gateway api v1.6.2 experimental

BackendTLSPolicy.spec.validation.subjectAltNames

SubjectAltNames contains one or more Subject Alternative Names. When specified the certificate served from the backend MUST have at least one Subject Alternate Name matching one of the specified SubjectAltNames. Support: Extended

BackendTLSPolicy.spec.validation.subjectAltNames fields and descriptions
Field / Type	Description
hostname `string`	Hostname contains Subject Alternative Name specified in DNS name format. Required when Type is set to Hostname, ignored otherwise. Support: Core `minLength: 1` `maxLength: 253` `pattern: ^(\\.)?[a-z0-9]([-a-z0-9][a-z0-9])?(\.[a-z0-9]([-a-z0-9][a-z0-9])?)$`
type `string` required	Type determines the format of the Subject Alternative Name. Always required. Support: Core `enum: ["Hostname","URI"]`
uri `string`	URI contains Subject Alternative Name specified in a full URI format. It MUST include both a scheme (e.g., "http" or "ftp") and a scheme-specific-part. Common values include SPIFFE IDs like "spiffe://mycluster.example.com/ns/myns/sa/svc1sa". Required when Type is set to URI, ignored otherwise. Support: Core `minLength: 1` `maxLength: 253` `pattern: ^(([^:/?#]+):)(//([^/?#]))([^?#])(\?([^#]))?(#(.))?`