[chart]: kgateway#360
Open
dylanmtaylor wants to merge 1 commit into
Open
Conversation
dylanmtaylor
force-pushed
the
feat/kgateway
branch
2 times, most recently
from
da356d2 to
f02d95b
Compare
Add hardened KGateway image and Helm charts (kgateway + kgateway-crds). KGateway is a Kubernetes-native gateway implementing the Gateway API with Envoy Proxy as its data plane. This adds: - image/kgateway/ with Debian 13 runtime and dev variants (v2.3.0) - chart/kgateway/ Helm chart for the control plane deployment - chart/kgateway-crds/ Helm chart for Gateway API + KGateway CRDs Built using the DHI Go 1.26 toolchain with CGO disabled for multi-arch compatibility. Runs as nonroot user (uid 65532). Closes docker-hardened-images#255
dylanmtaylor
force-pushed
the
feat/kgateway
branch
from
f02d95b to
5ee814c
Compare
Closed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
Add a new hardened KGateway control plane image and Helm charts — a minimal, secure alternative to the upstream KGateway images.
Type of Change
[✓] New image
[✓] New Helm chart
[ ] New package
[ ] Documentation improvement or correction
[ ] Example configuration or use case
[ ] Community tooling or script
[ ] Website or catalog enhancement
[ ] Bug fix
[ ] Other (please describe):
Related Issues
#255
Changes Made
• Added
image/kgateway/with Debian 13 runtime and dev variants• Packaged kgateway version
v2.3.0built using the DHI Go 1.26 toolchain (CGO disabled for multi-arch compatibility)• Strictly runs as nonroot user (uid
65532)• Minimal static container runtime base (
dhi.io/static) to reduce attack vectors• Added
chart/kgateway/Helm chart for the control plane deployment• Added
chart/kgateway-crds/Helm chart for Gateway API + KGateway CRDs• Includes
info.yaml,overview.md,guides.md, andlogo.svgfor all componentsTesting
[✓] I have tested these changes locally
[✓] All existing tests pass
[ ] I have added new tests (if applicable)
Screenshots (if applicable)
N/A
Checklist
[✓] My changes follow the repository's style and conventions
[✓] I have updated documentation as needed
[✓] My commit messages are clear and descriptive
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.