feat(*) add support for TLSRoute

CHANGELOG.md

@@ -81,6 +81,8 @@
   [#2451](https://github.com/Kong/kubernetes-ingress-controller/issues/2451)
 - Added description of each field of `kongIngresses` CRD.
   [#1766](https://github.com/Kong/kubernetes-ingress-controller/issues/1766)
+- Added support for `TLSRoute` resources.
+  [#2476](https://github.com/Kong/kubernetes-ingress-controller/issues/2476)
 
 #### Fixed
 

Makefile

@@ -189,7 +189,7 @@ debug-container:
 NCPU ?= $(shell getconf _NPROCESSORS_ONLN)
 PKG_LIST = ./pkg/...,./internal/...
 KIND_CLUSTER_NAME ?= "integration-tests"
-INTEGRATION_TEST_TIMEOUT ?= "20m"
+INTEGRATION_TEST_TIMEOUT ?= "25m"
 E2E_TEST_TIMEOUT ?= "30m"
 
 .PHONY: test

PROJECT

@@ -84,4 +84,9 @@ resources:
   group: gateway
   kind: ReferencePolicy
   version: v1alpha2
+- controller: true
+  domain: networking.k8s.io
+  group: gateway
+  kind: TLSRoute
+  version: v1alpha2
 version: "3"

config/rbac/role.yaml

@@ -273,6 +273,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

deploy/single/all-in-one-dbless-k4k8s-enterprise.yaml

@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

deploy/single/all-in-one-dbless.yaml

@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

deploy/single/all-in-one-postgres-enterprise.yaml

@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

deploy/single/all-in-one-postgres.yaml

@@ -1281,6 +1281,21 @@ rules:
   verbs:
   - get
   - update
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes
+  verbs:
+  - get
+  - list
+  - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - tlsroutes/status
+  verbs:
+  - get
+  - update
 - apiGroups:
   - gateway.networking.k8s.io
   resources:

examples/gateway-tlsroute.yaml

@@ -0,0 +1,78 @@
+# WARNING: Gateway APIs support is still experimental. Use as your own risk.
+#
+# NOTE: You need to install the Gateway APIs CRDs before using this example,
+#       they are external and can be deployed with the following one-liner:
+#
+# kubectl kustomize https://github.com/kubernetes-sigs/gateway-api.git/config/crd?ref=master | kubectl apply -f -
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: tcpecho
+  labels:
+    app: tcpecho
+spec:
+  selector:
+    matchLabels:
+      app: tcpecho
+  template:
+    metadata:
+      labels:
+        app: tcpecho
+    spec:
+      containers:
+      - name: tcpecho
+        image: cjimti/go-echo
+        ports:
+        - containerPort: 1025
+        env:
+        - name: POD_NAME
+          value: tlsroute-example-manifest
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: tcpecho
+spec:
+  ports:
+  - port: 8888
+    protocol: TCP
+    targetPort: 1025
+  selector:
+    app: tcpecho
+  type: ClusterIP
+---
+kind: GatewayClass
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+  name: kong
+spec:
+  controllerName: konghq.com/kic-gateway-controller
+---
+kind: Gateway
+apiVersion: gateway.networking.k8s.io/v1alpha2
+metadata:
+  name: kong
+spec:
+  gatewayClassName: kong
+  listeners:
+  - name: http
+    protocol: HTTP
+    port: 80
+  - name: tcp
+    protocol: TCP
+    port: 8888
+---
+apiVersion: gateway.networking.k8s.io/v1alpha2
+kind: TLSRoute
+metadata:
+  name: tlsecho
+spec:
+  parentRefs:
+  - name: kong
+  hostnames:
+  - tlsecho.kong.example
+  rules:
+  - backendRefs:
+    - name: tcpecho
+      port: 8888

internal/controllers/gateway/route_utils.go

@@ -28,6 +28,8 @@ func parentRefsForRoute(obj client.Object) ([]gatewayv1alpha2.ParentReference, e
 		return v.Spec.ParentRefs, nil
 	case *gatewayv1alpha2.TCPRoute:
 		return v.Spec.ParentRefs, nil
+	case *gatewayv1alpha2.TLSRoute:
+		return v.Spec.ParentRefs, nil
 	default:
 		return nil, fmt.Errorf("cant determine parent gateway for unsupported type %s", reflect.TypeOf(obj))
 	}