Skip to content

Update Gateway CRDs to v1.5.0#411

Merged
k8s-ci-robot merged 1 commit into
kubernetes-sigs:mainfrom
lelandbatey:bump-gateway-crds-to-1.5.0
May 13, 2026
Merged

Update Gateway CRDs to v1.5.0#411
k8s-ci-robot merged 1 commit into
kubernetes-sigs:mainfrom
lelandbatey:bump-gateway-crds-to-1.5.0

Conversation

@lelandbatey
Copy link
Copy Markdown
Contributor

Updates the Gateway API CRDs from version v1.4.1 to v1.5.0 using:

GIT_VERSION=v1.5.0 ./hack/download-gateway-crds.sh

Notes for reviewers

It's unclear what the policy is around when cloud-provider-kind upgrades its Gateway CRDs as new versions of Kubernetes Gateway API come out. The only info I found on why past upgrades of these CRDs have happened seems to be in the prior PR #372 which seems to have been motivated by "unit tests fail [due to an upstream change] if you do not update the generated code to the latest".

This PR is not motivated by broken tests, it's motivated by a desire for cloud-provider-kind (hereafter "CPK") to not fail when attempting to use a more recent version of the Gateway CRDs in Kind. If you spin up a fresh kind cluster today, then apply the v1.5.0 CRDs to that cluster, then attempt to run cloud-provider-kind, then CPK will fail due to a version mismatch. The only fix is to locally build a version of CPK which includes version 1.5.0 of the Gateway CRDs. Steps to reproduce using commit 3392ee06aac6fcac4817f92a1aafcdb9787a51f6 of CPK:

./kind create cluster
kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml
cloud-provider-kind

Fails with:

E0512 15:54:03.456491 1063399 controller.go:294] "Failed to install Gateway API CRDs" err="error processing embedded CRDs from crds/standard: failed to create CRD \"backendtlspolicies.gateway.networking.k8s.io\" from file \"crds/standard/gateway.networking.k8s.io_backendtlspolicies.yaml\": customresourcedefinitions.apiextensions.k8s.io \"backendtlspolicies.gateway.networking.k8s.io\" is forbidden: ValidatingAdmissionPolicy 'safe-upgrades.gateway.networking.k8s.io' with binding 'safe-upgrades.gateway.networking.k8s.io' denied request: In>

Additionally, a prior change has already upgraded the Go dependency for gateway-api to v1.5.1, implying that this upgrade should have already happened but may have been overlooked. Change was in #386


If this is not the right time to do this upgrade, or if this change is not in line with the contributing guidelines, then please close this PR. I'm just trying to be proactive about the version upgrades.

Updates the Gateway API CRDs from version v1.4.1 to v1.5.0 using:

```
GIT_VERSION=v1.5.0 ./hack/download-gateway-crds.sh
```

Notes for reviewers
-------------------

It's unclear what the policy is around when cloud-provider-kind upgrades
its Gateway CRDs as new versions of Kubernetes Gateway API come out. The
only info I found on why past upgrades of these CRDs have happened seems
to be in the prior PR kubernetes-sigs#372 which seems to have been motivated by "unit
tests fail [due to an upstream change] if you do not update the
generated code to the latest".

This PR is not motivated by broken tests, it's motivated by a desire for
`cloud-provider-kind` to not fail when attempting to use a more recent
version of the Gateway CRDs in Kind. If you spin up a fresh kind cluster
today, then apply the v1.5.0 CRDs to that cluster, then attempt to run
`cloud-provider-kind` (hereafter "CPK"), then CPK will fail due to a
version mismatch. The only fix is to locally build a version of CPK
which includes version 1.5.0 of the Gateway CRDs. Steps to reproduce
using commit `3392ee06aac6fcac4817f92a1aafcdb9787a51f6` of CPK:

```
./kind create cluster
kubectl apply -f https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.5.0/standard-install.yaml
cloud-provider-kind
```

Fails with:

```
E0512 15:54:03.456491 1063399 controller.go:294] "Failed to install Gateway API CRDs" err="error processing embedded CRDs from crds/standard: failed to create CRD \"backendtlspolicies.gateway.networking.k8s.io\" from file \"crds/standard/gateway.networking.k8s.io_backendtlspolicies.yaml\": customresourcedefinitions.apiextensions.k8s.io \"backendtlspolicies.gateway.networking.k8s.io\" is forbidden: ValidatingAdmissionPolicy 'safe-upgrades.gateway.networking.k8s.io' with binding 'safe-upgrades.gateway.networking.k8s.io' denied request: Installing CRDs with version before v1.5.0 is prohibited by default. Uninstall ValidatingAdmissionPolicy safe-upgrades.gateway.networking.k8s.io to install older versions."
```

Additionally, a prior change has already upgraded the Go dependency for
gateway-api to v1.5.1, implying that this upgrade should have already
happened but may have been overlooked. Change was in kubernetes-sigs#386

--------------

If this is not the right time to do this upgrade, or if this change is
not in line with the contributing guidelines, then please close this PR.
I'm just trying to be proactive about the version upgrades.
@linux-foundation-easycla
Copy link
Copy Markdown

linux-foundation-easycla Bot commented May 12, 2026

CLA Signed
The committers listed above are authorized under a signed CLA.

  • ✅ login: lelandbatey / name: Leland Batey (fc9d58d)

@k8s-ci-robot k8s-ci-robot requested review from aojea and stmcginnis May 12, 2026 23:53
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Welcome @lelandbatey!

It looks like this is your first PR to kubernetes-sigs/cloud-provider-kind 🎉. Please refer to our pull request process documentation to help your PR have a smooth ride to approval.

You will be prompted by a bot to use commands during the review process. Do not be afraid to follow the prompts! It is okay to experiment. Here is the bot commands documentation.

You can also check if kubernetes-sigs/cloud-provider-kind has its own contribution guidelines.

You may want to refer to our testing guide if you run into trouble with your tests not passing.

If you are having difficulty getting your pull request seen, please follow the recommended escalation practices. Also, for tips and tricks in the contribution process you may want to read the Kubernetes contributor cheat sheet. We want to make sure your contribution gets all the attention it needs!

Thank you, and welcome to Kubernetes. 😃

@k8s-ci-robot k8s-ci-robot added cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels May 12, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

Hi @lelandbatey. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. and removed cncf-cla: no Indicates the PR's author has not signed the CNCF CLA. labels May 12, 2026
@aojea
Copy link
Copy Markdown
Contributor

aojea commented May 13, 2026

awesome

/ok-to-test
/lgtm
/approve

@k8s-ci-robot k8s-ci-robot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels May 13, 2026
@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label May 13, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: aojea, lelandbatey

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label May 13, 2026
@k8s-ci-robot k8s-ci-robot merged commit a374fcf into kubernetes-sigs:main May 13, 2026
9 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants