sigs.k8s.io/gateway-api@v1.0.0/conformance/tests/tlsroute-invalid-reference-grant.yaml (about)

     1  ---
     2  apiVersion: gateway.networking.k8s.io/v1beta1
     3  kind: ReferenceGrant
     4  metadata:
     5    name: reference-grant-wrong-namespace
     6    namespace: gateway-conformance-infra
     7  spec:
     8    from:
     9      - group: gateway.networking.k8s.io
    10        kind: TLSRoute
    11        namespace: gateway-conformance-infra
    12    to:
    13      - group: ""
    14        kind: Service
    15        name: tls-backend
    16  ---
    17  apiVersion: gateway.networking.k8s.io/v1beta1
    18  kind: ReferenceGrant
    19  metadata:
    20    name: reference-grant-wrong-from-group
    21    namespace: gateway-conformance-app-backend
    22  spec:
    23    from:
    24      - group: not-the-group-youre-looking-for
    25        kind: TLSRoute
    26        namespace: gateway-conformance-infra
    27    to:
    28      - group: ""
    29        kind: Service
    30        name: tls-backend
    31  ---
    32  apiVersion: gateway.networking.k8s.io/v1beta1
    33  kind: ReferenceGrant
    34  metadata:
    35    name: reference-grant-wrong-from-kind
    36    namespace: gateway-conformance-app-backend
    37  spec:
    38    from:
    39      - group: gateway.networking.k8s.io
    40        kind: Gateway
    41        namespace: gateway-conformance-infra
    42    to:
    43      - group: ""
    44        kind: Service
    45        name: tls-backend
    46  ---
    47  apiVersion: gateway.networking.k8s.io/v1beta1
    48  kind: ReferenceGrant
    49  metadata:
    50    name: reference-grant-wrong-from-namespace
    51    namespace: gateway-conformance-app-backend
    52  spec:
    53    from:
    54      - group: gateway.networking.k8s.io
    55        kind: TLSRoute
    56        namespace: not-the-namespace-youre-looking-for
    57    to:
    58      - group: ""
    59        kind: Service
    60        name: tls-backend
    61  ---
    62  apiVersion: gateway.networking.k8s.io/v1beta1
    63  kind: ReferenceGrant
    64  metadata:
    65    name: reference-grant-wrong-to-group
    66    namespace: gateway-conformance-app-backend
    67  spec:
    68    from:
    69      - group: gateway.networking.k8s.io
    70        kind: TLSRoute
    71        namespace: gateway-conformance-infra
    72    to:
    73      - group: not-the-group-youre-looking-for
    74        kind: Service
    75        name: tls-backend
    76  ---
    77  apiVersion: gateway.networking.k8s.io/v1beta1
    78  kind: ReferenceGrant
    79  metadata:
    80    name: reference-grant-wrong-to-kind
    81    namespace: gateway-conformance-app-backend
    82  spec:
    83    from:
    84      - group: gateway.networking.k8s.io
    85        kind: TLSRoute
    86        namespace: gateway-conformance-infra
    87    to:
    88      - group: ""
    89        kind: Secret
    90        name: tls-backend
    91  ---
    92  apiVersion: gateway.networking.k8s.io/v1beta1
    93  kind: ReferenceGrant
    94  metadata:
    95    name: reference-grant-wrong-to-name
    96    namespace: gateway-conformance-app-backend
    97  spec:
    98    from:
    99      - group: gateway.networking.k8s.io
   100        kind: TLSRoute
   101        namespace: gateway-conformance-infra
   102    to:
   103      - group: ""
   104        kind: Service
   105        name: not-the-service-youre-looking-for
   106  ---
   107  apiVersion: gateway.networking.k8s.io/v1alpha2
   108  kind: TLSRoute
   109  metadata:
   110    name: gateway-conformance-infra-test
   111    namespace: gateway-conformance-infra
   112  spec:
   113    parentRefs:
   114      - name: gateway-tlsroute-referencegrant
   115    hostnames:
   116      - abc.example.com
   117    rules:
   118      - backendRefs:
   119          - name: tls-backend
   120            namespace: gateway-conformance-app-backend
   121            port: 443
   122  ---
   123  apiVersion: gateway.networking.k8s.io/v1beta1
   124  kind: Gateway
   125  metadata:
   126    name: gateway-tlsroute-referencegrant
   127    namespace: gateway-conformance-infra
   128  spec:
   129    gatewayClassName: "{GATEWAY_CLASS_NAME}"
   130    listeners:
   131      - name: https
   132        port: 443
   133        protocol: TLS
   134        hostname: "*.example.com"
   135        allowedRoutes:
   136          namespaces:
   137            from: Same
   138          kinds:
   139            - kind: TLSRoute
   140        tls:
   141          mode: Passthrough