Fix .spec.targetRefs[0].namespace: field not declared in schema error

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [1.9.3] - 2026-08-08
+
+### Fixed
+- **`ClientTrafficPolicy` targetRef namespace field removed**: `_gateway_clienttrafficpolicy.tpl` no longer renders `spec.targetRefs[0].namespace`. Envoy Gateway's `LocalPolicyTargetReference` type (used by ClientTrafficPolicy) has no `namespace` field in its CRD schema — policies only attach within their own namespace. The extra field passed silently under Helm 3's looser validation but fails server-side-apply schema validation under Helm 4 (`field not declared in schema`).
+
 ## [1.9.1] - 2026-07-27
 
 ### Added

ci/test-chart/tests/gateway_clienttrafficpolicy_test.yaml

@@ -33,9 +33,6 @@ tests:
       - equal:
           path: spec.targetRefs[0].name
           value: test-gateway
-      - equal:
-          path: spec.targetRefs[0].namespace
-          value: gateway-system
 
   - it: ClientTrafficPolicy should have correct connection settings
     documentSelector:

src/common/Chart.yaml

@@ -15,7 +15,7 @@ type: library
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
-version: 1.9.2
+version: 1.9.3
 
 
 # This is the version number of the application being deployed. This version number should be

src/common/templates/_gateway_clienttrafficpolicy.tpl

@@ -29,14 +29,10 @@ metadata:
     {{- include "harnesscommon.tplvalues.render" ( dict "value" $.Values.global.commonAnnotations "context" $ ) | nindent 4 }}
   {{- end }}
 spec:
-  {{- $parentRefNamespace := $parentRef.namespace | default $.Release.Namespace }}
   targetRefs:
     - group: gateway.networking.k8s.io
       kind: Gateway
       name: {{ include "harnesscommon.tplvalues.render" ( dict "value" $parentRef.name "context" $) }}
-      {{- if $parentRefNamespace }}
-      namespace: {{ include "harnesscommon.tplvalues.render" ( dict "value" $parentRefNamespace "context" $) }}
-      {{- end }}
   {{- if or $clientPolicy.connection $clientPolicy.timeout $clientPolicy.http2 $clientPolicy.path }}
   {{- if $clientPolicy.path }}
   path: