Feat: Event Gateway produce policy by harshadixit12 · Pull Request #702 · Kong/kongctl

harshadixit12 · 2026-03-30T17:48:37Z

Summary

In this PR, we are adding support for Event Gateway Virtual Cluster Produce Policy -

Declarative Management
Imperative Get
Dump
View

Note:
Resource key is produce_policies when nested under virtual_clusters, and event_gateway_virtual_cluster_produce_policies when declared at root level.

Example for imperative Get:

kongctl get egw vc produce-policies --gateway-id $EGW_ID --virtual-cluster-id $VC_ID --pat $PAT

kongctl get egw vc produce-policies $POLICY_ID --gateway-id $EGW_ID --virtual-cluster-id $VC_ID --pat $PAT

Full changelog

Implement https://github.com/Kong/kongctl/issues/214

Testing

Unit tests
E2E tests
Manual testing on Universal
Manual testing on Kubernetes

Copilot

Pull request overview

Adds support for Event Gateway Virtual Cluster Produce Policies across kongctl’s declarative engine, imperative get, and dump flows (view/UI skipped for now), aligning with Konnect Event Gateway v1 APIs.

Changes:

Introduces a new declarative resource type for virtual-cluster produce policies (nested + root-level) with planner + executor support.
Adds imperative get event-gateway virtual-cluster produce-policies command (including interactive child loading) and dump support that preserves full policy config via raw-response parsing.
Extends E2E plan/apply/sync workflows to cover create/update/delete and root-level declaration scenarios.

Reviewed changes

Copilot reviewed 33 out of 33 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
test/e2e/scenarios/event-gateway/produce-policy/testdata/config.yaml	Base E2E declarative config including nested `produce_policies`.
test/e2e/scenarios/event-gateway/produce-policy/scenario.yaml	Comprehensive E2E scenario for apply/update/sync-delete + root-level declaration.
test/e2e/scenarios/event-gateway/produce-policy/overlays/001-update-fields/config.yaml	Overlay updating produce-policy fields for update coverage.
test/e2e/scenarios/event-gateway/produce-policy/overlays/002-sync-delete/config.yaml	Overlay removing nested produce policies for sync-delete coverage.
test/e2e/scenarios/event-gateway/produce-policy/overlays/003-root-level-declaration/config.yaml	Overlay declaring produce policies at root level.
test/e2e/scenarios/event-gateway/produce-policy/overlays/004-sync-delete-root-level-declaration/config.yaml	Overlay clearing root-level produce policies for sync-delete coverage.
test/e2e/scenarios/event-gateway/plan/sync-workflow/scenario.yaml	Adds plan+sync workflow coverage for produce policies.
test/e2e/scenarios/event-gateway/plan/sync-workflow/overlays/008-produce-policy/config.yaml	Adds sync overlay config containing a nested produce policy.
test/e2e/scenarios/event-gateway/plan/apply-workflow/scenario.yaml	Adds plan+apply workflow coverage for produce policies.
test/e2e/scenarios/event-gateway/plan/apply-workflow/overlays/008-produce-policy/config.yaml	Adds apply overlay config containing a nested produce policy.
internal/processes/runtime.go	Moves runtime default constants into runtime implementation file.
internal/processes/runtime_types.go	Removes duplicated runtime default constants.
internal/konnect/helpers/sdk.go	Extends SDKAPI with `GetEventGatewayProducePolicyAPI`.
internal/konnect/helpers/sdk_mock.go	Adds mock factory + getter for produce policy API.
internal/konnect/helpers/event_gateway_produce_policies.go	Adds helper interface/impl wrapper around SDK produce policy endpoints.
internal/declarative/state/client.go	Adds state-client CRUD/list/get for virtual-cluster produce policies (including raw config extraction).
internal/declarative/resources/types.go	Adds resource type constant + ResourceSet aggregation helper for produce policies.
internal/declarative/resources/event_gateway_virtual_cluster.go	Supports nested `produce_policies` under virtual clusters (validate/defaults/json).
internal/declarative/resources/event_gateway_produce_policy.go	Introduces declarative produce policy resource (union handling + JSON marshal/unmarshal).
internal/declarative/protection/lookup.go	Marks new produce policy type as not protected by managed-resource protection rules.
internal/declarative/planner/event_gateway_virtual_cluster_planner.go	Hooks produce policy planning into virtual cluster create/update planning.
internal/declarative/planner/event_gateway_produce_policy_planner.go	Implements produce policy planner logic (create/update/delete + config diff).
internal/declarative/planner/event_gateway_produce_policy_planner_test.go	Unit tests for produce policy update detection logic.
internal/declarative/planner/constants.go	Adds `FieldCurrentConfig` constant and new resource type constant.
internal/declarative/executor/executor.go	Wires produce policy executor into apply/sync execution paths.
internal/declarative/executor/event_gateway_produce_policy_adapter.go	Adapter for mapping planned changes to SDK produce policy CRUD calls.
internal/cmd/root/verbs/dump/declarative.go	Injects produce policy API into dump’s state client.
internal/cmd/root/verbs/dump/declarative_children.go	Dumps nested produce policies under virtual clusters with full raw `config`.
internal/cmd/root/products/konnect/eventgateway/virtual_clusters.go	Adds `produce-policies` as a child subcommand under virtual clusters.
internal/cmd/root/products/konnect/eventgateway/produce-policies.go	Implements imperative `get ... produce-policies` command + raw-config output handling.
internal/cmd/root/products/konnect/eventgateway/produce-policies_test.go	Adds tests for flag validation + helper functions for the new command.
internal/cmd/root/products/konnect/eventgateway/interactive_children.go	Adds interactive child loader for virtual-cluster produce policies.
internal/cmd/root/products/konnect/declarative/declarative.go	Injects produce policy API into declarative state client creation.

