deploy gateway

cluster/platform/gateway/referencegrant.yaml

@@ -0,0 +1,23 @@
+# ------------------------------------------------------------------------------
+# ReferenceGrant — allow HTTPRoutes from any namespace to attach to the Gateway
+#
+# Required by Gateway API spec when parentRef crosses namespace boundaries.
+# Without this, HTTPRoutes in app namespaces (monitoring, gitea, etc.) cannot
+# attach to the Gateway in the gateway namespace.
+#
+# Note: omitting `namespace` in the `from` stanza means all namespaces are
+# permitted. Add explicit namespace entries to restrict if needed later.
+# ------------------------------------------------------------------------------
+apiVersion: gateway.networking.k8s.io/v1beta1
+kind: ReferenceGrant
+metadata:
+  name: allow-httproutes
+  namespace: gateway
+spec:
+  from:
+    - group: gateway.networking.k8s.io
+      kind: HTTPRoute
+  to:
+    - group: gateway.networking.k8s.io
+      kind: Gateway
+      name: fastpass-gateway