Todd MarimonandMarkus Pesch
7747a001f7
Add full Gateway API support for exposing Gitea via HTTPRoute, TCPRoute, BackendTLSPolicy, and ClientSettingsPolicy resources. New templates: - `httpRoute.yaml` — renders an HTTPRoute with configurable parentRefs, hostnames, and rules (defaults to PathPrefix `/`) - `tcpRoute.yaml` — renders a TCPRoute for SSH traffic - `backendTLSPolicy.yaml` — renders a BackendTLSPolicy for encrypted backend connections with required validation config - `clientSettingsPolicy.yaml` — renders an NGINX Gateway Fabric ClientSettingsPolicy to raise the request body size limit Infrastructure: - `gatewayAPI.enabled` global toggle gates all resources - Resources grouped under `gatewayAPI.core.*` and `gatewayAPI.nginx.*` - Helper templates extracted into dedicated `_*.tpl` files - Service name helpers (`gitea.service.http.name`, `gitea.service.ssh.name`) extracted into `_services.tpl`; service templates renamed to camelCase - `ROOT_URL`, `DOMAIN`, and `SSH_DOMAIN` auto-resolve from `httpRoute.hostnames[0]`; `httpRoute.tls` switches to `https` Documentation: - New `docs/gateway-api.md` with topology examples, BackendTLSPolicy setup, sectionName guidance, SSH considerations, and NGINX body size limit configuration - `.github/copilot-instructions.md` with project conventions - README parameter table auto-generated via `make readme` Tests: - Helm unit tests for all four new resource templates - Config tests for hostname/TLS resolution from Gateway API values Co-authored-by: Todd Marimon <toddmarimon@gmail.com>
80 lines
1.9 KiB
YAML
80 lines
1.9 KiB
YAML
suite: Test Gateway API tcpRoute.yaml
|
|
release:
|
|
name: gitea-unittests
|
|
namespace: testing
|
|
templates:
|
|
- templates/gitea/tcpRoute.yaml
|
|
tests:
|
|
- it: should not render when gatewayAPI.enabled is false
|
|
set:
|
|
gatewayAPI:
|
|
enabled: false
|
|
core:
|
|
tcpRoute:
|
|
enabled: true
|
|
parentRefs:
|
|
- name: shared-gateway
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should not render when tcpRoute.enabled is false
|
|
set:
|
|
gatewayAPI:
|
|
enabled: true
|
|
gatewayAPI.core.tcpRoute.enabled: false
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 0
|
|
|
|
- it: should render a TCPRoute defaulting to the SSH service
|
|
set:
|
|
gatewayAPI:
|
|
enabled: true
|
|
core:
|
|
tcpRoute:
|
|
enabled: true
|
|
parentRefs:
|
|
- name: shared-gateway
|
|
sectionName: ssh
|
|
asserts:
|
|
- hasDocuments:
|
|
count: 1
|
|
- isKind:
|
|
of: TCPRoute
|
|
- equal:
|
|
path: apiVersion
|
|
value: gateway.networking.k8s.io/v1alpha2
|
|
- equal:
|
|
path: metadata.name
|
|
value: gitea-unittests
|
|
- equal:
|
|
path: spec.parentRefs[0].sectionName
|
|
value: ssh
|
|
- equal:
|
|
path: spec.rules[0].backendRefs[0].group
|
|
value: ""
|
|
- equal:
|
|
path: spec.rules[0].backendRefs[0].kind
|
|
value: Service
|
|
- equal:
|
|
path: spec.rules[0].backendRefs[0].name
|
|
value: gitea-unittests-ssh
|
|
- equal:
|
|
path: spec.rules[0].backendRefs[0].port
|
|
value: 22
|
|
- equal:
|
|
path: spec.rules[0].backendRefs[0].weight
|
|
value: 1
|
|
|
|
- it: should fail when parentRefs missing
|
|
set:
|
|
gatewayAPI:
|
|
enabled: true
|
|
core:
|
|
tcpRoute:
|
|
enabled: true
|
|
asserts:
|
|
- failedTemplate:
|
|
errorMessage: gatewayAPI.core.tcpRoute.parentRefs is required
|