: https
    type: ClusterIP
    annotations:
      cloud.google.com/neg: '{"exposed_ports": {"80":{"name": "envoy-int0-admin-prd"}}}'
    ports:
      http: 80
      https: 443
      grpc: 8080 
  useHostPort: false
defaultBackend:
  enabled: false
# Override the chart-default Vault path: the admin cluster stores the contour
# root CA under the admin/ prefix, not the meesho/ prefix used by other clusters.
certManager:
  externalSecret:
    vaultPath: admin/devops/contour/root-ca