http:
  http://contour-envoy:{{ .Vars.envoy.service.ports.https }}:
    status: 200
addr:
  tcp://contour:{{ .Vars.contour.service.ports.xds }}:
    reachable: true
file:
  /certs:
    exists: true
    filetype: directory
    mode: "3777"
    owner: root
  /var/run/secrets/kubernetes.io/serviceaccount:
    exists: {{ .Vars.contour.serviceAccount.automountServiceAccountToken }}
    filetype: directory
    mode: "3777"
command:
  check-user-info:
    exec: id
    exit-status: 0
    stdout:
      - uid={{ .Vars.contour.containerSecurityContext.runAsUser }}
      - /groups=.*{{ .Vars.contour.podSecurityContext.fsGroup }}/
