Cross ns attachment

[zhaohuabing]

Picking up #5145 and continuing the work from here. Thanks, @guydc, for the earlier work on this.

[netlify]

✅ Deploy Preview for cerulean-figolla-1f9435 canceled.

Name	Link
🔨 Latest commit	044fc0c
🔍 Latest deploy log	https://app.netlify.com/projects/cerulean-figolla-1f9435/deploys/69e732ac36f50f0008115638

[codecov]

Codecov Report

❌ Patch coverage is 86.08247% with 54 lines in your changes missing coverage. Please review.
✅ Project coverage is 74.49%. Comparing base (a7545ce) to head (82c7813).
⚠️ Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
internal/gatewayapi/envoyextensionpolicy.go	44.00%	12 Missing and 2 partials ⚠️
internal/gatewayapi/securitypolicy.go	58.82%	12 Missing and 2 partials ⚠️
internal/gatewayapi/helpers.go	91.66%	7 Missing and 5 partials ⚠️
internal/gatewayapi/clienttrafficpolicy.go	83.33%	6 Missing and 1 partial ⚠️
internal/provider/kubernetes/controller.go	91.02%	5 Missing and 2 partials ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #8676      +/-   ##
==========================================
+ Coverage   74.40%   74.49%   +0.08%     
==========================================
  Files         245      245              
  Lines       38973    39275     +302     
==========================================
+ Hits        28998    29258     +260     
- Misses       7971     8002      +31     
- Partials     2004     2015      +11     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: e507c223d1

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Resolve gateway targets using the target namespace

extractTargetRefs now returns cross-namespace matches when a ReferenceGrant allows them, but this resolver still keys lookups by policy.GetNamespace(). In that scenario, valid cross-namespace targets are treated as missing, and if a same-named Gateway exists in the policy namespace the policy can bind to the wrong Gateway. The lookup should use target.Namespace from the resolved target reference.

Useful? React with 👍 / 👎.