apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "Variant"
metadata:
  name: "legacy"
  labels:
    confighub.io/chart-ref: "bitnami/contour"
    confighub.io/chart-version: "21.1.4"
    confighub.io/proof-tier: "next80-full"
    confighub.io/variant: "legacy"
    confighub.io/image-source: "bitnamilegacy"
spec:
  recipe: "../../recipe.yaml"
  namespace: "default"
  releaseName: "contour"
  valuesProfile: "../../effective-values-legacy.yaml"
  capabilityProfile:
    kubeVersion: "1.30.0"
    apiVersions:
      []
  hookPolicy: "no-hooks"
  targetFacts:
    requiredSecrets:
      -
        namespace: "default"
        name: "contourcert"
        keys:
          - "ca.crt"
          - "tls.crt"
          - "tls.key"
        purpose: "Contour serving certificate created by the chart's pre-install certgen hook"
        provisioningMode: "lifecycle-action"
        suggestedSource: "package://prerequisites/contour-certgen/run.sh"
        deliveryLanes:
          - "cubInstallerApply"
      -
        namespace: "default"
        name: "envoycert"
        keys:
          - "ca.crt"
          - "tls.crt"
          - "tls.key"
        purpose: "Envoy client certificate created by the chart's pre-install certgen hook"
        provisioningMode: "lifecycle-action"
        suggestedSource: "package://prerequisites/contour-certgen/run.sh"
        deliveryLanes:
          - "cubInstallerApply"
  imageRemap:
    rationale: "Bitnami moved the free docker.io/bitnami/* images to the frozen docker.io/bitnamilegacy/* namespace in Aug 2025; docker.io/bitnami/contour is no longer pullable. This variant records equivalent Helm values and remaps the committed render to the verified-pullable docker.io/bitnamilegacy mirror so Helm and cub installer can be compared fairly. The core default variant is intentionally left as an honest image-blocked watch row."
    from: "docker.io/bitnami/"
    to: "docker.io/bitnamilegacy/"
    images:
      -
        from: "docker.io/bitnami/contour:1.32.1-debian-12-r0"
        to: "docker.io/bitnamilegacy/contour:1.32.1-debian-12-r0"
      -
        from: "docker.io/bitnami/envoy:1.34.5-debian-12-r0"
        to: "docker.io/bitnamilegacy/envoy:1.34.5-debian-12-r0"
    deprecated: true
    deprecationNote: "docker.io/bitnamilegacy is a frozen, deprecated mirror (no new tags, no security patches). Fine for a parity/runtime proof; production users should mirror these images into their own registry."