apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: allowed-relay
  namespace: public-client
spec:
  parentRefs:
    - name: gateway-relay
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: denied-relay
  namespace: denied-client
spec:
  parentRefs:
    - name: gateway-relay
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: allowed-internal
  namespace: internal-client
spec:
  parentRefs:
    - name: gateway-internal
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: denied-internal
  namespace: denied-client
spec:
  parentRefs:
    - name: gateway-internal
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: unrelated-gateway
  namespace: denied-client
spec:
  parentRefs:
    - name: application-gateway
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: short-http-allowed
  namespace: short-client
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: short-http-denied
  namespace: denied-client
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: short-http-public
  namespace: public-client
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: TCPRoute
metadata:
  name: short-tcp-allowed
  namespace: minecraft
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: TCPRoute
metadata:
  name: short-tcp-denied
  namespace: denied-client
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: TCPRoute
metadata:
  name: short-tcp-public
  namespace: public-client
spec:
  parentRefs:
    - name: gateway-short
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: TCPRoute
metadata:
  name: unrelated-tcp
  namespace: denied-client
spec:
  parentRefs:
    - name: gateway-relay
      namespace: kube-system
---
apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: mixed-parents
  namespace: public-client
spec:
  parentRefs:
    - name: gateway-relay
      namespace: kube-system
    - name: gateway-short
      namespace: kube-system