Updating GEP-2648 to support multiple target refs

This also clarifies cross-namespace references.

apis/v1alpha2/backendtlspolicy_types.go

@@ -68,7 +68,7 @@ type BackendTLSPolicySpec struct {
 	//
 	// Support: Implementation-specific for any other resource
 	//
-	TargetRef PolicyTargetReferenceWithSectionName `json:"targetRef"`
+	TargetRef LocalPolicyTargetReferenceWithSectionName `json:"targetRef"`
 
 	// TLS contains backend TLS policy configuration.
 	TLS BackendTLSPolicyConfig `json:"tls"`

apis/v1alpha2/policy_types.go

@@ -31,12 +31,29 @@ const (
 	PolicyLabelKey = "gateway.networking.k8s.io/policy"
 )
 
-// PolicyTargetReference identifies an API object to apply a direct or
+// LocalPolicyTargetReference identifies an API object to apply a direct or
 // inherited policy to. This should be used as part of Policy resources
 // that can target Gateway API resources. For more information on how this
 // policy attachment model works, and a sample Policy resource, refer to
 // the policy attachment documentation for Gateway API.
-type PolicyTargetReference struct {
+type LocalPolicyTargetReference struct {
+	// Group is the group of the target resource.
+	Group Group `json:"group"`
+
+	// Kind is kind of the target resource.
+	Kind Kind `json:"kind"`
+
+	// Name is the name of the target resource.
+	Name ObjectName `json:"name"`
+}
+
+// NamespacedPolicyTargetReference identifies an API object to apply a direct or
+// inherited policy to, potentially in a different namespace. This should only
+// be used as part of Policy resources that need to be able to target resources
+// in different namespaces. For more information on how this policy attachment
+// model works, and a sample Policy resource, refer to the policy attachment
+// documentation for Gateway API.
+type NamespacedPolicyTargetReference struct {
 	// Group is the group of the target resource.
 	Group Group `json:"group"`
 
@@ -55,17 +72,17 @@ type PolicyTargetReference struct {
 	Namespace *Namespace `json:"namespace,omitempty"`
 }
 
-// PolicyTargetReferenceWithSectionName identifies an API object to apply a direct
-// policy to. This should be used as part of Policy resources that can target
-// single resources. For more information on how this policy attachment mode
-// works, and a sample Policy resource, refer to the policy attachment documentation
-// for Gateway API.
+// LocalPolicyTargetReferenceWithSectionName identifies an API object to apply a
+// direct policy to. This should be used as part of Policy resources that can
+// target single resources. For more information on how this policy attachment
+// mode works, and a sample Policy resource, refer to the policy attachment
+// documentation for Gateway API.
 //
 // Note: This should only be used for direct policy attachment when references
-// to SectionName are actually needed. In all other cases, PolicyTargetReference
-// should be used.
-type PolicyTargetReferenceWithSectionName struct {
-	PolicyTargetReference `json:",inline"`
+// to SectionName are actually needed. In all other cases,
+// LocalPolicyTargetReference should be used.
+type LocalPolicyTargetReferenceWithSectionName struct {
+	LocalPolicyTargetReference `json:",inline"`
 
 	// SectionName is the name of a section within the target resource. When
 	// unspecified, this targetRef targets the entire resource. In the following