[Feature] Add Gateway Config condition

CHANGELOG.md

@@ -6,6 +6,7 @@
 - (Feature) Helm Lint
 - (Bugfix) Helm Lint Indent fix
 - (Feature) Add CA Certificates
+- (Feature) Add Gateway Config condition
 
 ## [1.3.0](https://github.com/arangodb/kube-arangodb/tree/1.3.0) (2025-08-01)
 - (Feature) (Platform) Storage Debug

pkg/apis/deployment/v1/conditions.go

@@ -135,6 +135,9 @@ const (
 	ConditionTypeDBServerWithData ConditionType = "DBServerWithData"
 	// ConditionTypeSyncEnabled Define if DBServer contains any active data leaders
 	ConditionTypeDBServerWithDataLeader ConditionType = "DBServerWithDataLeader"
+
+	// ConditionTypeGatewayConfig contains current config checksum of the Gateway
+	ConditionTypeGatewayConfig ConditionType = "GatewayConfig"
 )
 
 // Condition represents one current condition of a deployment or deployment member.

pkg/apis/deployment/v2alpha1/conditions.go

@@ -135,6 +135,9 @@ const (
 	ConditionTypeDBServerWithData ConditionType = "DBServerWithData"
 	// ConditionTypeSyncEnabled Define if DBServer contains any active data leaders
 	ConditionTypeDBServerWithDataLeader ConditionType = "DBServerWithDataLeader"
+
+	// ConditionTypeGatewayConfig contains current config checksum of the Gateway
+	ConditionTypeGatewayConfig ConditionType = "GatewayConfig"
 )
 
 // Condition represents one current condition of a deployment or deployment member.

pkg/deployment/client/client.go

@@ -27,6 +27,7 @@ import (
 
 	"github.com/arangodb/go-driver"
 
+	pbInventoryV1 "github.com/arangodb/kube-arangodb/integrations/inventory/v1/definition"
 	"github.com/arangodb/kube-arangodb/pkg/logging"
 )
 
@@ -57,6 +58,8 @@ type Client interface {
 	DeleteExpiredJobs(ctx context.Context, timeout time.Duration) error
 
 	Compact(ctx context.Context, request *CompactRequest) error
+
+	Inventory(ctx context.Context) (*pbInventoryV1.Inventory, error)
 }
 
 type client struct {

pkg/deployment/client/inventory.go

@@ -0,0 +1,54 @@
+//
+// DISCLAIMER
+//
+// Copyright 2025 ArangoDB GmbH, Cologne, Germany
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// Copyright holder is ArangoDB GmbH, Cologne, Germany
+//
+
+package client
+
+import (
+	"context"
+	goHttp "net/http"
+
+	pbInventoryV1 "github.com/arangodb/kube-arangodb/integrations/inventory/v1/definition"
+	utilConstants "github.com/arangodb/kube-arangodb/pkg/util/constants"
+	ugrpc "github.com/arangodb/kube-arangodb/pkg/util/grpc"
+)
+
+func (c *client) Inventory(ctx context.Context) (*pbInventoryV1.Inventory, error) {
+	req, err := c.c.NewRequest(goHttp.MethodGet, utilConstants.EnvoyInventoryConfigDestination)
+	if err != nil {
+		return nil, err
+	}
+
+	resp, err := c.c.Do(ctx, req)
+	if err != nil {
+		return nil, err
+	}
+
+	if err := resp.CheckStatus(goHttp.StatusOK); err != nil {
+		return nil, err
+	}
+
+	var l ugrpc.GRPC[*pbInventoryV1.Inventory]
+
+	if err := resp.ParseBody("", &l); err != nil {
+		return nil, err
+	}
+
+	return l.Object, nil
+}

pkg/deployment/reconcile/context.go

@@ -1,7 +1,7 @@
 //
 // DISCLAIMER
 //
-// Copyright 2016-2023 ArangoDB GmbH, Cologne, Germany
+// Copyright 2016-2025 ArangoDB GmbH, Cologne, Germany
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -42,7 +42,7 @@ type Context interface {
 	reconciler.DeploymentImageManager
 	reconciler.ArangoAgencyGet
 	reconciler.ArangoApplier
-	reconciler.DeploymentInfoGetter
+	reconciler.DeploymentGetter
 	reconciler.DeploymentDatabaseClient
 	reconciler.KubernetesEventGenerator
 

pkg/deployment/reconcile/plan_builder_context.go

@@ -1,7 +1,7 @@
 //
 // DISCLAIMER
 //
-// Copyright 2016-2023 ArangoDB GmbH, Cologne, Germany
+// Copyright 2016-2025 ArangoDB GmbH, Cologne, Germany
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -35,7 +35,7 @@ import (
 type PlanBuilderContext interface {
 	reconciler.DeploymentStatusUpdate
 
