Skip to content

fix(ngf): HTTP-01/ListenerSet cert flow, wildcard TLS, CP bumps + Gateway API v1.5.1#358

Open
sanmesh-kakade wants to merge 1 commit into
mainfrom
fix/ngf-cp-resources-gw-api-v1.5.1
Open

fix(ngf): HTTP-01/ListenerSet cert flow, wildcard TLS, CP bumps + Gateway API v1.5.1#358
sanmesh-kakade wants to merge 1 commit into
mainfrom
fix/ngf-cp-resources-gw-api-v1.5.1

Conversation

@sanmesh-kakade

@sanmesh-kakade sanmesh-kakade commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

What

NGF ingress flavors + cert_manager/gateway_api_crd: HTTP-01 + ListenerSet cert flow, wildcard TLS for private LBs, control-plane bumps, and Gateway API v1.5.1 (mirrors #554).

Changes

  • Control plane — resource bumps + Gateway API CRDs v1.5.1.
  • Cert flow — HTTP-01 + ListenerSet; removed the ACK ACM controller + DNS-01 path (dropped the ack_acm_controller output).
  • cert_manager--enable-gateway-api-listenerset, enableCertificateOwnerRef; bundled cert-manager v1.20.3.
  • gateway_api_crd — installer RBAC for ValidatingAdmissionPolicy.
  • aws/azure/gcp/ovh flavors — private/internal LB support + DNS-01 (gts-production) cert issuance + wildcard TLS; dns01_cluster_issuer/cluster_issuer_override in the instance spec type; track the base module default branch.

@sanmesh-kakade
sanmesh-kakade force-pushed the fix/ngf-cp-resources-gw-api-v1.5.1 branch from fa29d68 to 29982ac Compare July 2, 2026 07:45
@sanmesh-kakade sanmesh-kakade changed the title fix(ngf): control-plane resource bumps + Gateway API v1.5.1 (mirror #554) fix(ngf): HTTP-01/ListenerSet cert flow, wildcard TLS, CP bumps + Gateway API v1.5.1 Jul 2, 2026
@sanmesh-kakade
sanmesh-kakade force-pushed the fix/ngf-cp-resources-gw-api-v1.5.1 branch from 29982ac to ea4d112 Compare July 2, 2026 09:52
…eway API v1.5.1

- Mirror #554: control-plane resource bumps + Gateway API CRDs v1.5.1.
- HTTP-01 + ListenerSet cert issuance; remove the ACK ACM controller + DNS-01 path
  (drop the ack_acm_controller output).
- cert_manager: enable --enable-gateway-api-listenerset, enableCertificateOwnerRef;
  bundle cert-manager v1.20.3.
- gateway_api_crd: grant installer RBAC for ValidatingAdmissionPolicy.
- aws/azure/gcp/ovh flavors: private/internal LB support + DNS-01 (gts-production) cert
  issuance + wildcard TLS; declare dns01_cluster_issuer/cluster_issuer_override in the
  instance spec type; track the base module default branch.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@sanmesh-kakade
sanmesh-kakade force-pushed the fix/ngf-cp-resources-gw-api-v1.5.1 branch from ea4d112 to df1a067 Compare July 2, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants