The Gateway API

kubectl get crd | grep gateway.networking.k8s.io
kubectl api-resources --api-group=gateway.networking.k8s.io
kubectl get gatewayclass                       # which controllers exist (exam: usually one)
kubectl get gateway,httproute -A

# The CRDs carry full schemas, so kubectl explain works offline and is faster than the docs
kubectl explain gateway.spec.listeners
kubectl explain httproute.spec.rules.backendRefs
kubectl explain httproute.spec.rules.filters --recursive | less

apiVersion: gateway.networking.k8s.io/v1
kind: GatewayClass
metadata:
  name: nw-edge
spec:
  controllerName: example.com/gateway-controller   # must match the installed controller; immutable
---
apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: edge
  namespace: nw-gw
spec:
  gatewayClassName: nw-edge
  listeners:
    - name: http                 # routes can target one listener with parentRefs[].sectionName
      protocol: HTTP
      port: 80
      allowedRoutes:
        namespaces:
          from: Same             # the default; All, or Selector with a label selector
    - name: https
      protocol: HTTPS
      port: 443
      hostname: "store.nw.local" # optional; routes must share a hostname with the listener
      tls:
        mode: Terminate          # the default for HTTPS
        certificateRefs:
          - kind: Secret
            name: store-tls      # kubernetes.io/tls Secret in the Gateway's namespace

apiVersion: gateway.networking.k8s.io/v1
kind: HTTPRoute
metadata:
  name: store
  namespace: nw-gw
spec:
  parentRefs:
    - name: edge                 # the Gateway; add sectionName: http to pin one listener
  hostnames:
    - store.nw.local
  rules:
    - matches:
        - path:
            type: PathPrefix     # Exact, PathPrefix, or RegularExpression (controller-dependent)
            value: /store
      backendRefs:
        - name: store-v1         # a Service in the route's namespace
          port: 80               # Service port; required for Services
          weight: 80
        - name: store-v2
          port: 80
          weight: 20             # weights are relative: 4 and 1 would split the same way

  rules:
    - matches:
        - path: { type: PathPrefix, value: /old-shop }
      filters:
        - type: RequestRedirect          # answers the client itself; no backendRefs allowed in this rule
          requestRedirect:
            path:
              type: ReplacePrefixMatch
              replacePrefixMatch: /store
            statusCode: 301
    - matches:
        - path: { type: PathPrefix, value: /api }
      filters:
        - type: URLRewrite               # /api/orders reaches the backend as /orders
          urlRewrite:
            path:
              type: ReplacePrefixMatch
              replacePrefixMatch: /
        - type: RequestHeaderModifier
          requestHeaderModifier:
            set:
              - name: X-Env
                value: lab
            remove: ["X-Debug"]
        - type: ResponseHeaderModifier
          responseHeaderModifier:
            add:
              - name: Cache-Control
                value: no-store
      backendRefs:
        - name: store-api
          port: 80