gateway api v1.2.0 experimental

Gateway.spec.backendTLS.clientCertificateRef

ClientCertificateRef is a reference to an object that contains a Client Certificate and the associated private key. References to a resource in different namespace are invalid UNLESS there is a ReferenceGrant in the target namespace that allows the certificate to be attached. If a ReferenceGrant does not allow this reference, the "ResolvedRefs" condition MUST be set to False for this listener with the "RefNotPermitted" reason. ClientCertificateRef can reference to standard Kubernetes resources, i.e. Secret, or implementation-specific custom resources. This setting can be overridden on the service level by use of BackendTLSPolicy. Support: Core

Gateway.spec.backendTLS.clientCertificateRef fields and descriptions
Field / Type	Description
group `string`	Group is the group of the referent. For example, "gateway.networking.k8s.io". When unspecified or empty string, core API group is inferred. `default: ""` `maxLength: 253` `pattern: ^$\|^[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)*$`
kind `string`	Kind is kind of the referent. For example "Secret". `default: "Secret"` `minLength: 1` `maxLength: 63` `pattern: ^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$`
name `string` required	Name is the name of the referent. `minLength: 1` `maxLength: 253`
namespace `string`	Namespace is the namespace of the referenced object. When unspecified, the local namespace is inferred. Note that when a namespace different than the local namespace is specified, a ReferenceGrant object is required in the referent namespace to allow that namespace's owner to accept the reference. See the ReferenceGrant documentation for details. Support: Core `minLength: 1` `maxLength: 63` `pattern: ^[a-z0-9]([-a-z0-9]*[a-z0-9])?$`