From 77f6201381a2193ce5ec11633caeb9bc9e45559a Mon Sep 17 00:00:00 2001
From: artberger <20074219+artberger@users.noreply.github.com>
Date: Sat, 18 Jul 2026 06:50:54 +0000
Subject: [PATCH] docs: update API (incl. shared types), kubespec widgets,
 Helm, metrics, and agctl CLI docs from agentgateway v1.3.1

Signed-off-by: GitHub Action <action@github.com>
---
 ...gateway.dev_agentgatewaybackends.yaml.html | 30 +++++++++----------
 ...gateway.dev_agentgatewaypolicies.yaml.html |  6 ++--
 2 files changed, 18 insertions(+), 18 deletions(-)

diff --git a/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaybackends.yaml.html b/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaybackends.yaml.html
index c3189b7bb..f367160bc 100644
--- a/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaybackends.yaml.html
+++ b/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaybackends.yaml.html
@@ -2847,7 +2847,7 @@
 <template data-ks-field-panel="ks-widget-1-node-602"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.gemini.model</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Model name override, such as <code class="ks-inline-code">gemini-2.5-pro</code>.<br />If unset, the model name is taken from the request.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/gemini/">llm/providers/gemini</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/rbac/">llm/rbac</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-603"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.host</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Hostname to send requests to.<br />For custom providers without backendRef, host and port specify the target.<br />For managed providers, host and port override the provider default.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (6)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/anthropic/">llm/providers/anthropic</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/custom/">llm/providers/custom</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vllm/">llm/providers/vllm</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-604"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.openai</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">OpenAI provider settings.</div></div><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (11)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/alias/">llm/alias</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/content-routing/">llm/content-routing</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vllm/">llm/providers/vllm</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-605"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.openai.model</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Model name override, such as <code class="ks-inline-code">gpt-4o-mini</code>.<br />If unset, the model name is taken from the request.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (10)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/content-routing/">llm/content-routing</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vllm/">llm/providers/vllm</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-605"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.openai.model</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Model name override, such as <code class="ks-inline-code">gpt-4o-mini</code>.<br />If unset, the model name is taken from the request.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (8)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/content-routing/">llm/content-routing</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vllm/">llm/providers/vllm</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-606"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.path</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">URL path to use for LLM provider API requests.<br />This is useful when you need to route requests to a different API endpoint while maintaining<br />compatibility with the original provider's API structure.<br />If not specified, the default path for the provider is used.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">1024</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (3)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-607"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.pathPrefix</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Overrides the default base path prefix, such as <code class="ks-inline-code">/v1</code>, for upstream requests.<br />Path translation for cross-format requests still applies using this prefix.<br />Only supported for OpenAI and Anthropic providers.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">1024</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/anthropic/">llm/providers/anthropic</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-608"><div class="ks-detail-card"><div class="ks-detail-path">spec.ai.provider.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port to send requests to.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (6)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/kserve/">integrations/kserve</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/anthropic/">llm/providers/anthropic</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/custom/">llm/providers/custom</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/ollama/">llm/providers/ollama</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vllm/">llm/providers/vllm</a></div></div></details></div></template>
@@ -2953,8 +2953,8 @@
 <template data-ks-field-panel="ks-widget-1-node-708"><div class="ks-detail-card"><div class="ks-detail-path">spec.mcp.targets.static.policies.tunnel.backendRef.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port specifies the destination port number to use for this resource.<br />Port is required when the referent is a Kubernetes Service. In this<br />case, the port number is the service port number, not the target port.<br />For other resources, destination port might be derived from the referent<br />resource or this field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-709"><div class="ks-detail-card"><div class="ks-detail-path">spec.mcp.targets.static.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port number of the MCP target.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (6)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/setup/">mcp/guardrails/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/https/">mcp/https</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/session/">mcp/session</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/static-mcp/">mcp/static-mcp</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/virtual/">mcp/virtual</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/mcp/">quickstart/mcp</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-710"><div class="ks-detail-card"><div class="ks-detail-path">spec.mcp.targets.static.protocol</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Protocol to use for the connection to the MCP<br />target.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">SSE, StreamableHTTP</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (5)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/setup/">mcp/guardrails/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/session/">mcp/session</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/static-mcp/">mcp/static-mcp</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/virtual/">mcp/virtual</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/mcp/">quickstart/mcp</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-711"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Policies for communicating with this backend. Policies may also be set<br />with AgentgatewayPolicy. Backend policies take precedence over policy<br />resources when they set the same field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [ai auth extAuth health http mcp tcp tls transformation tunnel] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (15)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/alias/">llm/alias</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/content-routing/">llm/content-routing</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/anthropic/">llm/providers/anthropic</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/azure/">llm/providers/azure</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/gemini/">llm/providers/gemini</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vertex/">llm/providers/vertex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/rbac/">llm/rbac</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-712"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for AI workloads. This is only applicable when<br />connecting to a <code class="ks-inline-code">Backend</code> of type <code class="ks-inline-code">ai</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [defaults modelAliases overrides prompt promptCaching promptGuard routes transformations] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (3)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/alias/">llm/alias</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-711"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Policies for communicating with this backend. Policies may also be set<br />with AgentgatewayPolicy. Backend policies take precedence over policy<br />resources when they set the same field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [ai auth extAuth health http mcp tcp tls transformation tunnel] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (16)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/alias/">llm/alias</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/content-routing/">llm/content-routing</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/anthropic/">llm/providers/anthropic</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/azure/">llm/providers/azure</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/gemini/">llm/providers/gemini</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/vertex/">llm/providers/vertex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/rbac/">llm/rbac</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-712"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for AI workloads. This is only applicable when<br />connecting to a <code class="ks-inline-code">Backend</code> of type <code class="ks-inline-code">ai</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [defaults modelAliases overrides prompt promptCaching promptGuard routes transformations] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (6)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/alias/">llm/alias</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-713"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.defaults</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Defaults to merge with user input fields. If the field is already set, the field in the request is used.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">64</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-714"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.defaults.field</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name of the field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-715"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.defaults.value</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Default value for the field. This can be any JSON data type.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Preserve unknown fields</span><span class="ks-validation-value">true</span></div></div></details></div></template>
@@ -3375,7 +3375,7 @@
 <template data-ks-field-panel="ks-widget-1-node-1130"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.promptGuard.response.webhook.forwardHeaderMatches.type</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Type specifies how to match against the value of the header.</div><div class="ks-rich-block">Support: Core (Exact)</div><div class="ks-rich-block">Support: Implementation-specific (RegularExpression)</div><div class="ks-rich-block">Since RegularExpression HeaderMatchType has implementation-specific<br />conformance, implementations can support POSIX, PCRE or any other dialects<br />of regular expressions. Please read the implementation's documentation to<br />determine the supported dialect.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">Exact, RegularExpression</span></div><div class="ks-validation-item"><span class="ks-validation-label">Default</span><span class="ks-validation-value">Exact</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1131"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.promptGuard.response.webhook.forwardHeaderMatches.value</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Value is the value of HTTP Header to be matched.<br />&lt;gateway:experimental:description&gt;<br />Must consist of printable US-ASCII characters, optionally separated<br />by single tabs or spaces. See: https://tools.ietf.org/html/rfc7230#section-3.2<br />&lt;/gateway:experimental:description&gt;</div><div class="ks-rich-block">&lt;gateway:experimental:validation:Pattern=<code class="ks-inline-code">^[!-~]+([\t ]?[!