feat(*) add support for TLSRoute

Add TLSRoute controller. Add TLSRoute store functions. Add TLSRoute translation to the parser. Add TLSRoute example and test. Add TLSRoute integration tests. Fix copy/paste error in TCPRoute fakestore and add missing TCPRoute fakestore test. Parallelize UDPRoute example test.
Kong · May 10, 2022 · 6cd8fac · 6cd8fac
1 parent 35de6ee
commit 6cd8fac
Show file tree

Hide file tree

Showing 18 changed files with 1,339 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -81,6 +81,8 @@
   [#2451](https://github.com/Kong/kubernetes-ingress-controller/issues/2451)
 - Added description of each field of `kongIngresses` CRD.
   [#1766](https://github.com/Kong/kubernetes-ingress-controller/issues/1766)
+- Added support for `TLSRoute` resources.
+  [#2476](https://github.com/Kong/kubernetes-ingress-controller/issues/2476)
 
 #### Fixed
 

diff --git a/PROJECT b/PROJECT
@@ -84,4 +84,9 @@ resources:
   group: gateway
   kind: ReferencePolicy
   version: v1alpha2
+- controller: true
+  domain: networking.k8s.io
+  group: gateway
+  kind: TLSRoute
+  version: v1alpha2
 version: "3"
diff --git a/config/rbac/role.yaml b/config/rbac/role.yaml
@@ -273,6 +273,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

diff --git a/deploy/single/all-in-one-dbless-k4k8s-enterprise.yaml b/deploy/single/all-in-one-dbless-k4k8s-enterprise.yaml
@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

diff --git a/deploy/single/all-in-one-dbless.yaml b/deploy/single/all-in-one-dbless.yaml
@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

diff --git a/deploy/single/all-in-one-postgres-enterprise.yaml b/deploy/single/all-in-one-postgres-enterprise.yaml
@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

diff --git a/deploy/single/all-in-one-postgres.yaml b/deploy/single/all-in-one-postgres.yaml
@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

diff --git a/examples/gateway-tlsroute.yaml b/examples/gateway-tlsroute.yaml
@@ -0,0 +1,78 @@
+# WARNING: Gateway APIs support is still experimental. Use as your own risk.
+#
+# NOTE: You need to install the Gateway APIs CRDs before using this example,
+#       they are external and can be deployed with the following one-liner:
+#
+# kubectl kustomize https://github.com/kubernetes-sigs/gateway-api.git/config/crd?ref=master | kubectl apply -f -
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tcpecho
+  labels:
+    app: tcpecho
+spec:
+  selector:
+    matchLabels:
+      app: tcpecho
+  template:
+    metadata:
+      labels:
+        app: tcpecho
+    spec:
+      containers:
+      - name: tcpecho
+        image: cjimti/go-echo
+        ports:
+        - containerPort: 1025
+        env:
+        - name: POD_NAME
+          value: tlsroute-example-manifest
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: tcpecho
+spec:
+  ports:
+  - port: 8888
+    protocol: TCP
+    targetPort: 1025
+  selector:
+    app: tcpecho
+  type: ClusterIP
+---
+kind: GatewayClass
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+  name: kong
+spec:
+  controllerName: konghq.com/kic-gateway-controller
+---
+kind: Gateway
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+  name: kong
+spec:
+  gatewayClassName: kong
+  listeners:
+  - name: http
+    protocol: HTTP
+    port: 80
+  - name: tcp
+    protocol: TCP
+    port: 8888
+---
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TLSRoute
+metadata:
+  name: tlsecho
+spec:
+  parentRefs:
+  - name: kong
+  hostnames:
+  - tlsecho.kong.example
+  rules:
+  - backendRefs:
+    - name: tcpecho
+      port: 8888
diff --git a/internal/controllers/gateway/route_utils.go b/internal/controllers/gateway/route_utils.go
@@ -28,6 +28,8 @@ func parentRefsForRoute(obj client.Object) ([]gatewayv1alpha2.ParentReference, e
 		return v.Spec.ParentRefs, nil
 	case *gatewayv1alpha2.TCPRoute:
 		return v.Spec.ParentRefs, nil
+	case *gatewayv1alpha2.TLSRoute:
+		return v.Spec.ParentRefs, nil
 	default:
 		return nil, fmt.Errorf("cant determine parent gateway for unsupported type %s", reflect.TypeOf(obj))
 	}