feat(applicationlayer): WAF v3 (Coraza WASM) render — kube-controllers plumbing + admission webhook#4821

Merged

electricjesus merged 12 commits into

tigera:masterfrom

electricjesus:seth/applicationlayer-render-v3

Jun 12, 2026

Commits on Jun 12, 2026

feat(api): add GatewayAPI WAF extension gating field
electricjesus
committed
feat(applicationlayer): render WAF v3 + in-process admission webhook
electricjesus
committed
feat(applicationlayer): wire WAF v3 render + webhook into installation controller
electricjesus
committed
fix(kubecontrollers): allow apiserver ingress to WAF admission webhook :9443 (EV-6386)
electricjesus
committed
fix(kubecontrollers): dedicated tigera-waf-pull-secret for WAF wasm pull (EV-6386)
electricjesus
committed
fix(kubecontrollers): dedicated tigera-waf-ca-bundle for WAF wasm TLS (EV-6386)
electricjesus
committed
refactor(applicationlayer): render WAF webhook surface from kube-controllers component
electricjesus
committed
chore: drop unused GatewayAddonsFeature constant; comment wording
electricjesus
committed
feat(kubecontrollers): merge all Installation pull secrets into the WAF wasm pull secret
electricjesus
committed
fix(kubecontrollers): render dedicated tigera-waf-ca-bundle source ConfigMap (EV-6386)
electricjesus
committed
refactor(kubecontrollers): resolve WASM_IMAGE from the gateway envoy-proxy image (EV-6386)
electricjesus
committed
fix(gen-versions): drop ComponentCorazaWASM from enterprise template (EV-6386)
electricjesus
committed