-	reconciler.DeploymentInfoGetter
+	reconciler.DeploymentGetter
 	reconciler.DeploymentAgencyMaintenance
 	reconciler.DeploymentPodRenderer
 	reconciler.DeploymentImageManager

pkg/deployment/reconcile/plan_builder_gateway.go

@@ -0,0 +1,71 @@
+//
+// DISCLAIMER
+//
+// Copyright 2025 ArangoDB GmbH, Cologne, Germany
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+//
+// Copyright holder is ArangoDB GmbH, Cologne, Germany
+//
+
+package reconcile
+
+import (
+	"context"
+	"time"
+
+	core "k8s.io/api/core/v1"
+
+	pbInventoryV1 "github.com/arangodb/kube-arangodb/integrations/inventory/v1/definition"
+	api "github.com/arangodb/kube-arangodb/pkg/apis/deployment/v1"
+	client "github.com/arangodb/kube-arangodb/pkg/deployment/client"
+	sharedReconcile "github.com/arangodb/kube-arangodb/pkg/deployment/reconcile/shared"
+	"github.com/arangodb/kube-arangodb/pkg/util/k8sutil"
+)
+
+func (r *Reconciler) createMemberGatewayConfigConditionPlan(ctx context.Context, _ k8sutil.APIObject, _ api.DeploymentSpec,
+	status api.DeploymentStatus, planCtx PlanBuilderContext) api.Plan {
+	var plan api.Plan
+
+	// Check for members in failed state.
+	for _, m := range status.Members.AsListInGroup(api.ServerGroupGateways) {
+		inv, err := r.getGatewayInventoryConfig(ctx, planCtx, m.Group, m.Member)
+		if err != nil {
+			if c, ok := m.Member.Conditions.Get(api.ConditionTypeGatewayConfig); !ok || c.Status == core.ConditionTrue {
+				plan = append(plan, sharedReconcile.UpdateMemberConditionActionV2("Config is not present", api.ConditionTypeGatewayConfig, m.Group, m.Member.ID, false, "Config is not present", "Config is not present", ""))
+			}
+
+			continue
+		}
+
+		if c, ok := m.Member.Conditions.Get(api.ConditionTypeGatewayConfig); !ok || c.Status == core.ConditionFalse || c.Hash != inv.GetConfiguration().GetHash() {
+			plan = append(plan, sharedReconcile.UpdateMemberConditionActionV2("Config Present", api.ConditionTypeGatewayConfig, m.Group, m.Member.ID, false, "Config Present", "Config Present", inv.GetConfiguration().GetHash()))
+		}
+	}
+
+	return plan
+}
+
+func (r *Reconciler) getGatewayInventoryConfig(ctx context.Context, planCtx PlanBuilderContext, group api.ServerGroup, member api.MemberStatus) (*pbInventoryV1.Inventory, error) {
+	serverClient, err := planCtx.GetServerClient(ctx, group, member.ID)
+	if err != nil {
+		return nil, err
+	}
+
+	internalClient := client.NewClient(serverClient.Connection(), logger)
+
+	lCtx, c := context.WithTimeout(ctx, 500*time.Millisecond)
+	defer c()
+
+	return internalClient.Inventory(lCtx)
+}

pkg/deployment/reconcile/plan_builder_high.go

@@ -55,6 +55,7 @@ func (r *Reconciler) createHighPlan(ctx context.Context, apiObject k8sutil.APIOb
 		ApplyIfEmpty(r.updateMemberUpdateConditionsPlan).
 		ApplyIfEmpty(r.updateMemberRotationConditionsPlan).
 		ApplyIfEmpty(r.createMemberAllowUpgradeConditionPlan).
+		ApplyIfEmpty(r.createMemberGatewayConfigConditionPlan).
 		ApplyIfEmpty(r.createMemberRecreationConditionsPlan).
 		ApplyIfEmpty(r.createMemberPodSchedulingFailurePlan).
 		ApplyIfEmpty(r.createRotateServerStoragePVCPendingResizeConditionPlan).

pkg/deployment/reconcile/plan_builder_test.go

@@ -82,6 +82,16 @@ type testContext struct {
 	state     member.StateInspector
 }
 
+func (c *testContext) GetServerClient(ctx context.Context, group api.ServerGroup, id string) (driver.Client, error) {
+	//TODO implement me
+	panic("implement me")
+}
+
+func (c *testContext) GetSyncServerClient(ctx context.Context, group api.ServerGroup, id string) (client.API, error) {
+	//TODO implement me
+	panic("implement me")
+}
+
 func (c *testContext) IsSyncEnabled() bool {
 	return false
 }

pkg/deployment/resources/config_map_gateway.go

@@ -53,37 +53,6 @@ func (r *Resources) ensureGatewayConfig(ctx context.Context, cachedStatus inspec
 		return errors.WithStack(errors.Wrapf(err, "Failed to generate gateway config"))
 	}
 
