feat: introduce v1beta1 types

.gitignore

@@ -54,3 +54,4 @@ admission
 
 /cache
 .venv/
+release/

CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## Table of Contents
 
+- [v0.4.3](#v043)
+- [v0.4.2](#v042)
+- [v0.4.1](#v041)
 - [v0.4.0](#v040)
 - [v0.4.0-rc2](#v040-rc2)
 - [v0.4.0-rc1](#v040-rc1)
@@ -11,6 +14,45 @@
 - [v0.1.0-rc2](#v010-rc2)
 - [v0.1.0-rc1](#v010-rc1)
 
+## v0.4.3
+
+API version: v1alpha2
+
+This release includes improvements to our webhook, including:
+
+* Migrating kube-webhook-certgen to k8s.gcr.io/ingress-nginx:v1.1.1.
+  [#1126](https://github.com/kubernetes-sigs/gateway-api/pull/1126)
+* New validation to ensure that a HTTPRouterFilter Type matches its value
+  [#1071](https://github.com/kubernetes-sigs/gateway-api/pull/1071)
+* A fix to ensure that Path match validation actually works
+  [#1071](https://github.com/kubernetes-sigs/gateway-api/pull/1071)
+
+## v0.4.2
+
+API version: v1alpha2
+
+This release is intended to verify our webhook image tagging process.
+
+### Bug Fixes
+
+* Update image generation process with more consistent naming
+  [#1034](https://github.com/kubernetes-sigs/gateway-api/pull/1034)
+
+## v0.4.1
+
+API version: v1alpha2
+
+This release contains minor bug fixes for v1alpha2.
+
+### Bug Fixes
+
+* ControllerName now prints correctly in kubectl output for GatewayClass
+  [#909](https://github.com/kubernetes-sigs/gateway-api/pull/909)
+* Namespace can no longer be left unspecified in ReferencePolicy
+  [#964](https://github.com/kubernetes-sigs/gateway-api/pull/964)
+* Wildcard characters can no longer be used in redirect Hostname values
+  [#956](https://github.com/kubernetes-sigs/gateway-api/pull/956)
+
 ## v0.4.0
 
 API version: v1alpha2

Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.17 AS build-env
+FROM golang:1.18 AS build-env
 RUN mkdir -p /go/src/sig.k8s.io/gateway-api
 WORKDIR /go/src/sig.k8s.io/gateway-api
 COPY  . .

Makefile

@@ -49,13 +49,28 @@ TOP := $(dir $(firstword $(MAKEFILE_LIST)))
 # ROOT is the root of the mkdocs tree.
 ROOT := $(abspath $(TOP))
 
+# Command-line flags passed to "go test" for the conformance
+# test. These are passed after the "-args" flag.
+CONFORMANCE_FLAGS ?=
+
 all: generate vet fmt verify test
 
 # Run generators for protos, Deepcopy funcs, CRDs, and docs.
 .PHONY: generate
-generate:
+generate: update-codegen update-webhook-yaml
+
+.PHONY: update-codegen
+update-codegen:
 	hack/update-codegen.sh
 
+.PHONY: update-webhook-yaml
+update-webhook-yaml:
+	hack/update-webhook-yaml.sh
+
+.PHONY: build-install-yaml
+build-install-yaml:
+	hack/build-install-yaml.sh
+
 # Run go fmt against code
 fmt:
 	go fmt ./...
@@ -71,7 +86,7 @@ test:
 # Run conformance tests against controller implementation
 .PHONY: conformance
 conformance:
-	go test -v ./conformance/...
+	go test -v ./conformance/... -args ${CONFORMANCE_FLAGS}
 
 # Install CRD's and example resources to a pre-existing cluster.
 .PHONY: install

README.md

@@ -5,8 +5,8 @@ the specification and Custom Resource Definitions (CRDs).
 
 ## Status
 
-The latest supported version is v1alpha2 as released by the [v0.4.2
-release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v0.4.2) of
+The latest supported version is v1alpha2 as released by the [v0.4.3
+release](https://github.com/kubernetes-sigs/gateway-api/releases/tag/v0.4.3) of
 this project. This version of the API is expected to graduate to beta in the
 future with relatively minimal changes.
 

RELEASE.md

@@ -19,9 +19,22 @@ documentation].
 - Write the [changelog](CHANGELOG.md) with user-visible API changes. This must
   go through the regular PR review process and get merged into the `master` branch.
   Approval of the PR indicates community consensus for a new release.
-- Once the above PR is merged, the author must publish a new Git tag. This can
-  be done using the `git` CLI or Github's [release][release]
-  page. This step can be performed only by [Gateway API maintainers][gateway-api-team].
+
+The following steps must be done by one of the [Gateway API maintainers][gateway-api-team]:
+
+For a major or minor release:
+- Cut a `release-major.minor` branch that we can tag things in as needed.
+For all releases:
+- Check out the `release-major.minor` branch locally
+- Update `pkg/generator/main.go` with the new semver tag and any updates to the API review URL.
+- Run the following commnand `BASE_REF=vmajor.minor.patch make generate` which will update generated docs
+  and webhook with the correct version info. Note that the YAMLs will not work until the tag is actually
+  published in the next step.
+- Publish a new Git tag. This can  be done using the `git` CLI or Github's [release][release]
+  page.
+- Run the `make build-install-yaml` command which will generate
+  install files in the `release/` directory and attach these files to
+  the Github release.
 
