contour: Update to v1.9.0

Release Notes:
https://github.com/projectcontour/contour/releases/tag/v1.9.0

Signed-off-by: knrt10 <kautilya@kinvolk.io>

assets/charts/components/contour/Chart.yaml

@@ -17,7 +17,7 @@ version: 0.3.0
 
 # This is the version number of the upstream Contour
 # https://github.com/projectcontour/contour/releases
-appVersion: v1.7.0
+appVersion: v1.9.0
 
 description: Contour is a Kubernetes ingress controller using Lyft's Envoy proxy.
 home: https://projectcontour.io/

assets/charts/components/contour/templates/01-contour-config.yaml

@@ -6,6 +6,13 @@ metadata:
   namespace: projectcontour
 data:
   contour.yaml: |
+    #
+    # server:
+    #   determine which XDS Server implementation to utilize in Contour.
+    #   xds-server-type: contour
+    #   specify the xDS version to use when serving resources to Envoy.
+    #   xds-server-version: v2
+    #
     # should contour expect to be running inside a k8s cluster
     # incluster: true
     #
@@ -22,6 +29,9 @@ data:
     # SNI defined for a vhost.
       fallback-certificate:
     #   name: fallback-secret-name
+    #   namespace: projectcontour
+      envoy-client-certificate:
+    #   name: envoy-client-cert-secret-name
     #   namespace: projectcontour
     # The following config shows the defaults for the leader election.
     # leaderelection:
@@ -70,3 +80,9 @@ data:
     #   stream-idle-timeout: 5m
     #   max-connection-duration: infinity
     #   connection-shutdown-grace-period: 5s
+    #
+    # Envoy cluster settings.
+    # cluster:
+    #   configure the cluster dns lookup family
+    #   valid options are: auto (default), v4, v6
+    #   dns-lookup-family: auto

assets/charts/components/contour/templates/02-job-certgen.yaml

@@ -5,7 +5,7 @@ metadata:
   name: contour-certgen
   namespace: projectcontour
 ---
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 kind: RoleBinding
 metadata:
   name: contour
@@ -19,7 +19,7 @@ subjects:
   name: contour-certgen
   namespace: projectcontour
 ---
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:
   name: contour-certgen
@@ -36,7 +36,7 @@ rules:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: contour-certgen-v1.7.0
+  name: contour-certgen-v1.9.0
   namespace: projectcontour
 spec:
   ttlSecondsAfterFinished: 0
@@ -47,10 +47,6 @@ spec:
     spec:
       containers:
       - name: contour
-        # This version is set to latest because Job specs are immutable;
-        # if we change this on each version, you can no longer upgrade
-        # just by applying the deployment YAML.
-        # See #2423, #2395, #2150, and #2030 for earlier questions about this.
         image: {{.Values.contour.image}}:latest
         imagePullPolicy: Always
         command:

assets/charts/components/contour/templates/02-rbac.yaml

@@ -1,6 +1,6 @@
 ---
 
-apiVersion: rbac.authorization.k8s.io/v1beta1
+apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
 metadata:
   name: contour
@@ -12,4 +12,3 @@ subjects:
 - kind: ServiceAccount
   name: contour
   namespace: projectcontour
-

assets/charts/components/contour/templates/02-role-contour.yaml

@@ -41,6 +41,12 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - apiextensions.k8s.io
+  resources:
+  - customresourcedefinitions
+  verbs:
+  - list
 - apiGroups:
   - networking.k8s.io
   resources:
@@ -68,6 +74,22 @@ rules:
   - create
   - get
   - update
+- apiGroups:
+  - projectcontour.io
+  resources:
+  - extensionservices
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - projectcontour.io
+  resources:
+  - extensionservices/status
+  verbs:
+  - create
+  - get
+  - update
 - apiGroups:
   - projectcontour.io
   resources:

assets/charts/components/contour/values.yaml

@@ -3,11 +3,11 @@ monitoring:
 
 contour:
   image: docker.io/projectcontour/contour
-  tag: v1.7.0
+  tag: v1.9.0
 
 envoy:
   image: docker.io/envoyproxy/envoy
-  tag: v1.15.0
+  tag: v1.16.0
   serviceType:
 
 nodeAffinity: {}