feat: add ReferenceGrant RBAC permissions and enhance Docker workflow

.github/workflows/push-docker-v2-dev.yaml

@@ -6,39 +6,50 @@ on:
     branches:
     - release-v2-dev
   workflow_dispatch:
+    inputs:
+      tag:
+        type: string
+        description: "Image tag manually"
+      adc_version:
+        type: string
+        default: dev
+        description: "adc version"
 jobs:
   docker:
     runs-on: buildjet-2vcpu-ubuntu-2204
     steps:
     - name: Checkout
       uses: actions/checkout@v4
       with:
+        ref: ${{ github.ref }}
         submodules: recursive
-
     - name: Setup Go Env
       uses: actions/setup-go@v4
       with:
         go-version: "1.22"
 
-#    - name: Set up QEMU
-#      uses: docker/setup-qemu-action@v3
-#
-#    - name: Set up Docker Buildx
-#      uses: docker/setup-buildx-action@v3
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
 
     - name: Login to Registry
-      uses: docker/login-action@v1
+      uses: docker/login-action@v3
       with:
         registry: ${{ secrets.DOCKER_REGISTRY }}
         username: ${{ secrets.DOCKER_USERNAME }}
         password: ${{ secrets.DOCKER_PASSWORD }}
-
-    - name: Build push image
+    -
+      name: Build and push multi-arch image
       env:
-        TAG: dev
         ARCH: amd64
         ENABLE_PROXY: "false"
         BASE_IMAGE_TAG: "debug"
+        TAG: ${{ github.event.inputs.tag || github.ref_name }}dev
+        IMAGE_TAG: ${{ github.event.inputs.tag || github.ref_name }}dev
+        ADC_VERSION: ${{ github.event.inputs.adc_version }}
       run: |
         echo "building images..."
-        make build-push-image
+        make docker-build
+        make docker-push

.github/workflows/push-docker.yaml

@@ -1,9 +1,9 @@
 name: push on dockerhub
-on: 
+on:
   push:
     tags:
       - '*'
-      
+
 jobs:
   docker:
     runs-on: buildjet-2vcpu-ubuntu-2204

config/rbac/role.yaml

@@ -91,6 +91,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - httproutes/status
+  - referencegrants/status
   verbs:
   - get
   - update
@@ -102,6 +103,14 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - referencegrants
+  verbs:
+  - list
+  - update
+  - watch
 - apiGroups:
   - networking.k8s.io
   resources:

internal/manager/controllers.go

@@ -66,6 +66,8 @@ import (
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=gateways/status,verbs=get;update
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes,verbs=get;list;watch
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes/status,verbs=get;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants,verbs=list;watch;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants/status,verbs=get;update
 
 // Networking
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update