Travis Raines

The parser service builder may need to log or return errors relevant to a single service only, e.g. if [that service is comprised of multiple incompatible Kubernetes Services](https://github.com/Kong/kubernetes-ingress-controller/blob/52c0e00d04610d9c7b64a233a4e615ca80b52c01/internal/dataplane/parser/ingressrules.go#L57-L62). For users...

Gateway Routes with conflicting Services in their backend should not break config build

1

If service population [fails due to a single Gateway Route using multiple Services whose annotation sets differ](https://github.com/Kong/kubernetes-ingress-controller/blob/52c0e00d04610d9c7b64a233a4e615ca80b52c01/internal/dataplane/parser/ingressrules.go#L58-L61), that failure [bubbles up to the parser build and indicates that it failed...

Address de facto shared ports for Kong handling of Gateway Listeners

1

## Problem Statement This is one possible way to lift the "one KIC one `Gateway`" constraint. https://github.com/Kong/kubernetes-ingress-controller/pull/2555 implements the Gateway spec as written: Gateway Listener hostname compatibility is only checked...

We did not include OSS images in the additional addition of nightly tests because the nightly `latest` tag isn't actually the latest master commit image, and there is no alternative...

https://github.com/Kong/kubernetes-ingress-controller/pull/2626 uses a deprecated annotation for no-controller Deployment compatibility. https://github.com/kumahq/kuma/issues/4525 is now fixed, and we can migrate to the patch approach once it is released. IMO we should still push...

Kubernetes does not have GA mixed protocol LoadBalancers. As of 1.24, this is available as a gated beta. We support resources that use TCP or UDP at L4. In the...

Handle auth proxy resources in 2.x generated manifests

2

### Is there an existing issue for this? - [X] I have searched the existing issues ### Problem Statement The manifests added in #1563 do not include [metrics auth proxy...

Include parent information with SNI->Secret maps

1

Resources we ingest can attempt to assign the same SNI (hostname) to multiple certificates, but the gateway can only serve a single certificate for a given hostname. When we encounter...

Gateway reconciles update Listener statuses with the current time. Listener Conditions (Ready, Conflicted) etc. are generated from scratch based on the current Listeners, setting the observed generation to the current...

Add route not allowed status for GWAPI routes

3

When a GWAPI Route controller cannot ingest a Route because it does not match any of the listeners' AllowedRoutes criteria, we should set a status indicating this. This status does...