fix(wik-webservice): add opt-in option webservice.httproute.addGatewayParentRef

Author: Tronix117

charts/wik-webservice/README.md.gotmpl

@@ -87,15 +87,16 @@ The chart supports [Gateway API](https://gateway-api.sigs.k8s.io/) HTTPRoute as
 | `webservice.httpRoute.enabled` | Create an HTTPRoute | `false` |
 | `webservice.httpRoute.gatewayRef` | Gateway reference (`name`, `namespace`). Omitted if empty | `{}` |
 | `webservice.httpRoute.tls` | Auto-create a ListenerSet for TLS (like `ingress.tlsAcme`). Skipped if CRDs absent | `true` |
+| `webservice.httpRoute.addGatewayParentRef` | When `tls: true`, also add the Gateway as a parentRef (in addition to the ListenerSet) | `false` |
 | `webservice.httpRoute.annotations` | HTTPRoute annotations | `{}` |
 | `webservice.httpRoute.labels` | HTTPRoute labels | `{}` |
 | `webservice.httpRoute.filters` | Filters for the default rule | `[]` |
 | `webservice.httpRoute.additionalRules` | Extra routing rules | `[]` |
 | `webservice.additionalHttpRoutes` | Additional HTTPRoute resources with custom hosts | `[]` |
 
 ```yaml
-# Simple HTTPRoute (uses webservice.hosts)
-# TLS is enabled by default and auto-creates a ListenerSet
+# Simple HTTPRoute with TLS (default)
+# The ListenerSet is the only parentRef, Gateway is referenced via the ListenerSet
 webservice:
   image: myapp:latest
   hosts:
@@ -106,6 +107,22 @@ webservice:
       name: main-gateway
       namespace: gateway
 
+# Also add the Gateway as a parentRef (if needed by your implementation)
+webservice:
+  httpRoute:
+    enabled: true
+    gatewayRef:
+      name: main-gateway
+    addGatewayParentRef: true
+
+# Without TLS — Gateway is the only parentRef
+webservice:
+  httpRoute:
+    enabled: true
+    tls: false
+    gatewayRef:
+      name: main-gateway
+
 # Additional HTTPRoutes with custom hosts
 webservice:
   httpRoute:

charts/wik-webservice/templates/httproute.yaml

@@ -30,11 +30,18 @@ spec:
       kind: XListenerSet
       name: {{ template "fullname" $root }}
   {{- end }}
+  {{- if $root.Values.webservice.httpRoute.addGatewayParentRef }}
+    - name: {{ .name }}
+      {{- with .namespace }}
+      namespace: {{ . }}
+      {{- end }}
   {{- end }}
+  {{- else }}
     - name: {{ .name }}
       {{- with .namespace }}
       namespace: {{ . }}
       {{- end }}
+  {{- end }}
 {{- end }}
 {{- end }}
 {{- if .Values.webservice.hosts }}

charts/wik-webservice/tests/httproute_test.yaml

@@ -62,7 +62,7 @@ tests:
       - isNull:
           path: spec.parentRefs
 
-  - it: should add Listener parentRef when tls is true
+  - it: should only have ListenerSet parentRef when tls is true
     set:
       webservice:
         image: nginx:latest
@@ -72,6 +72,25 @@ tests:
           enabled: true
           gatewayRef:
             name: my-gateway
+    asserts:
+      - equal:
+          path: spec.parentRefs[0].kind
+          value: XListenerSet
+      - lengthEqual:
+          path: spec.parentRefs
+          count: 1
+
+  - it: should add gateway parentRef when addGatewayParentRef is true
+    set:
+      webservice:
+        image: nginx:latest
+        hosts:
+          - test.example.com
+        httpRoute:
+          enabled: true
+          gatewayRef:
+            name: my-gateway
+          addGatewayParentRef: true
     asserts:
       - equal:
           path: spec.parentRefs[0].kind

charts/wik-webservice/values.schema.json

@@ -134,6 +134,10 @@
               "type": "boolean",
               "default": true
             },
+            "addGatewayParentRef": {
+              "type": "boolean",
+              "default": false
+            },
             "annotations": {
               "type": "object",
               "default": {}

charts/wik-webservice/values.yaml

@@ -176,6 +176,8 @@ webservice:
     # Creates HTTPS listeners on the gateway for each host in webservice.hosts
     # Silently skipped if ListenerSet/XListenerSet CRDs are not available on the cluster
     tls: true
+    # When tls is true, also add the Gateway itself as a parentRef (in addition to the ListenerSet)
+    addGatewayParentRef: false
     annotations: {}
     labels: {}
     # Filters applied to the default rule (e.g. RequestHeaderModifier, RequestRedirect)