feat(helm): add opt-in Gateway API CRDs to Helm chart

Bundles upstream Gateway API v1.5.1 standard and experimental CRDs as
opt-in via crds.gatewayAPI.standard.enabled / experimental.enabled
(both default false). Raw YAML lives in config/crd/gateway/upstream/
and is copied to helm/files/ by make crds, so verify-crds.sh catches
drift automatically.

Author: roulettedares

Makefile

@@ -27,6 +27,10 @@ MOVE_AGA_CRDS = mkdir -p config/crd/aga && mv config/crd/bases/aga.k8s.aws_* con
 # Copy combined Gateway API CRDs from bases directory to helm directory
 COPY_GATEWAY_CRDS_TO_HELM = cp config/crd/gateway/gateway-crds.yaml helm/aws-load-balancer-controller/crds/gateway-crds.yaml
 
+# Copy upstream Gateway API CRDs to helm files directory
+COPY_STANDARD_GATEWAY_CRDS_TO_HELM = cp config/crd/gateway/upstream/standard-install.yaml helm/aws-load-balancer-controller/files/standard-gatewayapi-crds.yaml
+COPY_EXPERIMENTAL_GATEWAY_CRDS_TO_HELM = cp config/crd/gateway/upstream/experimental-install.yaml helm/aws-load-balancer-controller/files/experimental-gatewayapi-crds.yaml
+
 
 # Get the currently used golang install path (in GOPATH/bin, unless GOBIN is set)
 ifeq (,$(shell go env GOBIN))
@@ -90,6 +94,8 @@ crds: manifests
 	echo '---' > config/crd/gateway/gateway-crds.yaml
 	$(KUSTOMIZE) build config/crd/gateway >> config/crd/gateway/gateway-crds.yaml
 	$(COPY_GATEWAY_CRDS_TO_HELM)
+	$(COPY_STANDARD_GATEWAY_CRDS_TO_HELM)
+	$(COPY_EXPERIMENTAL_GATEWAY_CRDS_TO_HELM)
 	$(KUSTOMIZE) build config/crd/aga > config/crd/aga/aga-crds.yaml
 	echo '---' > config/crd/aga/aga-crds.yaml
 	$(KUSTOMIZE) build config/crd/aga >> config/crd/aga/aga-crds.yaml

config/crd/gateway/upstream/experimental-install.yaml

@@ -0,0 +1,6 @@
+{{- if .Values.crds.gatewayAPI.standard.enabled }}
+{{ .Files.Get "files/standard-gatewayapi-crds.yaml" }}
+{{- end }}
+{{- if .Values.crds.gatewayAPI.experimental.enabled }}
+{{ .Files.Get "files/experimental-gatewayapi-crds.yaml" }}
+{{- end }}

config/crd/gateway/upstream/standard-install.yaml

@@ -515,3 +515,14 @@ loadBalancerClass:
 
 # creator will disable helm default labels, so you can only add yours
 # creator: "me"
+
+# crds controls installation of Kubernetes standard Gateway API CRDs.
+# These are opt-in (default: false) to avoid conflicting with existing installations.
+# standard: used for L7 (HTTP/TLS) routing
+# experimental: used for L4 (TCP/UDP) routing and experimental features
+crds:
+  gatewayAPI:
+    standard:
+      enabled: false
+    experimental:
+      enabled: false