Name: gateway Namespace: default Labels: Annotations: cert-manager.io/cluster-issuer: letsencrypt-prod API Version: gateway.networking.k8s.io/v1 Kind: Gateway Metadata: Creation Timestamp: 2024-01-08T17:34:12Z Generation: 1 Resource Version: 27028 UID: c36d67d1-3203-4d74-9381-24de99bebf12 Spec: Gateway Class Name: nginx Listeners: Allowed Routes: Namespaces: From: Same Name: http Port: 80 Protocol: HTTP Allowed Routes: Namespaces: From: Same Hostname: example-cafe.REDACTED.net Name: https Port: 443 Protocol: HTTPS Tls: Certificate Refs: Group: Kind: Secret Name: cafe-secret Mode: Terminate Status: Conditions: Last Transition Time: 2024-01-08T17:34:24Z Message: Gateway is programmed Observed Generation: 1 Reason: Programmed Status: True Type: Programmed Last Transition Time: 2024-01-08T17:34:24Z Message: Gateway has at least one valid listener Observed Generation: 1 Reason: ListenersNotValid Status: True Type: Accepted Listeners: Attached Routes: 1 Conditions: Last Transition Time: 2024-01-08T17:34:24Z Message: Listener is accepted Observed Generation: 1 Reason: Accepted Status: True Type: Accepted Last Transition Time: 2024-01-08T17:34:24Z Message: Listener is programmed Observed Generation: 1 Reason: Programmed Status: True Type: Programmed Last Transition Time: 2024-01-08T17:34:24Z Message: All references are resolved Observed Generation: 1 Reason: ResolvedRefs Status: True Type: ResolvedRefs Last Transition Time: 2024-01-08T17:34:24Z Message: No conflicts Observed Generation: 1 Reason: NoConflicts Status: False Type: Conflicted Name: http Supported Kinds: Group: gateway.networking.k8s.io Kind: HTTPRoute Attached Routes: 2 Conditions: Last Transition Time: 2024-01-08T17:34:24Z Message: tls.certificateRefs[0]: Invalid value: default/cafe-secret: secret does not exist Observed Generation: 1 Reason: InvalidCertificateRef Status: False Type: Accepted Last Transition Time: 2024-01-08T17:34:24Z Message: tls.certificateRefs[0]: Invalid value: default/cafe-secret: secret does not exist Observed Generation: 1 Reason: InvalidCertificateRef Status: False Type: ResolvedRefs Last Transition Time: 2024-01-08T17:34:24Z Message: tls.certificateRefs[0]: Invalid value: default/cafe-secret: secret does not exist Observed Generation: 1 Reason: Invalid Status: False Type: Programmed Name: https Supported Kinds: Group: gateway.networking.k8s.io Kind: HTTPRoute Events: Type Reason Age From Message ---- ------ ---- ---- ------- Normal CreateCertificate 13m cert-manager-gateway-shim Successfully created Certificate "cafe-secret" Warning BadConfig 13m (x9 over 13m) cert-manager-gateway-shim Skipped a listener block: [spec.listeners[0].hostname: Required value: the hostname cannot be empty, spec.listeners[0].tls: Required value: the TLS block cannot be empty]