Experimental CRDs required for Envoy
I'm working to enable Envoy on our non-prod Pre GKE cluster and I've run into a snag where it can't install because it requires experimental CRDs to be installed.
Helm fails due to the missing CRD:
Error: Failed to render chart: exit status 1: Error: unable to build kubernetes objects from release manifest: resource mapping not found for name: "gitlab-migrations-gitlab-shell" namespace: "gitlab" from "": no matches for kind "TCPRoute" in version "gateway.networking.k8s.io/v1alpha2"
I tried to install the CRDs as described in the envoy gateway migration docs, but that fails because we're not permitted to enable experimental CRDs on our clusters.
Error from server (Invalid): customresourcedefinitions.apiextensions.k8s.io "tcproutes.gateway.networking.k8s.io" is forbidden: ValidatingAdmissionPolicy 'enforce-gateway-standard-channel' with binding 'enforce-gateway-standard-channel-binding' denied request: All Gateway API CRDs must belong to the 'standard' channel. Experimental CRDs are not permitted.
Error from server (Invalid): customresourcedefinitions.apiextensions.k8s.io "tlsroutes.gateway.networking.k8s.io" is forbidden: ValidatingAdmissionPolicy 'enforce-gateway-standard-channel' with binding 'enforce-gateway-standard-channel-binding' denied request: All Gateway API CRDs must belong to the 'standard' channel. Experimental CRDs are not permitted.
Error from server (Invalid): customresourcedefinitions.apiextensions.k8s.io "udproutes.gateway.networking.k8s.io" is forbidden: ValidatingAdmissionPolicy 'enforce-gateway-standard-channel' with binding 'enforce-gateway-standard-channel-binding' denied request: All Gateway API CRDs must belong to the 'standard' channel. Experimental CRDs are not permitted.
As far as I can tell, these CRDs are only available in experimental channel. Is it possible to disable features that use these CRDs so that we can proceed?