gateway api v1.6.2 experimental

XBackend.spec.tls

TLS defines the TLS configuration that the implementation should use when connecting to the backend. ExternalHostname backends SHOULD have TLS configured; the lack of TLS for external hostnames should be considered insecure and a security risk. Support: Extended

XBackend.spec.tls fields and descriptions
Field / Type	Description
clientCertificateRef `object`	ClientCertificateRef is a reference to a Secret containing the client TLS certificate and private key for mutual TLS. This field is required when mode is ClientAndServer and must be unset otherwise.
mode `string` required	Mode defines the TLS mode for the backend connection. `enum: ["None","ServerOnly","ClientAndServer"]`
validation `object`	Validation contains TLS validation configuration for the backend connection. x-kubernetes-validations: [{"message":"must not contain both CACertificateRefs and WellKnownCACertificates","rule":"!(has(self.caCertificateRefs) \u0026\u0026 size(self.caCertificateRefs) \u003e 0 \u0026\u0026 has(self.wellKnownCACertificates) \u0026\u0026 self.wellKnownCACertificates != \"\")"},{"message":"must specify either CACertificateRefs or WellKnownCACertificates","rule":"(has(self.caCertificateRefs) \u0026\u0026 size(self.caCertificateRefs) \u003e 0 \|\| has(self.wellKnownCACertificates) \u0026\u0026 self.wellKnownCACertificates != \"\")"}]