# ------------------------------------------------------------------------------
# ReferenceGrant — allow HTTPRoutes from any namespace to attach to the Gateway
#
# Required by Gateway API spec when parentRef crosses namespace boundaries.
# Without this, HTTPRoutes in app namespaces (monitoring, gitea, etc.) cannot
# attach to the Gateway in the gateway namespace.
#
# Note: omitting `namespace` in the `from` stanza means all namespaces are
# permitted. Add explicit namespace entries to restrict if needed later.
# ------------------------------------------------------------------------------
apiVersion: gateway.networking.k8s.io/v1beta1
kind: ReferenceGrant
metadata:
  name: allow-httproutes
  namespace: gateway
spec:
  from:
    - group: gateway.networking.k8s.io
      kind: HTTPRoute
  to:
    - group: gateway.networking.k8s.io
      kind: Gateway
      name: fastpass-gateway