gateway api v1.0.0 experimental

Gateway.spec.listeners[].tls.certificateRefs[]

SecretObjectReference identifies an API object including its namespace, defaulting to Secret. The API object must be valid in the cluster; the Group and Kind must be registered in the cluster for this reference to be valid. References to objects with invalid Group and Kind are not valid, and must be rejected by the implementation, with appropriate Conditions set on the containing object.

Gateway.spec.listeners[].tls.certificateRefs[] fields and descriptions
Field / Type	Description
group `string`	Group is the group of the referent. For example, "gateway.networking.k8s.io". When unspecified or empty string, core API group is inferred. `default: ""` `maxLength: 253` `pattern: ^$\|^[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*$`
kind `string`	Kind is kind of the referent. For example "Secret". `default: "Secret"` `minLength: 1` `maxLength: 63` `pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`
name `string` required	Name is the name of the referent. `minLength: 1` `maxLength: 253`
namespace `string`	Namespace is the namespace of the referenced object. When unspecified, the local namespace is inferred. Note that when a namespace different than the local namespace is specified, a ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. Support: Core `minLength: 1` `maxLength: 63` `pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`