-
Notifications
You must be signed in to change notification settings - Fork 591
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Gateway Controller Namespacing #2080
Comments
shaneutt
added
priority/medium
area/security
area/maintenance
Cleanup, refactoring, and other maintenance improvements that don't change functionality.
labels
Dec 10, 2021
shaneutt
removed
the
area/maintenance
Cleanup, refactoring, and other maintenance improvements that don't change functionality.
label
Dec 10, 2021
Given some conversation that needs to happen upstream (see kubernetes-sigs/gateway-api#977) I'm moving this into the next milestone as we're going to need some time to sort things out upstream, but this doesn't need to block M1. |
This was referenced Mar 22, 2022
This was referenced Apr 4, 2022
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Problem Statement
Namespace limitations need to be added to the
Gateway
controller and all*Route
controllers.Proposed Solution
--watch-namespaces
is in use inside the Gateway and Route controllersimplement namespace restrictions inside route object validationmoved to Gateway Controller Namespacing #2080 as it's a completely separate part of the codebase.Prerequisites
Acceptance Criteria
Gateway
resource will serve using ALLcore
options of thenamespaces.From
spec inGateway
backendRefs foralso Gateway Controller Namespacing #2080HTTPRoute
resources need to be namespace restricted according toGateway
namespacing rulesas a developer Gateway APIs conformance tests for cross-namespacealso Gateway Controller Namespacing #2080HTTPRoute
tests are configured and passing so when I make contributions I can have confidence I did not break cross namespace restrictions.The text was updated successfully, but these errors were encountered: