Repository navigation
KFlared v0.0.5
This release allows Cloudflare tunnel origins to use Services in another namespace when authorized by a matching Gateway API ReferenceGrant, with validation and fail-closed reconciliation.
Highlights
- Added per-binding origin Service namespace selection, defaulting to the binding namespace.
- Cross-namespace origins require an appropriate ReferenceGrant; revocation deprograms tunnel ingress and removes managed DNS.
- Only internal ClusterIP origin Services are accepted; headless, ExternalName, NodePort, and LoadBalancer Services are rejected.
- Renamed the binding field from gatewayServiceRef to originServiceRef, requiring manifest migration.
- Added validation, reconciliation coverage, documentation, and configuration samples for cross-namespace origins.
Commits
cc10592feat(controller): support cross-namespace tunnel origins05b7270feat: bump chart version to 0.0.6 and app version to 0.0.5