Standalone mode not working with k8s.io group v1.34.x

[arkodg]

Description:

What issue is being seen? Describe what should be happening instead of
the bug, for example: The expected value isn't returned, etc.

2025-07-30T11:17:55.656-0700	ERROR	provider	file/file.go:100	failed to reload resources initially	{"runner": "provider", "error": "failed to load resources from file /var/folders/zv/cj1015lx5bndpw3n_qsx9mh40000gn/T/envoy-ai-gateway-resources/config.yaml: local validation error: failed to retrieve validator: kind GatewayClass not found in gateway.networking.k8s.io/v1 groupversion"}

Repro steps:

Include sample requests, environment, etc. All data and inputs
required to reproduce the bug.

Note: If there are privacy concerns, sanitize the data prior to
sharing.

Environment:

Include the environment like gateway version, envoy version and so on.

Logs:

Include the access logs and the Envoy logs.

[shawnh2]

hi @mathetake , curious how could this happen? can you share your config.yaml file?

[shawnh2]

The error raised from here

gateway/internal/gatewayapi/resource/defaulter.go

Line 91 in c988ec5

return nil, fmt.Errorf("failed to retrieve validator: %w", err)

Seems the defaulter failed to parse the schema of your input obj.

[mathetake]

This is the config https://github.com/envoyproxy/ai-gateway/blob/main/cmd/aigw/ai-gateway-default-resources.yaml and you can see the CI failure for the PR (envoyproxy/ai-gateway#974), e.g. https://github.com/envoyproxy/ai-gateway/actions/runs/16630341004/job/47057857801?pr=974.

I am pretty sure this is reproducible by just cloning the PR branch and go test ./cmd/aigw/... -run=TestRun.

[mathetake]

reverting 1376cae didn't help at least

[mathetake]

at least found where the problem is

In ExtractExtensionGVKs routing in kubectl-validate package, it tries to look up by a gvk by lower-case keys. It is called during the validator resolutions

	for nam, def := range openapiSpec.Components.Schemas {
		gvks := utils.ExtractExtensionGVKs(def.Extensions)
		if len(gvks) == 0 {
			continue
		}

but each item in def.Extensions has the gvk beginning with an upper-case letter, which resulted in not found.

[mathetake]

all happening in kubectl-validate inlcuding OpenAPI document parsing. So i think this is something to do with the upgrade of the raw Gateway API CRD (OpenAPI) yaml embedded in EG?

[mathetake]

this feels like a crazy rabbit hole -- i suspect that this is something to do with k8s-sig apiserver package where it changed "Extensions" parsing convention

[mathetake]

so it looks like my suspicion about a shared dep being culprit seems correct. The local test in EG doesn't have that upper letter gvk vs when running with AIGW it does.

[mathetake]

It's so bizarre that envoyproxy/ai-gateway@e0b80dd fixed the bug where I downgraded k8s related dependency. I think we can close this for now but we should expect some hiccup when upgrading the k8s dependency group to v1.34.x

[arkodg]

thanks for debugging this one @mathetake, moving this out of v1.5.0 milestone, since its worked around for now