AlinsRan opened a new pull request, #996: URL: https://github.com/apache/apisix-helm-chart/pull/996
## Description Releases apisix-ingress-controller 2.2.0, tagged as [2.2.0](https://github.com/apache/apisix-ingress-controller/releases/tag/2.2.0). - `Chart.yaml`: `appVersion` 2.1.0 -> 2.2.0, chart `version` 1.2.2 -> 1.3.0 - `values.yaml` and the generated `README.md`: controller image tag 2.2.0. The ADC sidecar stays at 0.27.1, which is what the release pins. - `crds/`: regenerated with `make helm-build-crds` from the 2.2.0 tag. ## Gateway API 1.6.0 The controller moved to Gateway API 1.6.0 in this release, so the bundled CRDs move with it, from v1.3.0. Two things come along with the standard channel that the v1.3.0 bundle did not carry: - `ListenerSet`, a new CRD. - `safe-upgrades`, a `ValidatingAdmissionPolicy` and its binding. `admissionregistration.k8s.io/v1` is GA from Kubernetes 1.30, and 2.2.0 declares 1.31+ as its supported version, so this is inside the supported range. It does mean a cluster older than 1.30 that could install the previous chart cannot install this one. ## RBAC the release needs and the chart did not grant Comparing the rendered `ClusterRole` against `config/rbac/role.yaml` at the 2.2.0 tag turned up three missing resources, all of which would fail quietly: - `l4routepolicies` and `l4routepolicies/status`, for the `L4RoutePolicy` CRD [#2791](https://github.com/apache/apisix-ingress-controller/pull/2791) adds. The CRD would install and the controller would never reconcile it. - `configmaps`, which downstream mTLS [#2792](https://github.com/apache/apisix-ingress-controller/pull/2792) reads the CA from. `frontendValidation` would fail to resolve its `caCertificateRefs`. After the change the rendered role covers everything the controller declares. The three resources the chart grants beyond it (`tokenreviews`, `subjectaccessreviews`, `endpoints`) are the chart's own metrics authentication and endpoint access, unchanged. ## Verification `helm lint` passes, `helm template` renders `apache/apisix-ingress-controller:2.2.0` and `ghcr.io/api7/adc:0.27.1`, the CRD bundles parse and carry 12 and 10 CustomResourceDefinitions with `gateway.networking.k8s.io/bundle-version: v1.6.0`, and `l4routepolicies` is present in the bundle. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