-~]+)*$</code>&gt;</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">4096</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1132"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.promptGuard.streaming</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Apply prompt guards to streaming responses and realtime websocket messages.<br />Defaults to disabled to preserve streaming throughput unless explicitly enabled.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">Enabled</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1133"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.routes</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Rules for identifying the type of traffic to handle.<br />The keys are URL path suffixes matched using ends-with comparison, for<br />example <code class="ks-inline-code">&quot;/v1/chat/completions&quot;</code>.<br />The special <code class="ks-inline-code">*</code> wildcard matches any path.<br />If not specified, all traffic defaults to <code class="ks-inline-code">completions</code> type.</div></div><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1133"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.routes</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Rules for identifying the type of traffic to handle.<br />The keys are URL path suffixes matched using ends-with comparison, for<br />example <code class="ks-inline-code">&quot;/v1/chat/completions&quot;</code>.<br />The special <code class="ks-inline-code">*</code> wildcard matches any path.<br />If not specified, all traffic defaults to <code class="ks-inline-code">completions</code> type.</div></div><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (5)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/api-keys/">llm/api-keys</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai/">llm/providers/openai</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/realtime/">llm/realtime</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../quickstart/llm/">quickstart/llm</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1134"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.transformations</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CEL transformations to compute and set fields in the request body.<br />The expression result overwrites any existing value for that field.<br />This has a higher priority than <code class="ks-inline-code">overrides</code> if both are set for the same<br />key.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">64</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1135"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.transformations.expression</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CEL expression used to compute the field value.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">16384</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1136"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.ai.transformations.field</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name of the field to set.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details></div></template>
@@ -3493,11 +3493,11 @@
 <template data-ks-field-panel="ks-widget-1-node-1248"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tcp.keepalive.interval</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Time between keepalive probes.<br />If unset, this defaults to 180s.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">invalid duration value</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">interval must be at least 1 second</div></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1249"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tcp.keepalive.retries</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Maximum number of keepalive probes to send before dropping the connection.<br />If unset, this defaults to 9.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">64</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1250"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tcp.keepalive.time</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Time a connection needs to be idle before keepalive probes start being sent.<br />If unset, this defaults to 180s.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">invalid duration value</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">time must be at least 1 second</div></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1251"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for managing TLS connections to the backend.</div><div class="ks-rich-block">If this field is set, TLS will be initiated to the backend; the system trusted CA certificates will be used to<br />validate the server, and the SNI will automatically be set based on the destination.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">insecureSkipVerify All and caCertificateRefs may not be set together</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">insecureSkipVerify and verifySubjectAltNames may not be set together</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at most one of the fields in [verifySubjectAltNames insecureSkipVerify] may be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1251"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for managing TLS connections to the backend.</div><div class="ks-rich-block">If this field is set, TLS will be initiated to the backend; the system trusted CA certificates will be used to<br />validate the server, and the SNI will automatically be set based on the destination.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">insecureSkipVerify All and caCertificateRefs may not be set together</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">insecureSkipVerify and verifySubjectAltNames may not be set together</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at most one of the fields in [verifySubjectAltNames insecureSkipVerify] may be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (3)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/openai-compatible/">llm/providers/openai-compatible</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1252"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.alpnProtocols</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Application-Layer Protocol Negotiation (<code class="ks-inline-code">ALPN</code>)<br />value to use in the TLS handshake.</div><div class="ks-rich-block">If not present, defaults to <code class="ks-inline-code">[&quot;h2&quot;, &quot;http/1.1&quot;]</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">16</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1253"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.caCertificateRefs</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CA certificate <code class="ks-inline-code">ConfigMap</code> to use to<br />verify the server certificate.