From 0ff674842762a35357e914c1a6fbb1447a343c8f Mon Sep 17 00:00:00 2001 From: Mike Morris Date: Tue, 21 Jun 2022 16:03:03 -0400 Subject: [PATCH 1/2] charts: add ReferenceGrant permissions to Consul API Gateway ClusterRole --- .../templates/api-gateway-controller-clusterrole.yaml | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/charts/consul/templates/api-gateway-controller-clusterrole.yaml b/charts/consul/templates/api-gateway-controller-clusterrole.yaml index c527e8d54a..5253fd349c 100644 --- a/charts/consul/templates/api-gateway-controller-clusterrole.yaml +++ b/charts/consul/templates/api-gateway-controller-clusterrole.yaml @@ -114,6 +114,14 @@ rules: - get - list - watch +- apiGroups: + - gateway.networking.k8s.io + resources: + - referencegrants + verbs: + - get + - list + - watch - apiGroups: - gateway.networking.k8s.io resources: From d404ada9269ade15b47796f554708a2e405ae06a Mon Sep 17 00:00:00 2001 From: Mike Morris Date: Wed, 29 Jun 2022 17:00:29 -0400 Subject: [PATCH 2/2] changelog: add entry for Consul API Gateway ReferenceGrant support --- CHANGELOG.md | 1 + 1 file changed, 1 insertion(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index e65bab291c..de414d41ae 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -13,6 +13,7 @@ FEATURES: IMPROVEMENTS: * Helm * Bump default Envoy version to 1.23.0. [[GH-1377](https://github.com/hashicorp/consul-k8s/pull/1377)] + * Added support for Consul API Gateway to read ReferenceGrant custom resources. This will require either installing Consul API Gateway CRDs from the upcoming v0.4.0 release with `kubectl apply --kustomize "github.com/hashicorp/consul-api-gateway/config/crd?ref=v0.4.0"` or manually installing the ReferenceGrant CRD from the Gateway API v0.5 [Experimental Channel](https://gateway-api.sigs.k8s.io/concepts/versioning/#release-channels-eg-experimental-standard) when setting `apiGateway.enabled=true` [[GH-1299](https://github.com/hashicorp/consul-k8s/pull/1299)] ## 0.46.1 (July 26, 2022)