-
Notifications
You must be signed in to change notification settings - Fork 635
Labels
Description
Why is the ancestor an HTTPRoute? We use Gateways as the ancestor with Envoy due to their much lower cardinality with regard to attachments and the ancestors being length bounded in the API:
ancestors: - ancestorRef: group: gateway.networking.k8s.io kind: HTTPRoute name: example-route-for-headers namespace: test
targetRefalready conveys the same, and it has been established that the policy status is consistent across attached resources due to the resolution happening in the proxy.Policy statuses should be reported per Gateway.
Originally posted by @shashankram in #12694
From Gateway API:
Almost always, in this hierarchy, the Gateway will be the most
// useful object to place Policy status on, so we recommend that implementations
// SHOULD use Gateway as the PolicyAncestorStatus object unless the designers
// have a _very_ good reason otherwise.