Skip to content

docs: add more info to README#1361

Merged
mattklein123 merged 1 commit into
masterfrom
mattklein123-patch-1
Jul 31, 2017
Merged

docs: add more info to README#1361
mattklein123 merged 1 commit into
masterfrom
mattklein123-patch-1

Conversation

@mattklein123
Copy link
Copy Markdown
Member

No description provided.

@mattklein123
Copy link
Copy Markdown
Member Author

@lyft/network-team @dnoe @htuch

@mattklein123 mattklein123 merged commit 80a272c into master Jul 31, 2017
@mattklein123 mattklein123 deleted the mattklein123-patch-1 branch July 31, 2017 22:57
rshriram pushed a commit to rshriram/envoy that referenced this pull request Oct 30, 2018
Automatic merge from submit-queue.

[BOT PR] to update dependencies of proxy

This PR will be merged automatically once checks are successful.
```release-note
none
```
mathetake pushed a commit that referenced this pull request Mar 3, 2026
…#1361)

**Description**

This PR implements comprehensive cross-namespace access support between
AIServiceBackend and AIGatewayRoute resources, following Gateway API
patterns with ReferenceGrant validation.

**API Enhancements**
- Added namespace field to AIGatewayRouteRuleBackendRef allowing
cross-namespace backend references
- Updated CRDs to include proper validation for the namespace field
Enhanced documentation explaining ReferenceGrant requirements for
cross-namespace access
**ReferenceGrant Integration**
- ReferenceGrant Validator: New component that validates cross-namespace
references against ReferenceGrant resources
- ReferenceGrant Controller: Watches ReferenceGrant resources and
triggers reconciliation of affected AIGatewayRoutes when grants change
- Automatic validation: Cross-namespace references are automatically
validated at reconciliation time

**Controller Updates**
- Cross-namespace backend lookups: AIGatewayRoute controller now
supports referencing AIServiceBackend resources in different namespaces
- ReferenceGrant enforcement: Fails reconciliation with clear error
messages when valid ReferenceGrant is missing
- Event-driven reconciliation: ReferenceGrant changes trigger automatic
reconciliation of affected routes


**Comprehensive Testing**
- Unit tests: Full coverage for ReferenceGrant validation logic,
cross-namespace scenarios, and error cases
- Integration tests: Controller tests validating cross-namespace backend
references with and without ReferenceGrant
- E2E test updates: Modified existing cross-namespace test to validate
AIServiceBackend cross-namespace access with ReferenceGrant

AIGatewayRouteBackendRefChange: 
```
# AIGatewayRouteRuleBackendRef now supports:
backendRefs:
- name: my-backend
  namespace: other-namespace  # NEW: Cross-namespace reference
  weight: 1
```

Reference Grant Example: 
```
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
  name: allow-route-to-backend
  namespace: backend-ns
spec:
  from:
    - group: aigateway.envoyproxy.io
      kind: AIGatewayRoute
      namespace: route-ns
  to:
    - group: aigateway.envoyproxy.io
      kind: AIServiceBackend
```

**Related Issues/PRs (if applicable)**
close #1374

---------

Signed-off-by: siddharth1036 <siddharthshah1036@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants