Document cli args and Gateway API compatibility

cmd/gateway/main.go

@@ -12,7 +12,8 @@ import (
 )
 
 const (
-	domain string = "k8s-gateway.nginx.org"
+	domain    string = "k8s-gateway.nginx.org"
+	namespace string = "nginx-gateway"
 )
 
 var (
@@ -25,7 +26,7 @@ var (
 	gatewayCtlrName = flag.String(
 		"gateway-ctlr-name",
 		"",
-		fmt.Sprintf("The name of the Gateway controller. The controller name must be of the form: DOMAIN/NAMESPACE/NAME. The controller's domain is '%s'.", domain),
+		fmt.Sprintf("The name of the Gateway controller. The controller name must be of the form: DOMAIN/NAMESPACE/NAME. The controller's domain is '%s'; the namespace is '%s'", domain, namespace),
 	)
 
 	gatewayClassName = flag.String(
@@ -46,7 +47,7 @@ func main() {
 
 	MustValidateArguments(
 		flag.CommandLine,
-		GatewayControllerParam(domain, "nginx-gateway" /* FIXME(f5yacobucci) dynamically set */),
+		GatewayControllerParam(domain, namespace /* FIXME(f5yacobucci) dynamically set */),
 		GatewayClassParam(),
 	)
 

docs/cli-args.md

@@ -0,0 +1,8 @@
+# Command-line Arguments
+
+The table below describes the command-line arguments of the `gateway` binary from the `nginx-kubernetes-gateway` container.
+
+| Name | Type | Description |
+|-|-|-|
+|`gateway-ctlr-name` | `string` |  The name of the Gateway controller. The controller name must be of the form: `DOMAIN/NAMESPACE/NAME`. The controller's domain is `k8s-gateway.nginx.org`; the namespace is `nginx-ingress`. |
+|`gatewayclass`| `string` | The name of the GatewayClass resource. Every NGINX Gateway must have a unique corresponding GatewayClass resource. |

docs/gateway-api-compatibility.md.md

@@ -0,0 +1,120 @@
+# Gateway API Compatibility
+
+This document describes which Gateway API resources NGINX Kubernetes Gateway supports and the extent of that support.
+
+## Summary
+
+| Resource | Support Status |
+|-|-|
+| [GatewayClass](#gatewayclass) | Partially supported |
+| [Gateway](#gateway) | Partially supported |
+| [HTTPRoute](#httproute) | Partially supported |
+| [TLSRoute](#tlsroute) | Not supported |
+| [TCPRoute](#tcproute) | Not supported |
+| [UDPRoute](#udproute) | Not supported |
+| [ReferenceGrant](#referencegrant) |  Not supported |
+| [Custom policies](#custom-policies) | Not supported |
+
+## Terminology
+
+We use the following words to describe support status:
+- *Supported*. The resource or field is fully supported and conformant to the Gateway API specification.
+- *Partially supported*. The resource or field is supported partially or with limitations. It will become fully supported in future releases.
+- *Not supported*. The resource or field is not yet supported. It will become partially or fully supported in future releases.
+
+Note: it might be possible that NGINX Kubernetes Gateway will never support some resources and/or fields of the Gateway API. We will document these decisions on a case by case basis.
+
+## Resources
+
+Below we list the resources and the support status of their corresponding fields. 
+
+For a description of each field, visit the [Gateway API documentation](https://gateway-api.sigs.k8s.io/references/spec/). 
+
+### GatewayClass 
+
+> Status: Partially supported. 
+
+NGINX Kubernetes Gateway supports only a single GatewayClass resource configured via `--gatewayclass` [cli argument](./cli-args.md).
+
+Fields:
+* `spec`
+	* `controllerName` - supported.
+	* `parametersRef` - not supported.
+	* `description` - supported.
+* `status`
+	* `conditions` - partially supported.
+
+### Gateway
+
+> Status: Partially supported.
+
+NGINX Kubernetes Gateway supports only a single Gateway resource. The Gateway resource must reference NGINX Kubernetes Gateway's corresponding GatewayClass. In case of multiple Gateway resources created in the cluster, NGINX Kubernetes Gateway will use a deterministic conflict resolution strategy: it will choose the oldest resource by creation timestamp. If the timestamps are equal, NGINX Kubernetes Gateway will choose the resource that appears first in alphabetical order by “{namespace}/{name}”. We might support multiple Gateway resources. Please share your use case with us if you're interested in that support.
+
+Fields:
+* `spec`
+	* `gatewayClassName` - supported.
+	* `listeners`
+		* `name` - supported.
+		* `hostname` - partially supported. Wildcard hostnames like `*.example.com` are not yet supported.
+		* `port` - partially supported. Allowed values: `80` for HTTP listeners and `443` for HTTPS listeners.
+		* `protocol` - partially supported. Allowed values: `HTTP`, `HTTPS`.
+		* `tls`
+		  * `mode` - partially supported. Allowed value: `Terminate`.
+		  * `certificateRefs` - partially supported. The TLS certificate and key must be stored in a Secret resource of type `kubernetes.io/tls` in the same namespace as the Gateway resource. Only a single reference is supported. You must deploy the Secret before the Gateway resource. Secret rotation (watching for updates) is not supported.
+		  * `options` - not supported.
+		* `allowedRoutes` - not supported. 
+	* `addresses` - not supported.
+* `status`
+  * `addresses` - not supported.
+  * `conditions` - not supported.
+  * `listeners`
+	* `name` - supported.
+	* `supportedKinds` - not supported.
+	* `attachedRoutes` - supported.
+	* `conditions` - partially supported.
+
+### HTTPRoute
+
+> Status: Partially supported.
+
+Fields:
+* `spec`
+  * `parentRefs` - partially supported. `sectionName` must always be set. 
+  * `hostnames` - partially supported. Wildcard binding is not supported: a hostname like `example.com` will not bind to a listener with the hostname `*.example.com`. However, `example.com` will bind to a listener with the empty hostname.
+  * `rules`
+	* `matches`
+	  * `path` - partially supported. Only `PathPrefix` type.
+	  * `headers` - partially supported. Only `Exact` type.
+	  * `queryParams` - partially supported. Only `Exact` type. 
+	  * `method` -  supported.
+	* `filters` - not supported.
+	* `backendRefs` - partially supported. Only a single backend ref without support for `weight`. Backend ref `filters` are not supported. NGINX Kubernetes Gateway will use the IP of the Service as a backend, not the IPs of the corresponding Pods. Watching for Service updates is not supported.
+* `status`
+  * `parents`
+	* `parentRef` - supported.
+	* `controllerName` - supported.
+	* `conditions` - partially supported.
+
+### TLSRoute
+
+> Status: Not supported.
+
+### TCPRoute
+
+> Status: Not supported.
+
+### UDPRoute
+
+> Status: Not supported.
+
+### ReferenceGrant
+
+> Status: Not supported.
+
+### Custom Policies
+
+> Status: Not supported.
+
+Custom policies will be NGINX Kubernetes Gateway-specific CRDs that will allow supporting features like timeouts, load-balancing methods, authentication, etc. - important data-plane features that are not part of the Gateway API spec.
+
+While those CRDs are not part of the Gateway API, the mechanism of attaching them to Gateway API resources is part of the Gateway API. See the [Policy Attachment doc](https://gateway-api.sigs.k8s.io/references/policy-attachment/).