apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "InstallGate"
metadata:
  name: "bitnami-contour-21-1-4-legacy-r001"
  labels:
    confighub.io/chart-ref: "bitnami/contour"
    confighub.io/chart-version: "21.1.4"
    confighub.io/image-source: "bitnamilegacy"
    confighub.io/proof-tier: "next80-full"
    confighub.io/variant: "legacy"
spec:
  variantRevision: "../variant-revision.yaml"
  renderedObjectSetSHA256: "d7df93e9094b4f918f3f97621beb90909c2d8f5a64ab8dc51b8f8dce0c934123"
  decision: "allow"
  allowedScopes:
    - "review"
  blockedScopes:
    - "local-test"
    - "production-candidate"
  reasons:
    - "regular Helm output matches cub installer setup for bitnami/contour@21.1.4 (legacy image-remap variant)"
    - "20 Helm objects are bound to renderedObjectSetSHA256"
    - "rendered-object scan produced no findings in the local proof policy"
    - "local-live lane remains blocked; image pull is remediated, but a separate lifecycle or target prerequisite still blocks readiness"