apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata: {name: gateway-short, namespace: kube-system}
spec:
  gatewayClassName: cilium
  listeners:
    - name: minecraft
      port: 25565
      protocol: TCP
      allowedRoutes:
        kinds: [{kind: TCPRoute}]
        namespaces:
          from: Selector
          selector:
            matchLabels: {gateway.quorate.internal/allow-short: "true"}
    - name: https
      port: 443
      protocol: HTTPS
      hostname: nlb-canary.quorate.dev
      tls:
        mode: Terminate
        certificateRefs: [{kind: Secret, name: gateway-relay-tls}]
      allowedRoutes:
        kinds: [{kind: HTTPRoute}]
        namespaces:
          from: Selector
          selector:
            matchLabels: {gateway.quorate.internal/allow-short: "true"}
    - name: http
      port: 80
      protocol: HTTP
      hostname: nlb-canary.quorate.dev
      allowedRoutes:
        kinds: [{kind: HTTPRoute}]
        namespaces:
          from: Selector
          selector:
            matchLabels: {gateway.quorate.internal/allow-short: "true"}