apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: gateway-short namespace: kube-system spec: gatewayClassName: cilium listeners: - name: http port: 80 protocol: HTTP allowedRoutes: namespaces: from: Selector selector: matchLabels: gateway.quorate.internal/allow-short: 'true' --- apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: gateway-relay namespace: kube-system spec: gatewayClassName: cilium listeners: - name: http port: 80 protocol: HTTP allowedRoutes: namespaces: from: Selector selector: matchLabels: gateway.quorate.internal/allow-public: 'true' --- apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: name: gateway-internal namespace: kube-system spec: gatewayClassName: cilium listeners: - name: http port: 80 protocol: HTTP allowedRoutes: namespaces: from: Selector selector: matchLabels: gateway.quorate.internal/allow-internal: 'true'