internal/declarative/planner/event_gateway_produce_policy_planner.go

internal/cmd/root/products/konnect/eventgateway/produce-policies.go

…olicy

harshadixit12 · 2026-04-01T04:10:58Z

Rebased with main and verified that kongctl view works with produce policies as well.

Copilot

Pull request overview

Copilot reviewed 33 out of 33 changed files in this pull request and generated 5 comments.

Copilot · 2026-04-03T15:06:07Z

internal/declarative/planner/event_gateway_produce_policy_planner.go

+	} else if len(current.Labels) > 0 {
+		needsUpdate = true
+		changes["labels"] = FieldChange{Old: current.Labels, New: map[string]string{}}
+	}


When desired labels are omitted (desiredLabels == nil) but the current policy has labels, this code flags an update to remove labels, but the planned update payload is built via producePolicyToFields(desired) and won’t include a "labels" field. Since the executor/adapter doesn’t apply FieldCurrentLabels to construct a label update, this won’t actually clear labels. Consider either treating omitted labels as “leave unchanged”, or explicitly setting updateFields["labels"] to an empty map when planning label removal (and/or implement executor-side label removal using FieldCurrentLabels).

Copilot · 2026-04-03T15:06:08Z

internal/declarative/planner/event_gateway_produce_policy_planner.go

+	var updateFields map[string]any
+	if needsUpdate {
+		updateFields = p.producePolicyToFields(desired)
+		updateFields[FieldCurrentConfig] = current.RawConfig


FieldCurrentConfig is added into updateFields, but there is no executor/adapter logic that reads _current_config (unlike _current_labels). This makes the field ineffective at best and can leak internal metadata into the SDK union unmarshaling payload. Either remove _current_config entirely or implement the intended merge/removal behavior in the executor/adapter and strip the internal field before marshaling the SDK request.

Suggested change

updateFields[FieldCurrentConfig] = current.RawConfig

Copilot · 2026-04-03T15:06:08Z

internal/declarative/planner/event_gateway_produce_policy_planner.go

+func (p *Planner) shouldUpdateProducePolicy(
+	current state.EventGatewayVirtualClusterProducePolicyInfo,
+	desired resources.EventGatewayProducePolicyResource,
+) (bool, map[string]any, map[string]FieldChange) {
+	var needsUpdate bool
+	changes := make(map[string]FieldChange)


shouldUpdateProducePolicy never compares the current policy Type to the desired policy type (derived from which union variant is set). A type-only change (or a change masked by missing/empty RawConfig) can be missed, and if type changes are not supported by the API, the planner should force a recreate instead of an update. Consider adding an explicit type comparison and handling (UPDATE vs DELETE+CREATE) accordingly.

Copilot · 2026-04-03T15:06:08Z

internal/cmd/root/verbs/dump/declarative_children.go

+	policyMap := map[string]any{
+		"type":   policy.Type,
+		"config": rawConfig,
+	}
+	if policy.Name != nil {


Dump conversion for produce policies currently only maps type/name/description/enabled/labels/config. If the API returns fields like condition and parent_policy_id (similar to cluster policies), they’ll be dropped from the dumped declarative config and won’t round-trip. Consider including these fields in policyMap when present, mirroring convertClusterPolicyToResource.