<br />If unset, the system's trusted certificates are used.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">List type</span><span class="ks-validation-value">atomic</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1254"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.caCertificateRefs.name</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name of the referent.<br />This field is effectively required, but due to backwards compatibility is<br />allowed to be empty. Instances of this type with an empty value here are<br />almost certainly wrong.<br />More info: https://kubernetes.io/docs/concepts/overview/working-with-objects/names/#names</div></div></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1255"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.insecureSkipVerify</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Originates TLS but skips verification of the backend's certificate.<br />WARNING: This is an insecure option that should only be used if the risks are understood.</div><div class="ks-rich-block">There are two modes:<br />* <code class="ks-inline-code">All</code> disables all TLS verification.<br />* <code class="ks-inline-code">Hostname</code> verifies the CA certificate is trusted, but ignores any<br />  mismatch of hostname or SANs. Note that this method is still insecure;<br />  prefer setting <code class="ks-inline-code">verifySubjectAltNames</code> to customize the valid hostnames<br />  if possible.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">All, Hostname</span></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1255"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.insecureSkipVerify</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Originates TLS but skips verification of the backend's certificate.<br />WARNING: This is an insecure option that should only be used if the risks are understood.</div><div class="ks-rich-block">There are two modes:<br />* <code class="ks-inline-code">All</code> disables all TLS verification.<br />* <code class="ks-inline-code">Hostname</code> verifies the CA certificate is trusted, but ignores any<br />  mismatch of hostname or SANs. Note that this method is still insecure;<br />  prefer setting <code class="ks-inline-code">verifySubjectAltNames</code> to customize the valid hostnames<br />  if possible.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">All, Hostname</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1256"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.keyExchangeGroups</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Ordered list of key exchange groups for a TLS connection.<br />For example: <code class="ks-inline-code">X25519_MLKEM768,X25519</code>.</div></div></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1257"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.mtlsCertificateRef</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Enables mutual TLS to the backend, using the<br />specified key (<code class="ks-inline-code">tls.key</code>) and cert (<code class="ks-inline-code">tls.crt</code>) from the referenced<br />credential source, defaulting to a Kubernetes <code class="ks-inline-code">Secret</code>.</div><div class="ks-rich-block">An optional <code class="ks-inline-code">ca.cert</code> field, if present, will be used to verify the<br />server certificate. If <code class="ks-inline-code">caCertificateRefs</code> is also specified, the<br /><code class="ks-inline-code">caCertificateRefs</code> field takes priority.</div><div class="ks-rich-block">If unspecified, no client certificate will be used.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">List type</span><span class="ks-validation-value">atomic</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1258"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tls.mtlsCertificateRef.group</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">The API group of the referenced credential.<br />Empty selects the core API group.</div></div></div></template>
@@ -3526,16 +3526,16 @@
 <template data-ks-field-panel="ks-widget-1-node-1281"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.transformation.response.set</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Headers to set and the values to use.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">16</span></div><div class="ks-validation-item"><span class="ks-validation-label">List type</span><span class="ks-validation-value">map</span></div><div class="ks-validation-item"><span class="ks-validation-label">List map keys</span><span class="ks-validation-value">name</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1282"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.transformation.response.set.name</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">The name of the header to add.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^:?[A-Za-z0-9!#$%&amp;'*+\-.^_\x60|~]+$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">pseudo-headers must be one of :authority, :method, :path, :scheme, or :status</div></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1283"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.transformation.response.set.value</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CEL expression that generates the output value for<br />the header.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">16384</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1284"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for managing tunnel connections, with behavior like <code class="ks-inline-code">HTTPS_PROXY</code>, to the backend.</div></div></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1285"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Proxy server to reach.<br />Supported types: <code class="ks-inline-code">Service</code> and <code class="ks-inline-code">Backend</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">Must have port for Service reference</div></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1286"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.group</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Group is the group of the referent. For example, &quot;gateway.networking.k8s.io&quot;.<br />When unspecified or empty string, core API group is inferred.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">253</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1287"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.kind</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Kind is the Kubernetes resource kind of the referent. For example<br />&quot;Service&quot;.