apiVersion: gateway.networking.k8s.io/v1
kind: BackendTLSPolicy
metadata:
  name: web-gw
spec:
  targetRefs:
    - kind: Service
      name: web
      group: ""
  validation:
    caCertificateRefs:
      - kind: ConfigMap
        name: brds-bundle
        group: ""