Skip to content

feat(ske): replace DNS bridge with native gateway_api provider support - #62

Open
lweberru with Copilot wants to merge 6 commits into
mainfrom
copilot/remove-ske-dns-gateway-api-workaround
Open

lweberru with Copilot wants to merge 6 commits into
mainfrom
copilot/remove-ske-dns-gateway-api-workaround

Conversation

Copilot AI commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Add native extensions.dns.gateway_api support to the platform Kubernetes module; it defaults to true.
  • Propagate gateway_api from the root configuration to stackit_ske_cluster.
  • Keep Envoy Gateway, GatewayClass, Gateway, and HTTPRoute as the sample routing path observed by ExternalDNS.
  • Remove only the temporary DNS bridge: the Envoy LoadBalancer endpoint lookup, derived endpoint local, and stackit_dns_record_set.
  • Update the Gateway API DNS documentation to describe the native path.

The required STACKIT provider version 0.114.0 is already provided by main.

Validation

  • tofu fmt -check -diff -recursive
  • tofu validate in every Terraform directory
  • tofu test without STACKIT credentials: 6 passed, 0 failed
  • TFLint v0.60.0 using the blocking CI invocation

Fixes #41

- Bump stackit provider from 0.106.0 to 0.113.0 in all terraform.tf files
- Add gateway_api = true to extensions.dns in platform-kubernetes cluster
- Add gateway_api field to dns variable type in platform-kubernetes and root modules
- Wire gateway_api through main.tf dns block
- Remove temporary DNS bridge: helm_release.demo_envoy_gateway,
  kubernetes_manifest.landing_zone_gateway_class,
  kubernetes_manifest.landing_zone_sample_gateway,
  kubernetes_manifest.landing_zone_sample_http_route,
  data.kubernetes_resources.landing_zone_sample_gateway_service,
  stackit_dns_record_set.landing_zone_sample_gateway,
  local.sample_gateway_lb_endpoint_by_key
- Update docs/getting-started.md to document native gateway_api path

Closes #41

Co-authored-by: lweberru <20902204+lweberru@users.noreply.github.com>
Copilot AI changed the title [WIP] Remove SKE DNS gatewayApi API workaround after provider support feat(ske): replace DNS bridge with native gateway_api provider support Aug 31, 2026
Copilot AI requested a review from lweberru August 31, 2026 11:12

@lweberru lweberru left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

merge ok, but we need to test it.

@lweberru
lweberru marked this pull request as ready for review August 31, 2026 11:29
@lweberru
lweberru enabled auto-merge September 21, 2026 07:45
@lweberru
lweberru requested a review from dweezl as a code owner September 21, 2026 07:52
@lweberru

Copy link
Copy Markdown
Collaborator

Updated with main in 0ab376d and resolved the conflicts. The implementation now preserves Envoy Gateway plus the sample Gateway/HTTPRoute; only the temporary endpoint-discovery and Terraform DNS-record bridge is removed. Local validation passed: format, TFLint v0.60.0, all Terraform directories, and credential-free tests (6 passed, 0 failed).

Comment thread src/modules/platform-kubernetes/3-cluster.tf Outdated
Comment thread docs/getting-started.md Outdated
Comment thread src/modules/platform-kubernetes/variables.tf
Comment thread src/_landing-zone-kubernetes.tf
@lweberru
lweberru requested review from LembDo and removed request for mahauber and simpe00 September 22, 2026 10:01

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove SKE DNS gatewayApi API workaround after provider support

3 participants