Skip to content

feat(ske): replace DNS bridge with native gateway_api provider support - #62

Open
lweberru with Copilot wants to merge 2 commits into
mainfrom
copilot/remove-ske-dns-gateway-api-workaround
Open

feat(ske): replace DNS bridge with native gateway_api provider support#62
lweberru with Copilot wants to merge 2 commits into
mainfrom
copilot/remove-ske-dns-gateway-api-workaround

Conversation

Copilot AI commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

The STACKIT Terraform provider now natively supports extensions.dns.gateway_api (added in v0.109.0), making the previous Envoy Gateway + stackit_dns_record_set bridge obsolete.

Changes

  • Provider bumpstackitcloud/stackit 0.106.00.113.0 across all modules
  • Native gateway API DNS – Added gateway_api to extensions.dns in platform-kubernetes/3-cluster.tf; defaults to true
  • Variable propagation – Added gateway_api = optional(bool, true) to the dns object type in platform-kubernetes/variables.tf, root variables.tf, and wired through main.tf
  • Bridge removal from _landing-zone-kubernetes.tf:
    • helm_release.demo_envoy_gateway
    • kubernetes_manifest.landing_zone_gateway_class
    • kubernetes_manifest.landing_zone_sample_gateway + landing_zone_sample_http_route
    • data.kubernetes_resources.landing_zone_sample_gateway_service
    • stackit_dns_record_set.landing_zone_sample_gateway
    • local.sample_gateway_lb_endpoint_by_key
  • Docsgetting-started.md DNS section updated to the native path
dns = {
  enabled     = true
  zones       = [...]
  gateway_api = true   # ExternalDNS now handles Gateway/HTTPRoute annotations natively
}

Note: Gateway API CRDs must be installed before enabling gateway_api; ExternalDNS is reconfigured at the next cluster reconcile.

- Bump stackit provider from 0.106.0 to 0.113.0 in all terraform.tf files
- Add gateway_api = true to extensions.dns in platform-kubernetes cluster
- Add gateway_api field to dns variable type in platform-kubernetes and root modules
- Wire gateway_api through main.tf dns block
- Remove temporary DNS bridge: helm_release.demo_envoy_gateway,
  kubernetes_manifest.landing_zone_gateway_class,
  kubernetes_manifest.landing_zone_sample_gateway,
  kubernetes_manifest.landing_zone_sample_http_route,
  data.kubernetes_resources.landing_zone_sample_gateway_service,
  stackit_dns_record_set.landing_zone_sample_gateway,
  local.sample_gateway_lb_endpoint_by_key
- Update docs/getting-started.md to document native gateway_api path

Closes #41

Co-authored-by: lweberru <20902204+lweberru@users.noreply.github.com>
Copilot AI changed the title [WIP] Remove SKE DNS gatewayApi API workaround after provider support feat(ske): replace DNS bridge with native gateway_api provider support Aug 31, 2026
Copilot AI requested a review from lweberru August 31, 2026 11:12

@lweberru lweberru left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

merge ok, but we need to test it.

@lweberru
lweberru marked this pull request as ready for review August 31, 2026 11:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Remove SKE DNS gatewayApi API workaround after provider support

2 participants