Arko Dasgupta

highlighting the key decisions that need to be made here * naming - * `clientValidation` to hold client specific information to validate * `caCertificateRefs` - to hold the CA certs...

@robscott @youngnick @shaneutt any edits I can make to this PR to help it move forward ? I did notice that the [Backend TLS PR](https://github.com/kubernetes-sigs/gateway-api/pull/2113) has merged which defined the...

this PR was blocked until Gateway API went GA, now that it has, will address comments and push another commit this week

another point for reviewers of this PR, the field is called `CACertificateRefs` Pros: * it looks and feels similar to `CertificateRefs` within the Gateway TLS spec Cons * It looks...

updated the PR based on review comments ptal @youngnick @frankbu @candita

seeing this failure locally ``` Verifying ./hack/../hack/verify-docker-build.sh FAILED ``` as well as in the CI ``` Verifying docker images ERROR: no builder "gateway-api-builder" found gateway-api-builder Building and pushing echo-advanced image...

> the discussion about per-Listener or per-Gateway big +1 for per Listener, since this Gateway implementation may be fronting multiple domains and sub domain on different listeners, requiring authentication &...

sorry for the force push 🙈

thanks for the input @zhlsunshine this issue requires improvements in the infra and xds layers to support this feature, hoping someone from the community can step in and take this...

since its unclear whether https://github.com/kubernetes-sigs/gateway-api/issues/91 will land before March 2024 when Envoy Gateway plans on going GA, plan on picking up this issue and adding this API field into `ClientTrafficPolicy`