---
# yaml-language-server: $schema=https://kubernetes-schemas.pages.dev/gateway.networking.k8s.io/backendtlspolicy_v1alpha3.json
apiVersion: gateway.networking.k8s.io/v1alpha3
kind: BackendTLSPolicy
metadata:
  name: unifi-backend-tls
spec:
  targetRefs:
    - group: ''
      kind: Service
      name: unifi
      sectionName: https
  validation:
    wellKnownCACertificates: System
    hostname: unifi.${SECRET_EXTERNAL_DOMAIN}