Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Gateway Controller Namespacing #2080

Closed
3 of 7 tasks
Tracked by #2155
shaneutt opened this issue Dec 10, 2021 · 2 comments · Fixed by #2389
Closed
3 of 7 tasks
Tracked by #2155

Gateway Controller Namespacing #2080

shaneutt opened this issue Dec 10, 2021 · 2 comments · Fixed by #2389

Comments

@shaneutt
Copy link
Contributor

shaneutt commented Dec 10, 2021

Problem Statement

Namespace limitations need to be added to the Gateway controller and all *Route controllers.

Proposed Solution

  • implement namespace restrictions in route controllers when --watch-namespaces is in use inside the Gateway and Route controllers
  • implement namespace restrictions inside route object validation moved to Gateway Controller Namespacing #2080 as it's a completely separate part of the codebase.

Prerequisites

Acceptance Criteria

  • as a user I should be able to limit the namespaces which a Gateway resource will serve using ALL core options of the namespaces.From spec in Gateway
  • backendRefs for HTTPRoute resources need to be namespace restricted according to Gateway namespacing rules also Gateway Controller Namespacing #2080
  • as a developer Gateway APIs conformance tests for cross-namespace HTTPRoute tests are configured and passing so when I make contributions I can have confidence I did not break cross namespace restrictions. also Gateway Controller Namespacing #2080
@shaneutt shaneutt added priority/medium area/security area/maintenance Cleanup, refactoring, and other maintenance improvements that don't change functionality. labels Dec 10, 2021
@shaneutt shaneutt added this to the Gateway API - Milestone 1 milestone Dec 10, 2021
@shaneutt shaneutt removed the area/maintenance Cleanup, refactoring, and other maintenance improvements that don't change functionality. label Dec 10, 2021
@shaneutt shaneutt self-assigned this Dec 13, 2021
@shaneutt shaneutt added blocked and removed blocked labels Dec 13, 2021
@shaneutt shaneutt removed their assignment Dec 16, 2021
@shaneutt shaneutt self-assigned this Jan 4, 2022
@shaneutt
Copy link
Contributor Author

shaneutt commented Jan 5, 2022

Given some conversation that needs to happen upstream (see kubernetes-sigs/gateway-api#977) I'm moving this into the next milestone as we're going to need some time to sort things out upstream, but this doesn't need to block M1.

@rainest
Copy link
Contributor

rainest commented Apr 11, 2022

Split out #2407 and #2408

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment