Gateway API exposed TCP shows wrong address in status

[patrostkowski]

Summary

When I expose a TenantControlPlane with Gateway API, Kamaji shows the wrong address in status.

$ k get tcp k8s-133 demo-tcp-1 
NAME         VERSION   INSTALLED VERSION   STATUS   CONTROL-PLANE ENDPOINT   KUBECONFIG                    DATASTORE   AGE
k8s-133      v1.33.0   v1.33.0             Ready    172.19.255.100:6443      k8s-133-admin-kubeconfig      default     19m
demo-tcp-1   v1.32.0   v1.32.0             Ready    10.96.58.78:6443         demo-tcp-1-admin-kubeconfig   default     8m33s

It shows the internal Service IP, but it should show the Gateway hostname e.g. c11.cluster.dev:6443.

Expected behavior

When .spec.controlPlane.gateway is used, Kamaji should show the Gateway hostname/address instead:

Actual behavior

Kamaji shows the Service ClusterIP instead of the Gateway hostname.

[patrostkowski]

$ k get tcp k8s-133 demo-tcp-1 -o=jsonpath="{.items[*].spec.controlPlane}" | jq 
{
  "deployment": {
    "additionalMetadata": {},
    "podAdditionalMetadata": {},
    "registrySettings": {
      "apiServerImage": "kube-apiserver",
      "controllerManagerImage": "kube-controller-manager",
      "registry": "registry.k8s.io",
      "schedulerImage": "kube-scheduler"
    },
    "replicas": 2,
    "serviceAccountName": "default",
    "strategy": {
      "rollingUpdate": {
        "maxSurge": "100%",
        "maxUnavailable": 0
      },
      "type": "RollingUpdate"
    }
  },
  "service": {
    "additionalMetadata": {},
    "serviceType": "LoadBalancer"
  }
}
{
  "deployment": {
    "additionalMetadata": {},
    "podAdditionalMetadata": {},
    "registrySettings": {
      "apiServerImage": "kube-apiserver",
      "controllerManagerImage": "kube-controller-manager",
      "registry": "registry.k8s.io",
      "schedulerImage": "kube-scheduler"
    },
    "replicas": 1,
    "serviceAccountName": "default",
    "strategy": {
      "rollingUpdate": {
        "maxSurge": "100%",
        "maxUnavailable": 0
      },
      "type": "RollingUpdate"
    }
  },
  "gateway": {
    "additionalMetadata": {},
    "hostname": "c11.cluster.dev",
    "parentRefs": [
      {
        "group": "gateway.networking.k8s.io",
        "kind": "Gateway",
        "name": "gateway",
        "namespace": "default"
      }
    ]
  },
  "service": {
    "additionalMetadata": {},
    "serviceType": "ClusterIP"
  }
}
$ k get tcp k8s-133 demo-tcp-1 -o=jsonpath="{.items[*].status}" | jq            
{
  "addons": {
    "coreDNS": {
      "enabled": true,
      "lastUpdate": "2026-03-23T09:27:53Z"
    },
    "konnectivity": {
      "agent": {
        "lastUpdate": "2026-03-23T09:27:53Z",
        "mode": "DaemonSet",
        "name": "konnectivity-agent",
        "namespace": "kube-system"
      },
      "certificate": {
        "checksum": "489e20d81949fb31f2b37bcd9d520eee",
        "lastUpdate": "2026-03-23T09:27:09Z",
        "secretName": "k8s-133-konnectivity-certificate"
      },
      "clusterrolebinding": {
        "name": "system:konnectivity-server"
      },
      "configMap": {
        "checksum": "e8b426b27a2452d0137b14cfbbd10a0d",
        "name": "k8s-133-konnectivity-egress-selector-configuration"
      },
      "enabled": true,
      "kubeconfig": {
        "checksum": "7929d71be935d9c4a3e53416558d05e4",
        "lastUpdate": "2026-03-23T09:27:09Z",
        "secretName": "k8s-133-konnectivity-kubeconfig"
      },
      "sa": {
        "name": "konnectivity-agent",
        "namespace": "kube-system"
      },
      "service": {
        "loadBalancer": {
          "ingress": [
            {
              "ip": "172.19.255.100"
            }
          ]
        },
        "name": "k8s-133",
        "namespace": "default",
        "port": 8132
      }
    },
    "kubeProxy": {
      "enabled": true,
      "lastUpdate": "2026-03-23T09:27:53Z"
    }
  },
  "certificates": {
    "apiServer": {
      "checksum": "5b7921d9427c21481a2e3949995c5423",
      "lastUpdate": "2026-03-23T09:27:08Z",
      "secretName": "k8s-133-api-server-certificate"
    },
    "apiServerKubeletClient": {
      "checksum": "b92d0d0abf0ce1d44449c33a5bee7383",
      "lastUpdate": "2026-03-23T09:27:08Z",
      "secretName": "k8s-133-api-server-kubelet-client-certificate"
    },
    "ca": {
      "checksum": "60c461ac939f6bcc4cc006bd2b7549f9",
      "lastUpdate": "2026-03-23T09:27:07Z",
      "secretName": "k8s-133-ca"
    },
    "frontProxyCA": {
      "checksum": "e34088f0d5e55c52af700e7670a7fff5",
      "lastUpdate": "2026-03-23T09:27:07Z",
      "secretName": "k8s-133-front-proxy-ca-certificate"
    },
    "frontProxyClient": {
      "checksum": "cfb1229199f058f13e3b60e9509ef594",
      "lastUpdate": "2026-03-23T09:27:08Z",
      "secretName": "k8s-133-front-proxy-client-certificate"
    },
    "sa": {
      "checksum": "1ccf36cf7e3695aaeffbddddf7f40e14",
      "lastUpdate": "2026-03-23T09:27:08Z",
      "secretName": "k8s-133-sa-certificate"
    }
  },
  "controlPlaneEndpoint": "172.19.255.100:6443",
  "kubeadmPhase": {
    "bootstrapToken": {
      "checksum": "f7f7113eb769b3db65bc6f851412a645",
      "lastUpdate": "2026-03-23T09:27:55Z"
    }
  },
  "kubeadmconfig": {
    "checksum": "4a2081c03baf8da3fe140aacc8265d8b",
    "configmapName": "k8s-133-kubeadmconfig",
    "lastUpdate": "2026-03-23T09:27:07Z"
  },
  "kubeconfig": {
    "admin": {
      "checksum": "3e2b1972deaeef6eea22f5393f428c0b",
      "lastUpdate": "2026-03-23T09:27:08Z",
      "secretName": "k8s-133-admin-kubeconfig"
    },
    "controllerManager": {
      "checksum": "44a0c8466517ebc4375c57ce6d2b9147",
      "lastUpdate": "2026-03-23T09:27:09Z",
      "secretName": "k8s-133-controller-manager-kubeconfig"
    },
    "scheduler": {
      "checksum": "44a0c8466517ebc4375c57ce6d2b9147",
      "lastUpdate": "2026-03-23T09:27:09Z",
      "secretName": "k8s-133-scheduler-kubeconfig"
    }
  },
  "kubernetesResources": {
    "deployment": {
      "availableReplicas": 2,
      "conditions": [
        {
          "lastTransitionTime": "2026-03-23T09:27:42Z",
          "lastUpdateTime": "2026-03-23T09:27:42Z",
          "message": "Deployment has minimum availability.",
          "reason": "MinimumReplicasAvailable",
          "status": "True",
          "type": "Available"
        },
        {
          "lastTransitionTime": "2026-03-23T09:27:10Z",
          "lastUpdateTime": "2026-03-23T09:27:52Z",
          "message": "ReplicaSet \"k8s-133-6477cf79b8\" has successfully progressed.",
          "reason": "NewReplicaSetAvailable",
          "status": "True",
          "type": "Progressing"
        }
      ],
      "lastUpdate": "2026-03-23T09:27:52Z",
      "name": "k8s-133",
      "namespace": "default",
      "observedGeneration": 2,
      "readyReplicas": 2,
      "replicas": 2,
      "selector": "kamaji.clastix.io/name=k8s-133",
      "updatedReplicas": 2
    },
    "service": {
      "loadBalancer": {
        "ingress": [
          {
            "ip": "172.19.255.100"
          }
        ]
      },
      "name": "k8s-133",
      "namespace": "default",
      "port": 6443
    },
    "version": {
      "status": "Ready",
      "version": "v1.33.0"
    }
  },
  "observedGeneration": 2,
  "storage": {
    "certificate": {
      "checksum": "e077067c2b7bdeb731a56ca993cd296b",
      "lastUpdate": "2026-03-23T09:27:09Z",
      "secretName": "k8s-133-datastore-certificate"
    },
    "config": {
      "checksum": "bee2ef1152f37fe3584202edfd6dc37f",
      "secretName": "k8s-133-datastore-config"
    },
    "dataStoreName": "default",
    "driver": "etcd",
    "setup": {
      "checksum": "bee2ef1152f37fe3584202edfd6dc37f",
      "lastUpdate": "2026-03-23T09:27:09Z",
      "schema": "default_k8s_133",
      "user": "default_k8s_133"
    }
  }
}
{
  "addons": {
    "coreDNS": {
      "enabled": true,
      "lastUpdate": "2026-03-23T09:38:29Z"
    },
    "konnectivity": {
      "agent": {
        "lastUpdate": "2026-03-23T09:38:29Z",
        "mode": "DaemonSet",
        "name": "konnectivity-agent",
        "namespace": "kube-system"
      },
      "certificate": {
        "checksum": "2c6871c86c638fbb17a56ae2283a55da",
        "lastUpdate": "2026-03-23T09:38:06Z",
        "secretName": "demo-tcp-1-konnectivity-certificate"
      },
      "clusterrolebinding": {
        "name": "system:konnectivity-server"
      },
      "configMap": {
        "checksum": "e8b426b27a2452d0137b14cfbbd10a0d",
        "name": "demo-tcp-1-konnectivity-egress-selector-configuration"
      },
      "enabled": true,
      "kubeconfig": {
        "checksum": "ad9c9c53661761fc25304818202971f5",
        "lastUpdate": "2026-03-23T09:38:06Z",
        "secretName": "demo-tcp-1-konnectivity-kubeconfig"
      },
      "sa": {
        "name": "konnectivity-agent",
        "namespace": "kube-system"
      },
      "service": {
        "loadBalancer": {},
        "name": "demo-tcp-1",
        "namespace": "default",
        "port": 8132
      }
    },
    "kubeProxy": {
      "enabled": true,
      "lastUpdate": "2026-03-23T09:38:29Z"
    }
  },
  "certificates": {
    "apiServer": {
      "checksum": "725724e2f7eea014e0da7d97f00d7e7b",
      "lastUpdate": "2026-03-23T09:38:04Z",
      "secretName": "demo-tcp-1-api-server-certificate"
    },
    "apiServerKubeletClient": {
      "checksum": "bf953e969b4bfd181bbdff8f014a24fe",
      "lastUpdate": "2026-03-23T09:38:04Z",
      "secretName": "demo-tcp-1-api-server-kubelet-client-certificate"
    },
    "ca": {
      "checksum": "e7aafca0d3991a7d3f3638871142eb0e",
      "lastUpdate": "2026-03-23T09:38:04Z",
      "secretName": "demo-tcp-1-ca"
    },
    "frontProxyCA": {
      "checksum": "64e8131c3f4e7de2895db22746ff56f8",
      "lastUpdate": "2026-03-23T09:38:04Z",
      "secretName": "demo-tcp-1-front-proxy-ca-certificate"
    },
    "frontProxyClient": {
      "checksum": "40ae8f96dc68d5fdc9a8f1f2987add24",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "secretName": "demo-tcp-1-front-proxy-client-certificate"
    },
    "sa": {
      "checksum": "2efdea6dea0822209c75d8d21d8a5084",
      "lastUpdate": "2026-03-23T09:38:04Z",
      "secretName": "demo-tcp-1-sa-certificate"
    }
  },
  "controlPlaneEndpoint": "10.96.58.78:6443",
  "kubeadmPhase": {
    "bootstrapToken": {
      "checksum": "bdd171d6db4e684392768d6ad47e9098",
      "lastUpdate": "2026-03-23T09:38:31Z"
    }
  },
  "kubeadmconfig": {
    "checksum": "b801f53ddc5c2a0c6aaccab851c25a5d",
    "configmapName": "demo-tcp-1-kubeadmconfig",
    "lastUpdate": "2026-03-23T09:38:04Z"
  },
  "kubeconfig": {
    "admin": {
      "checksum": "754e62e33195edd4923af73b0c9f6fb5",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "secretName": "demo-tcp-1-admin-kubeconfig"
    },
    "controllerManager": {
      "checksum": "8083675d1414a102d3f3bdb45695411d",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "secretName": "demo-tcp-1-controller-manager-kubeconfig"
    },
    "scheduler": {
      "checksum": "8083675d1414a102d3f3bdb45695411d",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "secretName": "demo-tcp-1-scheduler-kubeconfig"
    }
  },
  "kubernetesResources": {
    "deployment": {
      "availableReplicas": 1,
      "conditions": [
        {
          "lastTransitionTime": "2026-03-23T09:38:27Z",
          "lastUpdateTime": "2026-03-23T09:38:27Z",
          "message": "Deployment has minimum availability.",
          "reason": "MinimumReplicasAvailable",
          "status": "True",
          "type": "Available"
        },
        {
          "lastTransitionTime": "2026-03-23T09:38:06Z",
          "lastUpdateTime": "2026-03-23T09:38:28Z",
          "message": "ReplicaSet \"demo-tcp-1-58666c8d76\" has successfully progressed.",
          "reason": "NewReplicaSetAvailable",
          "status": "True",
          "type": "Progressing"
        }
      ],
      "lastUpdate": "2026-03-23T09:38:28Z",
      "name": "demo-tcp-1",
      "namespace": "default",
      "observedGeneration": 2,
      "readyReplicas": 1,
      "replicas": 1,
      "selector": "kamaji.clastix.io/name=demo-tcp-1",
      "updatedReplicas": 1
    },
    "service": {
      "loadBalancer": {},
      "name": "demo-tcp-1",
      "namespace": "default",
      "port": 6443
    },
    "version": {
      "status": "Ready",
      "version": "v1.32.0"
    }
  },
  "storage": {
    "certificate": {
      "checksum": "f9fb2d45c29aa1c5bb8e1162e6c89638",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "secretName": "demo-tcp-1-datastore-certificate"
    },
    "config": {
      "checksum": "590c29d13a6175bc5a02464634bbda0a",
      "secretName": "demo-tcp-1-datastore-config"
    },
    "dataStoreName": "default",
    "driver": "etcd",
    "setup": {
      "checksum": "590c29d13a6175bc5a02464634bbda0a",
      "lastUpdate": "2026-03-23T09:38:05Z",
      "schema": "default_demo_tcp_1",
      "user": "default_demo_tcp_1"
    }
  }
}