From cb6d3c8635af1b461bd173dbbc2b9afd0e742b5d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 30 Jan 2026 08:27:26 +0000
Subject: [PATCH 1/2] Initial plan


From fd5d9008f461507232d0773a79cccaa50f7369e9 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Fri, 30 Jan 2026 08:31:07 +0000
Subject: [PATCH 2/2] fix: add validation to ReferenceGrant template to prevent
 invalid resources

Co-authored-by: andibeuge <97287249+andibeuge@users.noreply.github.com>
---
 parcellab/common/templates/_referencegrant.tpl | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/parcellab/common/templates/_referencegrant.tpl b/parcellab/common/templates/_referencegrant.tpl
index 92512bc..95f4bd3 100644
--- a/parcellab/common/templates/_referencegrant.tpl
+++ b/parcellab/common/templates/_referencegrant.tpl
@@ -14,7 +14,9 @@
 {{- $gateway := $envoy.gateway | default dict -}}
 {{- $name := include "common.fullname" . }}
 {{- $serviceNamespace := .Release.Namespace }}
-{{- if $envoy.enabled -}}
+{{- $from := $referenceGrant.from | default list -}}
+{{- $to := $referenceGrant.to | default list -}}
+{{- if and $envoy.enabled (gt (len $from) 0) (gt (len $to) 0) -}}
 ---
 apiVersion: gateway.networking.k8s.io/v1beta1
 kind: ReferenceGrant
@@ -29,7 +31,7 @@ metadata:
   {{- end }}
 spec:
   from:
-    {{- range $referenceGrant.from }}
+    {{- range $from }}
     - group: {{ .group | default "gateway.networking.k8s.io" | quote }}
       kind: {{ required "referenceGrant.from.kind is required" .kind | quote }}
       namespace: {{ $serviceNamespace | quote }}
@@ -38,7 +40,7 @@ spec:
       {{- end }}
     {{- end }}
   to:
-    {{- range $referenceGrant.to }}
+    {{- range $to }}
     - group: {{ .group | default "" | quote }}
       kind: {{ required "referenceGrant.to.kind is required" .kind | quote }}
       {{- with .name }}