gateway api v1.0.0 experimental

BackendTLSPolicy.spec.targetRef

TargetRef identifies an API object to apply the policy to. Only Services have Extended support. Implementations MAY support additional objects, with Implementation Specific support. Note that this config applies to the entire referenced resource by default, but this default may change in the future to provide a more granular application of the policy. Support: Extended for Kubernetes Service Support: Implementation-specific for any other resource

BackendTLSPolicy.spec.targetRef fields and descriptions
Field / Type	Description
group `string` required	Group is the group of the target resource. `maxLength: 253` `pattern: ^$\|^[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*$`
kind `string` required	Kind is kind of the target resource. `minLength: 1` `maxLength: 63` `pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`
name `string` required	Name is the name of the target resource. `minLength: 1` `maxLength: 253`
namespace `string`	Namespace is the namespace of the referent. When unspecified, the local namespace is inferred. Even when policy targets a resource in a different namespace, it MUST only apply to traffic originating from the same namespace as the policy. `minLength: 1` `maxLength: 63` `pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`
sectionName `string`	SectionName is the name of a section within the target resource. When unspecified, this targetRef targets the entire resource. In the following resources, SectionName is interpreted as the following: * Gateway: Listener Name * Service: Port Name If a SectionName is specified, but does not exist on the targeted object, the Policy must fail to attach, and the policy implementation should record a `ResolvedRefs` or similar Condition in the Policy's status. `minLength: 1` `maxLength: 253` `pattern: ^[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*$`