Description:

Envoy Gateway API implementation doesn't support TLSRoute with TLS termination. This prevents the use of multiple routes with the same TLS-terminating listener, as the desired hostnames cannot be specified in TCPRoute.

GEP-2907 has been updated to allow this behavior
https://gateway-api.sigs.k8s.io/geps/gep-2907/

Currently, creating a TLSRoute that attaches to a TLS-terminating listener will be rejected by the implementation, which means that it is not conformant to the specification.

Relevant Links:

• Gep 2907 update - TLS mode and allowed routes kubernetes-sigs/gateway-api#3458