Travis Raines

**What this PR does / why we need it**: Reconciles a Gateway if the controller sees a ReferenceGrant that has a From clause for the Gateway. Update Gateway statuses on...

Review Gateway Listener Conditions

1

#2557 uses Gateway Listener conditions to indicate when a Listener cannot become ready due to missing Kong configuration. It does not add cases to handle all the Listener conditions and...

TLS Passthrough does not work

4

## Problem Statement The desired state of TLS support for TLSRoutes is: 1. a `TLSRoute` configured on a `Gateway` with `listeners[].tls.mode` = `passthrough` to result in Kong **not terminating** the...

chore(ci) omit tests from license scan

1

**What this PR does / why we need it**: Removes the `test` directory before initiating the license scan, to omit test-only dependencies from license reports. We include our application and...

Change kongCredType to a label

1

### Is there an existing issue for this? - [X] I have searched the existing issues ### Problem Statement Currently the controller uses a special `kongCredType` key in Secret data...

### Is there an existing issue for this? - [X] I have searched the existing issues ### Current Behavior Creating a key-auth credential secret with a `ttl=1000` field fails to...

Use projected token or TokenRequest API

2

Per https://kubernetes.io/docs/concepts/configuration/secret/#service-account-token-secrets spawning Secrets for auto-population is no longer the standard method of obtaining those credentials, and the new methods provide more secure tokens. There are two options for obtaining...

DRY Condition checking

3

Gateway resources use [Conditions](https://pkg.go.dev/k8s.io/apimachinery/pkg/apis/meta/v1#Condition) extensively to indicate various status states. Various parts of the controller code need to check Conditions to see whether they can proceed or whether test criteria...

Support multiple Gateway Listener certificateRefs

2

Per https://gateway-api.sigs.k8s.io/v1alpha2/references/spec/#gateway.networking.k8s.io/v1alpha2.GatewayTLSConfig > A single CertificateRef to a Kubernetes Secret has “Core” support. Implementations MAY choose to support attaching multiple certificates to a Listener, but this behavior is implementation-specific. #2580...

Check and handle cross-Gateway compatibility

3

The unmanaged Gateway implementation within the controller will ingest any Gateway resource of the correct class. Because we cannot separate Gateways by address, we de facto always combine them Combination...