generated from kubernetes/kubernetes-template-project
-
Notifications
You must be signed in to change notification settings - Fork 659
GEP-713 enhancements #3609
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
k8s-ci-robot
merged 49 commits into
kubernetes-sigs:main
from
guicassolato:geps/713-enhancements
Nov 4, 2025
+1,130
−905
Merged
GEP-713 enhancements #3609
Changes from all commits
Commits
Show all changes
49 commits
Select commit
Hold shift + click to select a range
5124b12
GEP-713 resurrected
guicassolato bebddb2
update metadata files
guicassolato e61c5ae
not forcing annotations on objects not owned by the implementation
guicassolato 2ee59c2
conflict resolution section rewritten to clarify that the merge strat…
guicassolato ab18890
Metaresource spelled as a single word
guicassolato 1f8829d
addressing comments
guicassolato 039d653
fixing escaping of arrows and gt/lw characters
guicassolato 7b1144b
clarifying metaresource statuses' MUST vs SHOULD and example of targe…
guicassolato 4dd0251
targeting strategy -> targeting method, to avoid overloading of the t…
guicassolato 83a44dc
fix target object status MUST versus SHOULD
guicassolato 8a3c404
diagrams to illustrate the abstract process for calculating effective…
guicassolato f1d4ba5
golang examples of target refs
guicassolato b9d19c0
fix broken anchors
guicassolato dad177f
diagrams for the end-to-end examples
guicassolato c29e239
sentence rephrased for improved readability
guicassolato 46d6506
addressing a few comments by candita and robscott
guicassolato 19ce8e2
typos
guicassolato 3a0a6bb
Get GEP-713 back to Memorandum
guicassolato 0cef5f6
Reorg (take 1)
guicassolato 9a1bb4f
Reorg (take 2)
guicassolato 3d8924b
minor fixes
guicassolato 1745ce8
fix: typo in 'sectionName'
guicassolato 79f9df4
minor fixes (2)
guicassolato 790c5f3
fix: typos
guicassolato 7e3c84f
sentence about different kinds possibly implying different targetting…
guicassolato 47e0de1
small enhancements to description of' Hierarchy of target kinds' and …
guicassolato ffa7323
Clarifying enhancements to the definitions of merge strategy and rela…
guicassolato 2a8f591
added motivation to define 'classes of metaresources'
guicassolato 5515dc3
Preferring 'Policy' over 'Metaresource' when prescribing rules/schema…
guicassolato af91b62
Label selectors as a mechanism to target removed from the spec
guicassolato e3e0416
More thorough definitions for the spec'ed merge strategies
guicassolato a874f52
Further enhancements to the definition of Merge strategies after review
guicassolato a4a85d5
minor fix: plural targetRefs used in an example
guicassolato aeadd17
Tables highlighting the current state of policies across multiple imp…
guicassolato 86b1571
fix Envoy Gateway SecurityPolicy merge strategy
guicassolato 84b3b9e
cleanup redundant 'in other words' summary from the conflict resoluti…
guicassolato bae1452
Less negative disclaimer at the top
guicassolato c3cefcd
minor fix: change and augment are not synonyms
guicassolato a63dfbe
added goal: facilitate building tools + implementations should adopt,…
guicassolato dfc379e
keep support for singular form targetRef
guicassolato 4ec1b0b
use example.com in the examples
guicassolato 71d3b57
caveat to using sectionName
guicassolato 835f548
fix: list items and broken links
guicassolato a6fd468
Reorg for more easily flagging of the status of each feature (each ki…
guicassolato 94cbdd2
fix: several typos
guicassolato 76d8f8a
warning, danger, and info blocks turned into regular paragraphs
guicassolato b57504c
PolicyAncestorStatus: Provisional -> Experimental
guicassolato 787992b
fix: broken link to GEP-1897
guicassolato 35e6bdb
links to known implementations
guicassolato File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Some comments aren't visible on the classic Files Changed page.
