Closed
Description
As a user of NKG
I want to allow my Gateway object to reference secrets in another namespace via a ReferenceGrant
So that I do not have to duplicate secrets and maintain them in multiple places.
Acceptance
- When a secret is referenced in a Gateway Listener that does not have a corresponding ReferenceGrant, the status of that Listener is set to ResolvedRefs/False/RefNotPermitted
- When a valid ReferenceGrant is created or updated within a namespace that the NKG control plane watches, the Gateway specified is able to reference secrets in other namespaces NKG is present.
- No secrets in other namespaces can be referenced by any Gateway that does not have a corresponding ReferenceGrant.
- No information is ever exposed about resources in another namespace that do not have a valid ReferenceGrant.
- Update the documentation
- Update the compatibility doc
- Add an example for how to reference a secret from another namespace in your Gateway config.