gateway.yaml

apiVersion: gateway.networking.k8s.io/v1beta1
kind: GatewayClass
metadata:
  name: prod
spec:
  controllerName: acme.io/gateway-controller
  parametersRef:
    name: Prod
    group: kuadrant.io
    kind: GatewayPolicy
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: prod-external
  namespace: tenant-ns
  labels:
    placement: "env=prod" #used to decide which clusters to place this gateway on (may change in future)
spec:
  gatewayClassName: prod
  listeners:
  - name: foo-https
    protocol: HTTPS
    port: 443
    hostname: 1.a.b.com
    allowedRoutes:
      kinds: 
        - kind: HTTPRoute
      namespaces:
        from: Selector
        selector:
          matchLabels:
            appType: "api"    
    tls:
      certificateRefs:
      - kind: Secret
        group: ""
        name: 1.a.b.com