</div><div class="ks-rich-block">Defaults to &quot;Service&quot; when not specified.</div><div class="ks-rich-block">ExternalName services can refer to CNAME DNS records that may live<br />outside of the cluster and as such are difficult to reason about in<br />terms of conformance. They also may not be safe to forward to (see<br />CVE-2021-25740 for more information). Implementations SHOULD NOT<br />support ExternalName Services.</div><div class="ks-rich-block">Support: Core (Services with a type other than ExternalName)</div><div class="ks-rich-block">Support: Implementation-specific (Services with type ExternalName)</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Default</span><span class="ks-validation-value">Service</span></div><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">63</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1288"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.name</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name is the name of the referent.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">253</span></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1284"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for managing tunnel connections, with behavior like <code class="ks-inline-code">HTTPS_PROXY</code>, to the backend.</div></div><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1285"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Proxy server to reach.<br />Supported types: <code class="ks-inline-code">Service</code> and <code class="ks-inline-code">Backend</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">Must have port for Service reference</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1286"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.group</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Group is the group of the referent. For example, &quot;gateway.networking.k8s.io&quot;.<br />When unspecified or empty string, core API group is inferred.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^$|^[a-z0-9]([-a-z0-9]*[a-z0-9])?(\.[a-z0-9]([-a-z0-9]*[a-z0-9])?)*$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">253</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1287"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.kind</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Kind is the Kubernetes resource kind of the referent. For example<br />&quot;Service&quot;.</div><div class="ks-rich-block">Defaults to &quot;Service&quot; when not specified.</div><div class="ks-rich-block">ExternalName services can refer to CNAME DNS records that may live<br />outside of the cluster and as such are difficult to reason about in<br />terms of conformance. They also may not be safe to forward to (see<br />CVE-2021-25740 for more information). Implementations SHOULD NOT<br />support ExternalName Services.</div><div class="ks-rich-block">Support: Core (Services with a type other than ExternalName)</div><div class="ks-rich-block">Support: Implementation-specific (Services with type ExternalName)</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Default</span><span class="ks-validation-value">Service</span></div><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^[a-zA-Z]([-a-zA-Z0-9]*[a-zA-Z0-9])?$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">63</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1288"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.name</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name is the name of the referent.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">253</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1289"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.namespace</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Namespace is the namespace of the backend. When unspecified, the local<br />namespace is inferred.</div><div class="ks-rich-block">Note that when a namespace different than the local namespace is specified,<br />a ReferenceGrant object is required in the referent namespace to allow that<br />namespace's owner to accept the reference. See the ReferenceGrant<br />documentation for details.</div><div class="ks-rich-block">Support: Core</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Pattern</span><span class="ks-validation-value">^[a-z0-9]([-a-z0-9]*[a-z0-9])?$</span></div><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">63</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1290"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port specifies the destination port number to use for this resource.<br />Port is required when the referent is a Kubernetes Service. In this<br />case, the port number is the service port number, not the target port.<br />For other resources, destination port might be derived from the referent<br />resource or this field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1291"><div class="ks-detail-card"><div class="ks-detail-path">spec.static</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Static hostname, IP address, or Unix Domain Socket backend.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">must specify either unixPath or both host and port</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">unixPath and host/port are mutually exclusive</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (4)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1292"><div class="ks-detail-card"><div class="ks-detail-path">spec.static.host</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Host to connect to for TCP backends.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (4)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-1293"><div class="ks-detail-card"><div class="ks-detail-path">spec.static.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port to connect to for TCP backends.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (4)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1290"><div class="ks-detail-card"><div class="ks-detail-path">spec.policies.tunnel.backendRef.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port specifies the destination port number to use for this resource.<br />Port is required when the referent is a Kubernetes Service. In this<br />case, the port number is the service port number, not the target port.<br />For other resources, destination port might be derived from the referent<br />resource or this field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1291"><div class="ks-detail-card"><div class="ks-detail-path">spec.static</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Static hostname, IP address, or Unix Domain Socket backend.