feat: add ReferenceGrant RBAC permissions and enhance Docker workflow

Author: dspo

.github/workflows/push-docker.yaml

@@ -1,9 +1,13 @@
 name: push on dockerhub
-on: 
+on:
   push:
     tags:
-      - '*'
-      
+    - '*'
+  workflow_dispatch:
+    inputs:
+      tag:
+        type: string
+        description: "Image tag manually"
 jobs:
   docker:
     runs-on: buildjet-2vcpu-ubuntu-2204
@@ -33,8 +37,8 @@ jobs:
       -
         name: Build and push multi-arch image
         env:
-          TAG: ${{ github.ref_name }}
-          IMAGE_TAG: ${{ github.ref_name }}
+          TAG: ${{ github.event.inputs || github.ref_name }}
+          IMAGE_TAG: ${{ github.event.inputs || github.ref_name }}
         run: |
           echo "building multi-arch images with tag: $TAG"
           make build-push-multi-arch-image

config/rbac/gatewayproxy_editor_role.yaml

@@ -91,6 +91,7 @@ rules:
   - gatewayclasses/status
   - gateways/status
   - httproutes/status
+  - referencegrants/status
   verbs:
   - get
   - update
@@ -102,6 +103,14 @@ rules:
   - get
   - list
   - watch
+- apiGroups:
+  - gateway.networking.k8s.io
+  resources:
+  - referencegrants
+  verbs:
+  - list
+  - update
+  - watch
 - apiGroups:
   - networking.k8s.io
   resources:

config/rbac/gatewayproxy_viewer_role.yaml

@@ -66,6 +66,8 @@ import (
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=gateways/status,verbs=get;update
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes,verbs=get;list;watch
 // +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=httproutes/status,verbs=get;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants,verbs=list;watch;update
+// +kubebuilder:rbac:groups=gateway.networking.k8s.io,resources=referencegrants/status,verbs=get;update
 
 // Networking
 // +kubebuilder:rbac:groups=networking.k8s.io,resources=ingresses,verbs=get;list;watch;update