Add API gateway conformance tests

[AmaliMatharaarachchi]

Problem

Conformance test setup is failing for apk gateway. If we are adhering to gateway spec, their Conformance test should pass. Currently eventhough we support these CRDs, they are not supporting some gateway spec scenarios listed in https://gateway-api.sigs.k8s.io/guides/simple-gateway/.

Solution

Support gateway conformance

Affected Component

Adapter

Version

No response

Implementation

• [x] support gateway class test cases
• [x] support gateway test cases
• [x] Add status, condition support
• [x] Add gateway address support
• [x] Add dynamically deploying and deleting gateway for gateway CRs
• [x] Add reference grant
• [x] support httproute (without API CR)
• [ ] support httproute test cases

Related Issues

No response

Suggested Labels

No response

[AmaliMatharaarachchi]

Progress update: since gateways will be managed by the adapter, adapter needs to know the deployment namespaces. Therefore configurations needs to be added to setup them. Working on this.

[AmaliMatharaarachchi]

Progress update: new configs should be added in adapter and helm levels to support gateway volumes, env support. working on this.

[AmaliMatharaarachchi]

Above are done. Now there is a issue with not envoyproxy xds being updated. I'm checking this now.

Edited: This is fixed now. https://github.com/wso2/apk/pull/2414

[AmaliMatharaarachchi]

Working on enabling ext_authz filter engagement for apis.

subtasks:

• [x] Enable ext_authz for all httproute calls
• [ ] Make them 200, not engaging any filters
• [ ] Enable them only if an api is attached to the route.

Update: Handed over to Tharsanan as this conflicts with his work

[AmaliMatharaarachchi]

Update: Working on supporting httproute tests.

• [x] HTTPExactPathMatching
• [x] HTTPRouteDisallowedKind
• [x] HTTPRouteCrossNamespace
• [x] HTTPRouteBackendProtocolH2C
• [x] HTTPRouteHeaderMatching
• [ ] HTTPRouteHostnameIntersection
• [x] HTTPRouteInvalidNonExistentBackendRef
• [ ] HTTPRouteInvalidBackendRefUnknownKind

[AmaliMatharaarachchi]

Issue : Currently operator created gateway deployments dont get deleted when helm uninstalled.

• [ ] Therefore, checking on deleting them automatically when helm uninstall is called

update: we can use "helm.sh/hook": pre-delete job to execute the manual deletion. TODO: template it in apk helm

[AmaliMatharaarachchi]

Currently working on these tasks

• [x] Templating feature flag to enable new controller model only when it s enabled
• [x] Support Backend CRD in new controller

[AmaliMatharaarachchi]

Update: started working on

• [x] Exposing ports in gateway instances
• [x] establish xds connection from adapter to enforcer
• [x] Add context extentions to envoy route configs
• [x] Remove duplicate ext_authz filter creation
• [x] map invocation request to api configs
• [x] enabling enforcer filters

[AmaliMatharaarachchi]

Update:

• [ ] Encountering no healthy upstream error - due to issue in envoy cluster configs

[AmaliMatharaarachchi]

Started working on following

• [ ] merge the code to main branch
• [x] fix unit test failures in feature branch