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">must specify either unixPath or both host and port</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">unixPath and host/port are mutually exclusive</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (5)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1292"><div class="ks-detail-card"><div class="ks-detail-path">spec.static.host</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Host to connect to for TCP backends.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (5)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-1293"><div class="ks-detail-card"><div class="ks-detail-path">spec.static.port</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-integer">integer</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Port to connect to for TCP backends.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Format</span><span class="ks-validation-value">int32</span></div><div class="ks-validation-item"><span class="ks-validation-label">Minimum</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Maximum</span><span class="ks-validation-value">65535</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (5)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/backend-tunnel-proxy/">llm/providers/backend-tunnel-proxy</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backendtls/">security/backendtls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/jwt/setup/">security/jwt/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/host/">traffic-management/rewrite/host</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/rewrite/path/">traffic-management/rewrite/path</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1294"><div class="ks-detail-card"><div class="ks-detail-path">spec.static.unixPath</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Filesystem path to a Unix Domain Socket. The gateway pod<br />must share a volume with the target (e.g., via emptyDir sidecar pattern).<br />Mutually exclusive with host/port.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1295"><div class="ks-detail-card"><div class="ks-detail-path">status</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Current backend status.</div></div></div></template>
 <template data-ks-field-panel="ks-widget-1-node-1296"><div class="ks-detail-card"><div class="ks-detail-path">status.conditions</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Current condition state for the backend.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">8</span></div><div class="ks-validation-item"><span class="ks-validation-label">List type</span><span class="ks-validation-value">map</span></div><div class="ks-validation-item"><span class="ks-validation-label">List map keys</span><span class="ks-validation-value">type</span></div></div></details></div></template>
diff --git a/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaypolicies.yaml.html b/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaypolicies.yaml.html
index 2ecbfc691..53269234b 100644
--- a/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaypolicies.yaml.html
+++ b/assets/agw-docs/pages/reference/api/latest/agentgateway.dev_agentgatewaypolicies.yaml.html
@@ -1798,8 +1798,8 @@
 <template data-ks-field-panel="ks-widget-1-node-1"><div class="ks-detail-card"><div class="ks-detail-path">kind</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Kind is a string value representing the REST resource this object represents.<br />Servers may infer this from the endpoint the client submits requests to.<br />Cannot be updated.<br />In CamelCase.<br />More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds</div></div></div></template>
 <template data-ks-field-panel="ks-widget-1-node-2"><div class="ks-detail-card"><div class="ks-detail-path">metadata</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span></div><div class="ks-detail-empty">No description for this field.</div></div></template>
 <template data-ks-field-panel="ks-widget-1-node-3"><div class="ks-detail-card"><div class="ks-detail-path">spec</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Desired policy configuration.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">At least one of traffic, frontend, or backend must be provided.</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">strategy.inheritance may only be set on traffic policies</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">backend.mcp may not be used with a Service target</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">backend.mcp may not target an AgentgatewayBackend sectionName</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">backend.ai may not be used with a Service target</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">traffic.jwtAuthentication may not be used with backend.mcp.authentication in the same policy</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'frontend' field can only target a Gateway</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'frontend' field can only target a Gateway</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'traffic' field can only target a Gateway, ListenerSet, GRPCRoute, HTTPRoute, or InferencePool</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'traffic' field can only target a Gateway, ListenerSet, GRPCRoute, HTTPRoute, or InferencePool</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'traffic.phase=PreRouting' field can only target a Gateway or ListenerSet</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">the 'traffic.phase=PreRouting' field can only target a Gateway or ListenerSet</div></div><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">exactly one of the fields in [targetRefs targetSelectors] must be set</div></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-4"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for how to connect to destination backends.</div><div class="ks-rich-block">A backend policy can target a <code class="ks-inline-code">Gateway</code> (optionally, with a<br /><code class="ks-inline-code">sectionName</code> indicating the listener), <code class="ks-inline-code">ListenerSet</code>, <code class="ks-inline-code">Route</code><br />(optionally, with a <code class="ks-inline-code">sectionName</code> indicating the route rule), or a<br /><code class="ks-inline-code">Service</code> or <code class="ks-inline-code">Backend</code> (optionally, with a <code class="ks-inline-code">sectionName</code> indicating the<br />port for <code class="ks-inline-code">Service</code>, or sub-backend for <code class="ks-inline-code">Backend</code>).