…969)

…detected (#974)

* fix(kong): add RBAC rules for listing namespaces when gateway API is detected

* kong: add watch permissions to ClusterRole

---------

Co-authored-by: Grzegorz Burzyński <[email protected]>

Add envFrom and ingressController.envFrom values. These populate the
standard container envFrom field, which contains a list of ConfigMap or
Secret refs. Keys and values from the referenced resources are set as
environment variables in the containers.

* feat(listens) support multiple addresses and IPv6

Configure default IPv6 listens for Kong listeners by default. The
controller defaults are unchanged as the controller settings do not
support multiple listen addresses.

Replace the hidden .address service setting with a new hidden .addresses
setting. The new setting is a list whereas the old setting was a single
string.

Honor address overrides for the admin listen. It previously forced you
to the default 0.0.0.0 address or 127.0.0.1 when disabled.

* chore(*) release kong 2.34.0

Bumps [golang.stackrox.io/kube-linter](https://github.com/stackrox/kube-linter) from 0.6.5 to 0.6.6.
- [Release notes](https://github.com/stackrox/kube-linter/releases)
- [Changelog](https://github.com/stackrox/kube-linter/blob/main/RELEASE.md)
- [Commits](stackrox/kube-linter@v0.6.5...v0.6.6)

---
updated-dependencies:
- dependency-name: golang.stackrox.io/kube-linter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: Patryk Małek <[email protected]>

Bumps [golang.stackrox.io/kube-linter](https://github.com/stackrox/kube-linter) from 0.6.6 to 0.6.7.
- [Release notes](https://github.com/stackrox/kube-linter/releases)
- [Changelog](https://github.com/stackrox/kube-linter/blob/main/RELEASE.md)
- [Commits](stackrox/kube-linter@v0.6.6...v0.6.7)

---
updated-dependencies:
- dependency-name: golang.stackrox.io/kube-linter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

…olang.stackrox.io/kube-linter-0.6.7

chore(deps): bump golang.stackrox.io/kube-linter from 0.6.6 to 0.6.7 in /third_party

Do not set KONG_PLUGINS if no plugins are configured.

Release 2.35.1.

Co-authored-by: Patryk Małek <[email protected]>

* Update default timeouts for .github/workflows/release-push.yaml [skip ci]

* Apply suggestions from code review

---------

Co-authored-by: Travis Raines <[email protected]>

* Update default timeouts for .github/workflows/release-pr.yaml [skip ci]

* Apply suggestions from code review

---------

Co-authored-by: Travis Raines <[email protected]>

…1008)

After #989 both containers in the deployment were
using a named port `status` which was defined to be scraped in the ServiceMonitor
which resulted in scraping both containers which was not desired.

Co-authored-by: Grzegorz Burzyński <[email protected]>
Co-authored-by: Travis Raines <[email protected]>

* Update default timeouts for .github/workflows/master-mirrors-main.yaml [skip ci]

* Update .github/workflows/master-mirrors-main.yaml

---------

Co-authored-by: Travis Raines <[email protected]>

Allow setting `SVC.tls.appProtocol` and `SVC.http.appProtocol` to set Kuberntes Services
HTTP and TLS ports' `appProtocols` to custom values.

Co-authored-by: Grzegorz Burzyński <[email protected]>

Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@v4.0.0...v4.1.0)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Add a base chart for the Kong Gateway Operator.
---------

Signed-off-by: Jintao Zhang <[email protected]>
Co-authored-by: Travis Raines <[email protected]>

* feat: Add conditions to automate the installation for CRDs.

Signed-off-by: Jintao Zhang <[email protected]>
Co-authored-by: Tao Yi <[email protected]>

* feat(kgo): Allow users to modify startup parameters.

Signed-off-by: Jintao Zhang <[email protected]>

* feat(kgo): allow users to provide env vars

Signed-off-by: Jintao Zhang <[email protected]>

* Apply suggestions from code review

Co-authored-by: Patryk Małek <[email protected]>

* rename featureFlags to controllers

Signed-off-by: Jintao Zhang <[email protected]>

* kgo: update version so that it has --enable-controller-aigateway flag

---------

Signed-off-by: Jintao Zhang <[email protected]>
Co-authored-by: Patryk Małek <[email protected]>

Signed-off-by: Jintao Zhang <[email protected]>

Signed-off-by: Jintao Zhang <[email protected]>

…in /third_party (#1017)

* chore(deps): bump golang.stackrox.io/kube-linter in /third_party

Bumps [golang.stackrox.io/kube-linter](https://github.com/stackrox/kube-linter) from 0.6.7 to 0.6.8.
- [Release notes](https://github.com/stackrox/kube-linter/releases)
- [Changelog](https://github.com/stackrox/kube-linter/blob/main/.goreleaser.yaml)
- [Commits](stackrox/kube-linter@v0.6.7...v0.6.8)

---
updated-dependencies:
- dependency-name: golang.stackrox.io/kube-linter
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* chore: regenerate

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Patryk Małek <[email protected]>

…e resources (#1040)

…#1042)

Replace the default placeholder value for
enterprise.rbac.session_conf_secret with an empty string.

Disable configuring a session conf envvar if session_conf_secret is not
set.

Kong 3.6 does not require this setting in some configurations.
Previously, the chart effectively required it.

Signed-off-by: Mithun Kumar <[email protected]>

Bumps [azure/setup-helm](https://github.com/azure/setup-helm) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@v4.1.0...v4.2.0)

---
updated-dependencies:
- dependency-name: azure/setup-helm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Co-authored-by: Grzegorz Burzyński <[email protected]>

* feat(kong): add rbac policy rules for customentities

* chore: update golden tests

* chore: do not release 2.39.0 just yet

* chore(crds) update CRDs to KIC 3.2

* chore(kong) release 2.39.1

* tests: speed up tests and do not send anonymous reports

* chore: fix golden tests

* chore: fix duplicated env

* chore: revert changing readines probe http path

* chore: fix ci values.yamls

Close several ifs that were broken after merge in admission webhook
template.

These are now separate ServiceAccounts.

This should have been merged the other way.