apiVersion: batch/v1
kind: Job
metadata:
  annotations:
    helm.sh/hook: pre-install, pre-upgrade
  creationTimestamp: "2026-03-30T20:41:14Z"
  generation: 1
  labels:
    app.kubernetes.io/instance: envoy-gateway
    app.kubernetes.io/managed-by: Helm
    app.kubernetes.io/name: gateway-helm
    app.kubernetes.io/version: v1.7.0
    helm.sh/chart: gateway-helm-v1.7.0
  name: envoy-gateway-gateway-helm-certgen
  namespace: envoy-gateway-system
  resourceVersion: "931"
  uid: 852628b0-4894-45cd-bb57-208b16fe4181
spec:
  backoffLimit: 1
  completionMode: NonIndexed
  completions: 1
  manualSelector: false
  parallelism: 1
  podReplacementPolicy: TerminatingOrFailed
  selector:
    matchLabels:
      batch.kubernetes.io/controller-uid: 852628b0-4894-45cd-bb57-208b16fe4181
  suspend: false
  template:
    metadata:
      labels:
        app: certgen
        batch.kubernetes.io/controller-uid: 852628b0-4894-45cd-bb57-208b16fe4181
        batch.kubernetes.io/job-name: envoy-gateway-gateway-helm-certgen
        controller-uid: 852628b0-4894-45cd-bb57-208b16fe4181
        job-name: envoy-gateway-gateway-helm-certgen
    spec:
      containers:
      - command:
        - envoy-gateway
        - certgen
        env:
        - name: ENVOY_GATEWAY_NAMESPACE
          valueFrom:
            fieldRef:
              apiVersion: v1
              fieldPath: metadata.namespace
        - name: KUBERNETES_CLUSTER_DOMAIN
          value: cluster.local
        image: docker.io/envoyproxy/gateway:v1.7.0
        imagePullPolicy: IfNotPresent
        name: envoy-gateway-certgen
        resources: {}
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 65532
          runAsNonRoot: true
          runAsUser: 65532
          seccompProfile:
            type: RuntimeDefault
        terminationMessagePath: /dev/termination-log
        terminationMessagePolicy: File
      dnsPolicy: ClusterFirst
      restartPolicy: Never
      schedulerName: default-scheduler
      securityContext: {}
      serviceAccount: envoy-gateway-gateway-helm-certgen
      serviceAccountName: envoy-gateway-gateway-helm-certgen
      terminationGracePeriodSeconds: 30
  ttlSecondsAfterFinished: 30
status:
  active: 1
  ready: 0
  startTime: "2026-03-30T20:41:14Z"
  terminating: 0
  uncountedTerminatedPods: {}