 [release]: https://gateway-api.sigs.k8s.io/references/releases/
 [gateway-api-team]: https://github.com/kubernetes/org/blob/master/config/kubernetes-sigs/sig-network/teams.yaml

apis/v1alpha2/gateway_types.go

@@ -135,7 +135,7 @@ type GatewaySpec struct {
 	// it assigns to the Gateway and add a corresponding entry in
 	// GatewayStatus.Addresses.
 	//
-	// Support: Core
+	// Support: Extended
 	//
 	// +optional
 	// +kubebuilder:validation:MaxItems=16
@@ -172,6 +172,10 @@ type Listener struct {
 	// accepted. For more information, refer to the Route specific Hostnames
 	// documentation.
 	//
+	// Hostnames that are prefixed with a wildcard label (`*.`) are interpreted
+	// as a suffix match. That means that a match for `*.example.com` would match
+	// both `test.example.com`, and `foo.test.example.com`, but not `example.com`.
+	//
 	// Support: Core
 	//
 	// +optional
@@ -310,8 +314,8 @@ type GatewayTLSConfig struct {
 	// a Listener, but this behavior is implementation-specific.
 	//
 	// References to a resource in different namespace are invalid UNLESS there
-	// is a ReferencePolicy in the target namespace that allows the certificate
-	// to be attached. If a ReferencePolicy does not allow this reference, the
+	// is a ReferenceGrant in the target namespace that allows the certificate
+	// to be attached. If a ReferenceGrant does not allow this reference, the
 	// "ResolvedRefs" condition MUST be set to False for this listener with the
 	// "InvalidCertificateRef" reason.
 	//
@@ -321,13 +325,13 @@ type GatewayTLSConfig struct {
 	// CertificateRefs can reference to standard Kubernetes resources, i.e.
 	// Secret, or implementation-specific custom resources.
 	//
-	// Support: Core - A single reference to a Kubernetes Secret
+	// Support: Core - A single reference to a Kubernetes Secret of type kubernetes.io/tls
 	//
 	// Support: Implementation-specific (More than one reference or other resource types)
 	//
 	// +optional
 	// +kubebuilder:validation:MaxItems=64
-	CertificateRefs []*SecretObjectReference `json:"certificateRefs,omitempty"`
+	CertificateRefs []SecretObjectReference `json:"certificateRefs,omitempty"`
 
 	// Options are a list of key/value pairs to enable extended TLS
 	// configuration for each implementation. For example, configuring the
@@ -641,7 +645,6 @@ const (
 	//
 	// * "HostnameConflict"
 	// * "ProtocolConflict"
-	// * "RouteConflict"
 	//
 	// Possible reasons for this condition to be False are:
 	//
@@ -663,13 +666,6 @@ const (
 	// number, but have conflicting protocol specifications.
 	ListenerReasonProtocolConflict ListenerConditionReason = "ProtocolConflict"
 
-	// This reason is used with the "Conflicted" condition when the route
-	// resources selected for this Listener conflict with other
-	// specified properties of the Listener (e.g. Protocol).
-	// For example, a Listener that specifies "UDP" as the protocol
-	// but a route selector that resolves "TCPRoute" objects.
-	ListenerReasonRouteConflict ListenerConditionReason = "RouteConflict"
-
 	// This reason is used with the "Conflicted" condition when the condition
 	// is False.
 	ListenerReasonNoConflicts ListenerConditionReason = "NoConflicts"
@@ -689,7 +685,6 @@ const (
 	// Possible reasons for this condition to be true are:
 	//
 	// * "PortUnavailable"
-	// * "UnsupportedExtension"
 	// * "UnsupportedProtocol"
 	// * "UnsupportedAddress"
 	//
@@ -710,12 +705,6 @@ const (
 	// * The port is not supported by the implementation.
 	ListenerReasonPortUnavailable ListenerConditionReason = "PortUnavailable"
 
-	// This reason is used with the "Detached" condition when the
-	// controller detects that an implementation-specific Listener
-	// extension is being requested, but is not able to support
-	// the extension.
-	ListenerReasonUnsupportedExtension ListenerConditionReason = "UnsupportedExtension"
-
 	// This reason is used with the "Detached" condition when the
 	// Listener could not be attached to be Gateway because its
 	// protocol type is not supported.
@@ -769,7 +758,7 @@ const (
 	// This reason is used with the "ResolvedRefs" condition when
 	// one of the Listener's Routes has a BackendRef to an object in
 	// another namespace, where the object in the other namespace does
-	// not have a ReferencePolicy explicitly allowing the reference.
+	// not have a ReferenceGrant explicitly allowing the reference.
 	ListenerReasonRefNotPermitted ListenerConditionReason = "RefNotPermitted"
 )
 

apis/v1alpha2/gatewayclass_types.go

@@ -27,6 +27,7 @@ import (
 // +kubebuilder:subresource:status
 // +kubebuilder:storageversion
 // +kubebuilder:printcolumn:name="Controller",type=string,JSONPath=`.spec.controllerName`
+// +kubebuilder:printcolumn:name="Accepted",type=string,JSONPath=`.status.conditions[?(@.type=="Accepted")].status`
 // +kubebuilder:printcolumn:name="Age",type=date,JSONPath=`.metadata.creationTimestamp`
 // +kubebuilder:printcolumn:name="Description",type=string,JSONPath=`.spec.description`,priority=1