-	_, baseGatewayCfgYamlChecksum, _, err := cfg.RenderYAML()
-	if err != nil {
-		return errors.WithStack(errors.Wrapf(err, "Failed to render gateway config"))
-	}
-
-	cfg.Destinations[utilConstants.EnvoyInventoryConfigDestination] = gateway.ConfigDestination{
-		Type:  util.NewType(gateway.ConfigDestinationTypeStatic),
-		Match: util.NewType(gateway.ConfigMatchPath),
-		AuthExtension: &gateway.ConfigAuthZExtension{
-			AuthZExtension: map[string]string{
-				pbImplEnvoyAuthV3Shared.AuthConfigAuthRequiredKey: pbImplEnvoyAuthV3Shared.AuthConfigKeywordTrue,
-				pbImplEnvoyAuthV3Shared.AuthConfigAuthPassModeKey: string(networkingApi.ArangoRouteSpecAuthenticationPassModeRemove),
-			},
-		},
-		Static: &gateway.ConfigDestinationStatic[*pbInventoryV1.Inventory]{
-			Code: util.NewType[uint32](200),
-			Response: &pbInventoryV1.Inventory{
-				Configuration: &pbInventoryV1.InventoryConfiguration{
-					Hash: baseGatewayCfgYamlChecksum,
-				},
-				Arangodb: pbInventoryV1.NewArangoDBConfiguration(r.context.GetSpec(), r.context.GetStatus()),
-			},
-			Marshaller: ugrpc.Marshal[*pbInventoryV1.Inventory],
-			Options: []util.Mod[protojson.MarshalOptions]{
-				func(in *protojson.MarshalOptions) {
-					in.EmitDefaultValues = true
-				},
-			},
-		},
-	}
-
 	cfg.Destinations[utilConstants.EnvoyIdentityDestination] = gateway.ConfigDestination{
 		Type:  util.NewType(gateway.ConfigDestinationTypeHTTP),
 		Match: util.NewType(gateway.ConfigMatchPath),
@@ -138,6 +107,37 @@ func (r *Resources) ensureGatewayConfig(ctx context.Context, cachedStatus inspec
 		},
 	}
 
+	_, baseGatewayCfgYamlChecksum, _, err := cfg.RenderYAML()
+	if err != nil {
+		return errors.WithStack(errors.Wrapf(err, "Failed to render gateway config"))
+	}
+
+	cfg.Destinations[utilConstants.EnvoyInventoryConfigDestination] = gateway.ConfigDestination{
+		Type:  util.NewType(gateway.ConfigDestinationTypeStatic),
+		Match: util.NewType(gateway.ConfigMatchPath),
+		AuthExtension: &gateway.ConfigAuthZExtension{
+			AuthZExtension: map[string]string{
+				pbImplEnvoyAuthV3Shared.AuthConfigAuthRequiredKey: pbImplEnvoyAuthV3Shared.AuthConfigKeywordTrue,
+				pbImplEnvoyAuthV3Shared.AuthConfigAuthPassModeKey: string(networkingApi.ArangoRouteSpecAuthenticationPassModeRemove),
+			},
+		},
+		Static: &gateway.ConfigDestinationStatic[*pbInventoryV1.Inventory]{
+			Code: util.NewType[uint32](200),
+			Response: &pbInventoryV1.Inventory{
+				Configuration: &pbInventoryV1.InventoryConfiguration{
+					Hash: baseGatewayCfgYamlChecksum,
+				},
+				Arangodb: pbInventoryV1.NewArangoDBConfiguration(r.context.GetSpec(), r.context.GetStatus()),
+			},
+			Marshaller: ugrpc.Marshal[*pbInventoryV1.Inventory],
+			Options: []util.Mod[protojson.MarshalOptions]{
+				func(in *protojson.MarshalOptions) {
+					in.EmitDefaultValues = true
+				},
+			},
+		},
+	}
+
 	gatewayCfgYaml, _, _, err := cfg.RenderYAML()
 	if err != nil {
 		return errors.WithStack(errors.Wrapf(err, "Failed to render gateway config"))

pkg/deployment/resources/config_maps.go

@@ -1,7 +1,7 @@
 //
 // DISCLAIMER
 //
-// Copyright 2024 ArangoDB GmbH, Cologne, Germany
+// Copyright 2024-2025 ArangoDB GmbH, Cologne, Germany
 //
 // Licensed under the Apache License, Version 2.0 (the "License");
 // you may not use this file except in compliance with the License.
@@ -51,5 +51,6 @@ func (r *Resources) EnsureConfigMaps(ctx context.Context, cachedStatus inspector
 			return errors.Section(err, "Member ConfigMap")
 		}
 	}
+
 	return reconcileRequired.Reconcile(ctx)
 }