ListenerSet

apiVersion: gateway.networking.k8s.io/v1
kind: ListenerSet
metadata:
  name: my-listenerset
  namespace: my-ns  # ListenerSet namespace, may differ from Gateway namespace
spec:
  parentRef:
    name: my-gateway  # Gateway to attach listeners to
    namespace: gateway-ns  # omit if Gateway is in the same namespace
  listeners:
    - name: https  # listener identifier, unique within this ListenerSet
      hostname: "*.example.com"  # accept requests for this domain
      port: 443
      protocol: HTTPS
      tls:
        mode: Terminate  # decrypt TLS at load balancer
        certificateRefs:
          - group: gwin.yandex.cloud
            kind: YCCertificate  # Yandex Cloud certificate
            name: some-certificate
            namespace: some-ns
          - kind: Secret  # Kubernetes secret certificate
            name: some-secret
            namespace: some-ns
      allowedRoutes:  # which routes can use this listener
        namespaces:
          from: Selector  # select by labels (Any or Same can be used as alternative)
          selector:
            matchLabels:
              app: my-app
            matchExpressions:
              - key: app
                operator: In
                values:
                  - my-app
    - name: http
      port: 8080
      protocol: HTTP
      hostname: "service.example.com"
      allowedRoutes:
        namespaces:
          from: Same  # only routes in the same namespace as this ListenerSet

apiVersion: gateway.networking.k8s.io/v1
kind: ListenerSet
metadata:
  name: my-listenerset
  annotations:
    # Listener configuration (applies to all listeners in this ListenerSet)
    gwin.yandex.cloud/listeners.http.protocolSettings.allowHTTP10: "true"  # support old HTTP
    gwin.yandex.cloud/listeners.http.protocolSettings.http2Options.maxConcurrentStreams: "100"  # limit connections
    gwin.yandex.cloud/listeners.stream.idleTimeout: "300s"  # stream backend idle timeout

    # Specific listener configuration
    gwin.yandex.cloud/listener.my-listener.http.protocolSettings.allowHTTP10: "true"  # per-listener HTTP setting
    gwin.yandex.cloud/listener.my-listener.stream.idleTimeout: "300s"  # per-listener timeout

    # ALB resource naming
    gwin.yandex.cloud/listener.my-listener.albListenerName: "my-alb-listener"  # custom listener name
    gwin.yandex.cloud/listener.my-listener.albHTTPRouterName: "my-http-router"  # custom HTTP router name

    # Virtual host attachment
    gwin.yandex.cloud/listener.my-listener.attach.virtualHosts.httpRouterID: "http-router-id"  # manage virtual hosts in an existing HTTP router
    ...