fa7abfe5bd
Turned out unnecessary: the real blocker was the missing konghq.com/secret=true label on the Vault-sourced Secret, not a gap in the Gateway API TLS translation itself. Once that label was added (k8s-platform), the operator's own auto-generated KongCertificate/SNI started working and this manual one just collided with it.