api: cross-namespace policy target selectors

Signed-off-by: Guy Daich <[email protected]>
envoyproxy · Jan 24, 2025 · 5772ec8 · 5772ec8
1 parent 5b82a02
commit 5772ec8
Show file tree

Hide file tree

Showing 4 changed files with 62 additions and 0 deletions.
diff --git a/api/v1alpha1/policy_helpers.go b/api/v1alpha1/policy_helpers.go
@@ -37,6 +37,20 @@ type TargetSelector struct {
 
 	// MatchLabels are the set of label selectors for identifying the targeted resource
 	MatchLabels map[string]string `json:"matchLabels"`
+
+	// NamespaceSelector determines if the label selectors specified in MatchLabels are applied in
+	// the policy namespace or across all namespaces.
+	// Note: when referencing targets in a different namespace, appropriate ReferenceGrants must be
+	// configured to allow the selection.
+	// +optional
+	// +notImplementedHide
+	NamespaceSelector *NamespaceSelector `json:"namespaceSelector,omitempty"`
+}
+
+// NamespaceSelector is a selector for selecting either all namespaces or the current namespace.
+type NamespaceSelector struct {
+	// Boolean describing whether all namespaces are selected.
+	Any bool `json:"any,omitempty"`
 }
 
 func (p PolicyTargetReferences) GetTargetRefs() []gwapiv1a2.LocalPolicyTargetReferenceWithSectionName {

diff --git a/api/v1alpha1/zz_generated.deepcopy.go b/api/v1alpha1/zz_generated.deepcopy.go
diff --git a/site/content/en/latest/api/extension_types.md b/site/content/en/latest/api/extension_types.md
@@ -2898,6 +2898,20 @@ _Appears in:_
 | `OpenTelemetry` |  | 
 
 
+#### NamespaceSelector
+
+
+
+NamespaceSelector is a selector for selecting either all namespaces or the current namespace.
+
+_Appears in:_
+- [TargetSelector](#targetselector)
+
+| Field | Type | Required | Default | Description |
+| ---   | ---  | ---      | ---     | ---         |
+| `any` | _boolean_ |  true  |  | Boolean describing whether all namespaces are selected. |
+
+
 #### OIDC
 
 

diff --git a/site/content/zh/latest/api/extension_types.md b/site/content/zh/latest/api/extension_types.md
@@ -2898,6 +2898,20 @@ _Appears in:_
 | `OpenTelemetry` |  | 
 
 
+#### NamespaceSelector
+
+
+
+NamespaceSelector is a selector for selecting either all namespaces or the current namespace.
+
+_Appears in:_
+- [TargetSelector](#targetselector)
+
+| Field | Type | Required | Default | Description |
+| ---   | ---  | ---      | ---     | ---         |
+| `any` | _boolean_ |  true  |  | Boolean describing whether all namespaces are selected. |
+
+
 #### OIDC