diff --git a/cmd/contour/gatewayprovisioner.go b/cmd/contour/gatewayprovisioner.go
index 82763c0026a..c52d3a14e5b 100644
--- a/cmd/contour/gatewayprovisioner.go
+++ b/cmd/contour/gatewayprovisioner.go
@@ -35,7 +35,7 @@ func registerGatewayProvisioner(app *kingpin.Application) (*kingpin.CmdClause, *
 	cmd := app.Command("gateway-provisioner", "Run contour gateway provisioner.")
 
 	provisionerConfig := &gatewayProvisionerConfig{
-		contourImage:          "ghcr.io/projectcontour/contour:v1.27.0",
+		contourImage:          "ghcr.io/projectcontour/contour:v1.27.1",
 		envoyImage:            "docker.io/envoyproxy/envoy:v1.28.1",
 		metricsBindAddress:    ":8080",
 		leaderElection:        false,
diff --git a/examples/contour/02-job-certgen.yaml b/examples/contour/02-job-certgen.yaml
index db53b8aa8bf..35b9ad705e6 100644
--- a/examples/contour/02-job-certgen.yaml
+++ b/examples/contour/02-job-certgen.yaml
@@ -36,7 +36,7 @@ rules:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: contour-certgen-v1-27-0
+  name: contour-certgen-v1-27-1
   namespace: projectcontour
 spec:
   template:
@@ -46,7 +46,7 @@ spec:
     spec:
       containers:
       - name: contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         command:
         - contour
diff --git a/examples/contour/03-contour.yaml b/examples/contour/03-contour.yaml
index f14a99b64e7..8d42cf787b2 100644
--- a/examples/contour/03-contour.yaml
+++ b/examples/contour/03-contour.yaml
@@ -45,7 +45,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
diff --git a/examples/contour/03-envoy.yaml b/examples/contour/03-envoy.yaml
index d5a0dac9c6f..a2cae179a93 100644
--- a/examples/contour/03-envoy.yaml
+++ b/examples/contour/03-envoy.yaml
@@ -29,7 +29,7 @@ spec:
         args:
           - envoy
           - shutdown-manager
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -107,7 +107,7 @@ spec:
         - --envoy-key-file=/certs/tls.key
         command:
         - contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: envoy-initconfig
         volumeMounts:
diff --git a/examples/deployment/03-envoy-deployment.yaml b/examples/deployment/03-envoy-deployment.yaml
index 100fa77054e..99b676476c5 100644
--- a/examples/deployment/03-envoy-deployment.yaml
+++ b/examples/deployment/03-envoy-deployment.yaml
@@ -42,7 +42,7 @@ spec:
           args:
             - envoy
             - shutdown-manager
-          image: ghcr.io/projectcontour/contour:v1.27.0
+          image: ghcr.io/projectcontour/contour:v1.27.1
           imagePullPolicy: IfNotPresent
           lifecycle:
             preStop:
@@ -120,7 +120,7 @@ spec:
             - --envoy-key-file=/certs/tls.key
           command:
             - contour
-          image: ghcr.io/projectcontour/contour:v1.27.0
+          image: ghcr.io/projectcontour/contour:v1.27.1
           imagePullPolicy: IfNotPresent
           name: envoy-initconfig
           volumeMounts:
diff --git a/examples/gateway-provisioner/03-gateway-provisioner.yaml b/examples/gateway-provisioner/03-gateway-provisioner.yaml
index 9f44c5b9ba9..e6e49a45381 100644
--- a/examples/gateway-provisioner/03-gateway-provisioner.yaml
+++ b/examples/gateway-provisioner/03-gateway-provisioner.yaml
@@ -22,7 +22,7 @@ spec:
         - --metrics-addr=127.0.0.1:8080
         - --enable-leader-election
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour-gateway-provisioner
         resources:
diff --git a/examples/render/contour-deployment.yaml b/examples/render/contour-deployment.yaml
index 7863bb311b4..8d6afba0509 100644
--- a/examples/render/contour-deployment.yaml
+++ b/examples/render/contour-deployment.yaml
@@ -8367,7 +8367,7 @@ rules:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: contour-certgen-v1-27-0
+  name: contour-certgen-v1-27-1
   namespace: projectcontour
 spec:
   template:
@@ -8377,7 +8377,7 @@ spec:
     spec:
       containers:
       - name: contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         command:
         - contour
@@ -8636,7 +8636,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
@@ -8738,7 +8738,7 @@ spec:
           args:
             - envoy
             - shutdown-manager
-          image: ghcr.io/projectcontour/contour:v1.27.0
+          image: ghcr.io/projectcontour/contour:v1.27.1
           imagePullPolicy: IfNotPresent
           lifecycle:
             preStop:
@@ -8816,7 +8816,7 @@ spec:
             - --envoy-key-file=/certs/tls.key
           command:
             - contour
-          image: ghcr.io/projectcontour/contour:v1.27.0
+          image: ghcr.io/projectcontour/contour:v1.27.1
           imagePullPolicy: IfNotPresent
           name: envoy-initconfig
           volumeMounts:
diff --git a/examples/render/contour-gateway-provisioner.yaml b/examples/render/contour-gateway-provisioner.yaml
index 0c9af136d94..d18f930f0e8 100644
--- a/examples/render/contour-gateway-provisioner.yaml
+++ b/examples/render/contour-gateway-provisioner.yaml
@@ -19208,7 +19208,7 @@ spec:
         - --metrics-addr=127.0.0.1:8080
         - --enable-leader-election
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour-gateway-provisioner
         resources:
diff --git a/examples/render/contour-gateway.yaml b/examples/render/contour-gateway.yaml
index 33e026a8426..6644311986d 100644
--- a/examples/render/contour-gateway.yaml
+++ b/examples/render/contour-gateway.yaml
@@ -8370,7 +8370,7 @@ rules:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: contour-certgen-v1-27-0
+  name: contour-certgen-v1-27-1
   namespace: projectcontour
 spec:
   template:
@@ -8380,7 +8380,7 @@ spec:
     spec:
       containers:
       - name: contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         command:
         - contour
@@ -8639,7 +8639,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
@@ -8728,7 +8728,7 @@ spec:
         args:
           - envoy
           - shutdown-manager
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -8806,7 +8806,7 @@ spec:
         - --envoy-key-file=/certs/tls.key
         command:
         - contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: envoy-initconfig
         volumeMounts:
diff --git a/examples/render/contour.yaml b/examples/render/contour.yaml
index bd0b3d2d026..06b3a579f0e 100644
--- a/examples/render/contour.yaml
+++ b/examples/render/contour.yaml
@@ -8367,7 +8367,7 @@ rules:
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: contour-certgen-v1-27-0
+  name: contour-certgen-v1-27-1
   namespace: projectcontour
 spec:
   template:
@@ -8377,7 +8377,7 @@ spec:
     spec:
       containers:
       - name: contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         command:
         - contour
@@ -8636,7 +8636,7 @@ spec:
         - --contour-key-file=/certs/tls.key
         - --config-path=/config/contour.yaml
         command: ["contour"]
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: contour
         ports:
@@ -8725,7 +8725,7 @@ spec:
         args:
           - envoy
           - shutdown-manager
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         lifecycle:
           preStop:
@@ -8803,7 +8803,7 @@ spec:
         - --envoy-key-file=/certs/tls.key
         command:
         - contour
-        image: ghcr.io/projectcontour/contour:v1.27.0
+        image: ghcr.io/projectcontour/contour:v1.27.1
         imagePullPolicy: IfNotPresent
         name: envoy-initconfig
         volumeMounts: