Gateway api

AGENTS.md

@@ -110,7 +110,8 @@ Use MkDocs Material admonitions:
 
 - Use `shell` as the language for terminal commands and output.
 - Use `hl_lines` to highlight important output lines, e.g. add `hl_lines="3 4"` after the language tag.
-- Include `$` prompt prefix only when mixing commands with output.
+- Code blocks with more than 4 lines must have a `title=""` attribute.
+- Include `%` prompt prefix only when mixing commands with output.
 
 ### Child-page listing (index pages)
 

content/README.md

@@ -24,6 +24,7 @@ and benefit from the expertise shared in this repository.
 
 |Date|Headline|
 |---|---|
+|2026-07-18|[Gateway API examples and ingress sharding](networking/gateway-api/)|
 |2026-07-17|[Gatekeeper — Automatic SCC Assignment](cluster-configuration/gatekeeper-opa/automatic-scc-assignment/)|
 |2026-07-10|[Updated SCC anyuid page with selection process and modern examples](deploy/scc-anyuid.md)|
 |2026-07-03|[Updated KubeVirt networking: OVN-Bridge, Linux-Bridge, ClusterUserDefinedNetwork](kubevirt/networking/)|

content/networking/gateway-api/backendtlspolicy.yaml

@@ -0,0 +1,17 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: BackendTLSPolicy
+metadata:
+  name: simple-https
+spec:
+  targetRefs:
+    - group: ""
+      kind: Service
+      name: simple-https
+  validation:
+    # System do not include openshift service serving root ca.
+    # wellKnownCACertificates: "System"
+    caCertificateRefs:
+      - group: ""
+        kind: ConfigMap
+        name: my-openshift-service-ca.crt
+    hostname: simple-https.test-app.svc

content/networking/gateway-api/gateway.yaml

@@ -0,0 +1,29 @@
+kind: Gateway
+apiVersion: gateway.networking.k8s.io/v1
+metadata:
+  name: default
+  namespace: openshift-ingress
+spec:
+  gatewayClassName: openshift-default
+  infrastructure:
+    annotations:
+      external-dns.alpha.kubernetes.io/hostname: '*.gwapi-default.ocp7.stormshift.coe.muc.redhat.com'
+  listeners:
+    - protocol: HTTP
+      port: 80
+      name: http
+      allowedRoutes:
+        namespaces:
+          from: All
+    - protocol: HTTPS
+      port: 443
+      name: https
+      hostname: "*.gwapi-default.ocp7.stormshift.coe.muc.redhat.com"
+      tls:
+        mode: Terminate
+        certificateRefs:
+          - name: gwapidefault-cert
+            kind: Secret
+      allowedRoutes:
+        namespaces:
+          from: All

content/networking/gateway-api/httproute.yaml

@@ -0,0 +1,15 @@
+apiVersion: gateway.networking.k8s.io/v1
+kind: HTTPRoute
+metadata:
+  name: simple-https
+spec:
+  parentRefs:
+    - kind: Gateway
+      name: default
+      namespace: openshift-ingress
+  hostnames:
+    - "simple-https.gwapi-default.ocp7.stormshift.coe.muc.redhat.com"
+  rules:
+    - backendRefs:
+        - name: simple-https
+          port: 8080