Copilot · 2026-04-03T15:06:09Z

...ios/event-gateway/produce-policy/overlays/004-sync-delete-root-level-declaration/config.yaml

+# event_gateway_produce_policies removed for sync delete test
+event_gateway_virtual_cluster_produce_policies: []


The comment mentions event_gateway_produce_policies, but the actual root-level key used in this scenario is event_gateway_virtual_cluster_produce_policies (as also noted in the PR description). Updating the comment will avoid confusion when maintaining these overlays.

harshadixit12 temporarily deployed to kongctl-acceptance-2 March 30, 2026 17:51 — with GitHub Actions Inactive

harshadixit12 had a problem deploying to kongctl-acceptance March 30, 2026 17:51 — with GitHub Actions Failure

harshadixit12 temporarily deployed to kongctl-acceptance-3 March 30, 2026 17:51 — with GitHub Actions Inactive

harshadixit12 had a problem deploying to kongctl-acceptance-4 March 30, 2026 17:51 — with GitHub Actions Failure

harshadixit12 temporarily deployed to kongctl-acceptance-5 March 30, 2026 17:51 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-4 March 31, 2026 05:38 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-5 March 31, 2026 05:38 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-2 March 31, 2026 05:38 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance March 31, 2026 05:38 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-3 March 31, 2026 05:38 — with GitHub Actions Inactive

harshadixit12 marked this pull request as ready for review March 31, 2026 09:00

harshadixit12 requested review from a team as code owners March 31, 2026 09:00

Copilot AI review requested due to automatic review settings March 31, 2026 09:00

Copilot started reviewing on behalf of harshadixit12 March 31, 2026 09:01 View session

Copilot AI reviewed Mar 31, 2026

View reviewed changes

internal/declarative/planner/event_gateway_produce_policy_planner.go Show resolved Hide resolved

internal/cmd/root/products/konnect/eventgateway/produce-policies.go Outdated Show resolved Hide resolved

harshadixit12 temporarily deployed to kongctl-acceptance-3 March 31, 2026 09:42 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-4 March 31, 2026 09:42 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-2 March 31, 2026 09:42 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance March 31, 2026 09:42 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-5 March 31, 2026 09:42 — with GitHub Actions Inactive

harshadixit12 added 8 commits April 1, 2026 09:27

feat: bootstrap event gateway produce policy

0dc6676

test: bootstrap e2e scenarios for event gateway produce policy

2a08bd2

feat: declarative support for event gateway virtual cluster produce p…

94f191c

…olicy

test: plan-sync and plan-apply workflow for produce policy

9d0dd93

tests: add unit test for produce policy planner

8baef4e

feat: support dump for produce policy

308a4d1

style: fix lint

2d41c0d

fix: copilot feedback - label comparison

7aaf4e8

harshadixit12 force-pushed the feat/event-gateway-produce-policy branch from 040e72a to 7aaf4e8 Compare April 1, 2026 04:01

harshadixit12 temporarily deployed to kongctl-acceptance-2 April 1, 2026 04:04 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-4 April 1, 2026 04:04 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-5 April 1, 2026 04:04 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance-3 April 1, 2026 04:04 — with GitHub Actions Inactive

harshadixit12 temporarily deployed to kongctl-acceptance April 1, 2026 04:04 — with GitHub Actions Inactive

rspurgeon changed the title ~~Feat/event gateway produce policy~~ Feat: event gateway produce policy Apr 1, 2026

rspurgeon changed the title ~~Feat: event gateway produce policy~~ Feat: Event Gateway produce policy Apr 3, 2026

rspurgeon requested a review from Copilot April 3, 2026 14:55

Copilot started reviewing on behalf of rspurgeon April 3, 2026 14:56 View session

Copilot AI reviewed Apr 3, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Feat: Event Gateway produce policy#702

Feat: Event Gateway produce policy#702
harshadixit12 wants to merge 8 commits intomainfrom
feat/event-gateway-produce-policy

harshadixit12 commented Mar 30, 2026 •

edited

Loading

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

harshadixit12 commented Apr 1, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

Copilot AI Apr 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

		# event_gateway_produce_policies removed for sync delete test
		event_gateway_virtual_cluster_produce_policies: [] No newline at end of file

Conversation

harshadixit12 commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Full changelog

Testing

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

harshadixit12 commented Apr 1, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Apr 3, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

harshadixit12 commented Mar 30, 2026 •

edited

Loading