feat(*) add support for TLSRoute

CHANGELOG.md

@@ -81,6 +81,8 @@
  [#2451](https:/Kong/kubernetes-ingress-controller/issues/2451)
 - Added description of each field of `kongIngresses` CRD.
  [#1766](https:/Kong/kubernetes-ingress-controller/issues/1766)
+- Added support for `TLSRoute` resources.
+ [#2476](https:/Kong/kubernetes-ingress-controller/issues/2476)
 
 #### Fixed
 

Makefile

@@ -189,7 +189,7 @@ debug-container:
 NCPU ?= $(shell getconf _NPROCESSORS_ONLN)
 PKG_LIST = ./pkg/...,./internal/...
 KIND_CLUSTER_NAME ?= "integration-tests"
-INTEGRATION_TEST_TIMEOUT ?= "20m"
+INTEGRATION_TEST_TIMEOUT ?= "25m"
 E2E_TEST_TIMEOUT ?= "30m"
 
 .PHONY: test

PROJECT

@@ -84,4 +84,9 @@ resources:
  group: gateway
  kind: ReferencePolicy
  version: v1alpha2
+- controller: true
+ domain: networking.k8s.io
+ group: gateway
+ kind: TLSRoute
+ version: v1alpha2
 version: "3"

config/rbac/role.yaml

@@ -273,6 +273,21 @@ rules:
  verbs:
  - get
  - update
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes/status
+ verbs:
+ - get
+ - update
 - apiGroups:
  - gateway.networking.k8s.io
  resources:

deploy/single/all-in-one-dbless-k4k8s-enterprise.yaml

@@ -1281,6 +1281,21 @@ rules:
  verbs:
  - get
  - update
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes/status
+ verbs:
+ - get
+ - update
 - apiGroups:
  - gateway.networking.k8s.io
  resources:

deploy/single/all-in-one-dbless.yaml

@@ -1281,6 +1281,21 @@ rules:
  verbs:
  - get
  - update
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes/status
+ verbs:
+ - get
+ - update
 - apiGroups:
  - gateway.networking.k8s.io
  resources:

deploy/single/all-in-one-postgres-enterprise.yaml

@@ -1281,6 +1281,21 @@ rules:
  verbs:
  - get
  - update
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes/status
+ verbs:
+ - get
+ - update
 - apiGroups:
  - gateway.networking.k8s.io
  resources:

deploy/single/all-in-one-postgres.yaml

@@ -1281,6 +1281,21 @@ rules:
  verbs:
  - get
  - update
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes
+ verbs:
+ - get
+ - list
+ - watch
+- apiGroups:
+ - gateway.networking.k8s.io
+ resources:
+ - tlsroutes/status
+ verbs:
+ - get
+ - update
 - apiGroups:
  - gateway.networking.k8s.io
  resources:

examples/gateway-tlsroute.yaml

@@ -0,0 +1,78 @@
+# WARNING: Gateway APIs support is still experimental. Use as your own risk.
+#
+# NOTE: You need to install the Gateway APIs CRDs before using this example,
+# they are external and can be deployed with the following one-liner:
+#
+# kubectl kustomize https:/kubernetes-sigs/gateway-api.git/config/crd?ref=master | kubectl apply -f -
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+ name: tcpecho
+ labels:
+ app: tcpecho
+spec:
+ selector:
+ matchLabels:
+ app: tcpecho
+ template:
+ metadata:
+ labels:
+ app: tcpecho
+ spec:
+ containers:
+ - name: tcpecho
+ image: cjimti/go-echo
+ ports:
+ - containerPort: 1025
+ env:
+ - name: POD_NAME
+ value: tlsroute-example-manifest
+---
+apiVersion: v1
+kind: Service
+metadata:
+ name: tcpecho
+spec:
+ ports:
+ - port: 8888
+ protocol: TCP
+ targetPort: 1025
+ selector:
+ app: tcpecho
+ type: ClusterIP
+---
+kind: GatewayClass
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+ name: kong
+spec:
+ controllerName: konghq.com/kic-gateway-controller
+---
+kind: Gateway
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+ name: kong
+spec:
+ gatewayClassName: kong
+ listeners:
+ - name: http
+ protocol: HTTP
+ port: 80
+ - name: tcp
+ protocol: TCP
+ port: 8888
+---
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TLSRoute
+metadata:
+ name: tlsecho
+spec:
+ parentRefs:
+ - name: kong
+ hostnames:
+ - tlsecho.kong.example
+ rules:
+ - backendRefs:
+ - name: tcpecho
+ port: 8888

internal/controllers/gateway/route_utils.go

@@ -28,6 +28,8 @@ func parentRefsForRoute(obj client.Object) ([]gatewayv1alpha2.ParentReference, e
  return v.Spec.ParentRefs, nil
  case *gatewayv1alpha2.TCPRoute:
  return v.Spec.ParentRefs, nil
+ case *gatewayv1alpha2.TLSRoute:
+ return v.Spec.ParentRefs, nil
  default:
  return nil, fmt.Errorf("cant determine parent gateway for unsupported type %s", reflect.TypeOf(obj))
  }