- op: add
  path: /spec/listeners/-
  value:
    name: netbootxyz
    protocol: HTTPS
    port: 443
    hostname: "netboot.jsme.be"
    allowedRoutes:
      namespaces:
        from: Selector
        selector:
          matchLabels:
            kubernetes.io/metadata.name: netbootxyz
    tls:
      mode: Terminate
      certificateRefs:
        - kind: Secret
          name: netbootxyz-tls
          namespace: envoy-gateway