gateway-api commands

5 commands, each with a one-line explanation. Click a command to copy it, or its title for details.

Commands 5 shown

  • TLS Gateway listener with cert ref
    kubectl apply -f - <<'EOF' apiVersion: gateway.networking.k8s.io/v1 kind: Gateway metadata: {name: gw, namespace: <ns>} spec: gatewayClassName: <name> listeners: - name: https protocol: HTTPS port: 443 tls: mode: Terminate certificateRefs: [{name: tls-cert}] EOF

    Terminate TLS at the gateway via certificateRefs to a Secret

    tls · security · network

  • Check HTTPRoute Accepted condition
    kubectl describe httproute <name> -n <ns> | grep -A8 Conditions

    Inspect Accepted/ResolvedRefs status to debug why a route is not attached

    troubleshooting · debug · network

  • Inventory Gateway API resources
    kubectl get gatewayclass,gateway,httproute -A

    One-shot view of classes, gateways and routes across all namespaces

    network · k8s

  • Weighted canary HTTPRoute
    kubectl apply -f - <<'EOF' apiVersion: gateway.networking.k8s.io/v1 kind: HTTPRoute metadata: {name: web, namespace: <ns>} spec: parentRefs: [{name: gw}] rules: - backendRefs: - {name: web-stable, port: 80, weight: 90} - {name: web-canary, port: 80, weight: 10} EOF

    Split traffic 90/10 across stable and canary backends by weight

    network · ci · k8s

  • Allow cross-namespace route with ReferenceGrant
    kubectl apply -f - <<'EOF' apiVersion: gateway.networking.k8s.io/v1beta1 kind: ReferenceGrant metadata: {name: allow-routes, namespace: backend} spec: from: [{group: gateway.networking.k8s.io, kind: HTTPRoute, namespace: edge}] to: [{group: "", kind: Service}] EOF

    Permit HTTPRoute in edge ns to target Services in backend ns

    network · security · k8s