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -2,17 +2,17 @@ apiVersion: internal.gateway.networking.k8s.io/v1alpha1 | |||||
| kind: GEPDetails | ||||||
| number: 2648 | ||||||
| name: Direct Policy Attachment | ||||||
| status: Provisional | ||||||
| status: Declined | ||||||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
| # Any authors who contribute to the GEP in any way should be listed here using | ||||||
| # their GitHub handle. | ||||||
| authors: | ||||||
| - youngnick | ||||||
| - robscott | ||||||
| relationships: | ||||||
| extends: | ||||||
| obsoletedBy: | ||||||
| - name: Metaresources and Policy Attachment | ||||||
| number: 713 | ||||||
| description: Split out Direct Policy Attachment into its own GEP | ||||||
| description: Merged back into the original spec for Metaresources and Policy Attachment where it's presented as a well-defined class of metaresource | ||||||
| # references is a list of hyperlinks to relevant external references. | ||||||
| # It's intended to be used for storing GitHub discussions, Google docs, etc. | ||||||
| references: | ||||||
|
|
||||||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
| @@ -1,24 +1,22 @@ | ||||||
| # GEP-2649: Inherited Policy Attachment | ||||||
|
|
||||||
| * Issue: [#2649](https://github.com/kubernetes-sigs/gateway-api/issues/2649) | ||||||
| * Status: Experimental | ||||||
| * Status: Declined | ||||||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
|
|
||||||
| (See [status definitions](../overview.md#gep-states).) | ||||||
|
|
||||||
| ## TLDR | ||||||
|
|
||||||
| !!! warning | ||||||
| This GEP has been merged back into [GEP-713](https://gateway-api.sigs.k8s.io/geps/gep-713/) | ||||||
| and now it's now obsolete. Please refer the original specification of Metaresources | ||||||
| and Policy Attachment for the current state of the pattern. | ||||||
|
|
||||||
| Describe and specify a design pattern for a class of metaresource that can | ||||||
| affect specific settings across a multiple target objects. | ||||||
|
|
||||||
| This is a design for a _pattern_, not an API field or new object. | ||||||
|
|
||||||
| !!! danger | ||||||
| This GEP is in the process of being updated. | ||||||
| Please see the discussion at https://github.com/kubernetes-sigs/gateway-api/discussions/2927 | ||||||
| and expect further changes. | ||||||
| Some options under discussion there may make the distinction between Direct | ||||||
| and Inherited Policies moot, which would require a rework. | ||||||
|
|
||||||
| ## Goals | ||||||
|
|
||||||
| * Specify what common properties all Inherited Policies MUST have | ||||||
|
|
@@ -224,7 +222,7 @@ proposal](https://github.com/kubernetes-sigs/gateway-api/issues/611). | |||||
|
|
||||||
| ### Policy Attachment for Ingress | ||||||
| When talking about Direct Attached Policy attaching to Gateway resources for | ||||||
| ingress use cases (as discussed in GEP-2648), the flow is relatively | ||||||
| ingress use cases (as discussed in GEP-2648), the flow is relatively | ||||||
| straightforward. A policy can reference the resource it wants to apply to, and | ||||||
| only affects that resource. | ||||||
|
|
||||||
|
|
@@ -245,7 +243,7 @@ namespaces. | |||||
|  | ||||||
|
|
||||||
| In this example, the Gateway has a TimeoutPolicy attached, which affects the | ||||||
| HTTPRoute in the App namespace. That HTTPRoute also has the Direct Attached | ||||||
| HTTPRoute in the App namespace. That HTTPRoute also has the Direct Attached | ||||||
| RetryPolicy attached, which affects the HTTPRoute itself, and one of the backends | ||||||
| has a HealthCheckPolicy attached to the Service, which is also a Direct Attached | ||||||
| Policy. | ||||||
|
|
||||||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change | ||||
|---|---|---|---|---|---|---|
|
|
@@ -2,15 +2,15 @@ apiVersion: internal.gateway.networking.k8s.io/v1alpha1 | |||||
| kind: GEPDetails | ||||||
| number: 2649 | ||||||
| name: Inherited Policy Attachment | ||||||
| status: Experimental | ||||||
| status: Declined | ||||||
|
Member
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more.
Suggested change
|
||||||
| authors: | ||||||
| - youngnick | ||||||
| - robscott | ||||||
| relationships: | ||||||
| extends: | ||||||
| obsoletedBy: | ||||||
| - name: Metaresources and Policy Attachment | ||||||
| number: 713 | ||||||
| description: Split out Inherited Policy Attachment | ||||||
| description: Merged back into the original spec for Metaresources and Policy Attachment where it's presented as a well-defined class of metaresource | ||||||
| # references is a list of hyperlinks to relevant external references. | ||||||
| # It's intended to be used for storing GitHub discussions, Google docs, etc. | ||||||
| references: | ||||||
|
|
||||||
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think
Declinedwas suggested before. OK withReplacedinstead, @youngnick?There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I'm fine with
Replacedit conveys the message well enough, and then they can see the warning in thetldrfor more details.There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Replaced is fine.