Merge pull request #736 from robscott/policy-implementation

Implementing policy attachment GEP
kubernetes-sigs · Aug 11, 2021 · 73456c6 · 73456c6
2 parents 8a16b18 + f35e993
commit 73456c6
Show file tree

Hide file tree

Showing 23 changed files with 381 additions and 280 deletions.
diff --git a/apis/v1alpha2/policy_types.go b/apis/v1alpha2/policy_types.go
@@ -0,0 +1,60 @@
+/*
+Copyright 2021 The Kubernetes Authors.
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+    http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
+*/
+
+package v1alpha2
+
+// PolicyTargetReference identifies an API object to apply policy to. This
+// should be used as part of Policy resources that can target Gateway API
+// resources. For more information on how this policy attachment model works,
+// and a sample Policy resource, refer to the policy attachment documentation
+// for Gateway API.
+type PolicyTargetReference struct {
+	// Group is the group of the target resource.
+	//
+	// +kubebuilder:validation:MinLength=1
+	// +kubebuilder:validation:MaxLength=253
+	Group string `json:"group"`
+
+	// Kind is kind of the target resource.
+	//
+	// +kubebuilder:validation:MinLength=1
+	// +kubebuilder:validation:MaxLength=253
+	Kind string `json:"kind"`
+
+	// Name is the name of the target resource.
+	//
+	// +kubebuilder:validation:MinLength=1
+	// +kubebuilder:validation:MaxLength=253
+	Name string `json:"name"`
+
+	// Namespace is the namespace of the referent. When unspecified, the local
+	// namespace is inferred. Even when policy targets a resource in a different
+	// namespace, it MUST only apply to traffic originating from the same
+	// namespace as the policy.
+	//
+	// +kubebuilder:validation:MinLength=1
+	// +kubebuilder:validation:MaxLength=253
+	// +optional
+	Namespace *string `json:"namespace,omitempty"`
+
+	// ClassName is the name of the class this policy should apply to. When
+	// unspecified, the policy will apply to all classes that support it.
+	//
+	// +kubebuilder:validation:MinLength=1
+	// +kubebuilder:validation:MaxLength=253
+	// +optional
+	ClassName *string `json:"className,omitempty"`
+}
diff --git a/apis/v1alpha2/zz_generated.deepcopy.go b/apis/v1alpha2/zz_generated.deepcopy.go
diff --git a/site-src/geps/gep-713.md b/site-src/geps/gep-713.md
@@ -1,7 +1,7 @@
 # GEP-713: Policy Attachment
 
 * Issue: [#713](https://github.com/kubernetes-sigs/gateway-api/issues/713)
-* Status: Implementable
+* Status: Implemented
 
 ## TLDR
 

diff --git a/site-src/images b/site-src/images
@@ -0,0 +1 @@
+v1alpha2/images
diff --git a/site-src/images/api-model.png b/site-src/images/api-model.png
diff --git a/site-src/images/gateway-roles.png b/site-src/images/gateway-roles.png
diff --git a/site-src/images/gateway-route-binding.png b/site-src/images/gateway-route-binding.png
diff --git a/site-src/images/http-routing.png b/site-src/images/http-routing.png
diff --git a/site-src/images/httproute-basic-example.svg b/site-src/images/httproute-basic-example.svg
diff --git a/site-src/images/schema-uml.svg b/site-src/images/schema-uml.svg
diff --git a/site-src/images/simple-split.png b/site-src/images/simple-split.png
diff --git a/site-src/images/single-service-gateway.png b/site-src/images/single-service-gateway.png
diff --git a/site-src/images/tls-overview.svg b/site-src/images/tls-overview.svg
diff --git a/site-src/images/traffic-splitting-1.png b/site-src/images/traffic-splitting-1.png
diff --git a/site-src/images/traffic-splitting-2.png b/site-src/images/traffic-splitting-2.png
diff --git a/site-src/images/traffic-splitting-3.png b/site-src/images/traffic-splitting-3.png
diff --git a/site-src/v1alpha2/images/policy/hierarchy.png b/site-src/v1alpha2/images/policy/hierarchy.png
diff --git a/site-src/v1alpha2/images/policy/ingress-attachment.png b/site-src/v1alpha2/images/policy/ingress-attachment.png
diff --git a/site-src/v1alpha2/images/policy/ingress-complex.png b/site-src/v1alpha2/images/policy/ingress-complex.png
diff --git a/site-src/v1alpha2/images/policy/ingress-simple.png b/site-src/v1alpha2/images/policy/ingress-simple.png
diff --git a/site-src/v1alpha2/images/policy/mesh-complex.png b/site-src/v1alpha2/images/policy/mesh-complex.png
diff --git a/site-src/v1alpha2/images/policy/mesh-simple.png b/site-src/v1alpha2/images/policy/mesh-simple.png