</div><div class="ks-rich-block">Note that a backend policy applies when connecting to a specific destination backend. Targeting a higher level<br />resource, like <code class="ks-inline-code">Gateway</code>, is just a way to easily apply a policy to a<br />group of backends.</div><div class="ks-rich-block">When multiple policies are selected for a given request, they are merged on a field-level basis, but not a deep<br />merge. Precedence is given to more precise policies: <code class="ks-inline-code">Gateway</code> &lt;<br /><code class="ks-inline-code">Listener</code> &lt; <code class="ks-inline-code">Route</code> &lt; <code class="ks-inline-code">Route Rule</code> &lt; <code class="ks-inline-code">Backend</code> or <code class="ks-inline-code">Service</code>. For<br />example, if a <code class="ks-inline-code">Gateway</code> policy sets <code class="ks-inline-code">tcp</code> and <code class="ks-inline-code">tls</code>, and a <code class="ks-inline-code">Backend</code><br />policy sets <code class="ks-inline-code">tls</code>, the effective policy would be <code class="ks-inline-code">tcp</code> from the<br /><code class="ks-inline-code">Gateway</code>, and <code class="ks-inline-code">tls</code> from the <code class="ks-inline-code">Backend</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [ai auth extAuth health http mcp tcp tls transformation tunnel] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (20)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/web-uis/kagent/">integrations/web-uis/kagent</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/failover/">llm/failover</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/bedrock-guardrails/">llm/guardrails/bedrock-guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/google-model-armor/">llm/guardrails/google-model-armor</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/moderation/">llm/guardrails/moderation</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/multi-layer/">llm/guardrails/multi-layer</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/regex/">llm/guardrails/regex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/webhook/guardrails/">llm/guardrails/webhook/guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-enrichment/">llm/prompt-enrichment</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-templates/">llm/prompt-templates</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/about/">mcp/guardrails/about</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/setup/">mcp/guardrails/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/tool-access/">mcp/tool-access</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../migrate/examples/backend-tls/">migrate/examples/backend-tls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../resiliency/backend-health/">resiliency/backend-health</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backend-authn-gcp/">security/backend-authn-gcp</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/extauth/byo-ext-auth-service/">security/extauth/byo-ext-auth-service</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-5"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for AI workloads. This is only applicable when<br />connecting to a <code class="ks-inline-code">Backend</code> of type <code class="ks-inline-code">ai</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [defaults modelAliases overrides prompt promptCaching promptGuard routes transformations] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (12)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/web-uis/kagent/">integrations/web-uis/kagent</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/bedrock-guardrails/">llm/guardrails/bedrock-guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/google-model-armor/">llm/guardrails/google-model-armor</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/moderation/">llm/guardrails/moderation</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/multi-layer/">llm/guardrails/multi-layer</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/regex/">llm/guardrails/regex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/webhook/guardrails/">llm/guardrails/webhook/guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-enrichment/">llm/prompt-enrichment</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-templates/">llm/prompt-templates</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-4"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for how to connect to destination backends.</div><div class="ks-rich-block">A backend policy can target a <code class="ks-inline-code">Gateway</code> (optionally, with a<br /><code class="ks-inline-code">sectionName</code> indicating the listener), <code class="ks-inline-code">ListenerSet</code>, <code class="ks-inline-code">Route</code><br />(optionally, with a <code class="ks-inline-code">sectionName</code> indicating the route rule), or a<br /><code class="ks-inline-code">Service</code> or <code class="ks-inline-code">Backend</code> (optionally, with a <code class="ks-inline-code">sectionName</code> indicating the<br />port for <code class="ks-inline-code">Service</code>, or sub-backend for <code class="ks-inline-code">Backend</code>).</div><div class="ks-rich-block">Note that a backend policy applies when connecting to a specific destination backend. Targeting a higher level<br />resource, like <code class="ks-inline-code">Gateway</code>, is just a way to easily apply a policy to a<br />group of backends.</div><div class="ks-rich-block">When multiple policies are selected for a given request, they are merged on a field-level basis, but not a deep<br />merge. Precedence is given to more precise policies: <code class="ks-inline-code">Gateway</code> &lt;<br /><code class="ks-inline-code">Listener</code> &lt; <code class="ks-inline-code">Route</code> &lt; <code class="ks-inline-code">Route Rule</code> &lt; <code class="ks-inline-code">Backend</code> or <code class="ks-inline-code">Service</code>. For<br />example, if a <code class="ks-inline-code">Gateway</code> policy sets <code class="ks-inline-code">tcp</code> and <code class="ks-inline-code">tls</code>, and a <code class="ks-inline-code">Backend</code><br />policy sets <code class="ks-inline-code">tls</code>, the effective policy would be <code class="ks-inline-code">tcp</code> from the<br /><code class="ks-inline-code">Gateway</code>, and <code class="ks-inline-code">tls</code> from the <code class="ks-inline-code">Backend</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [ai auth extAuth health http mcp tcp tls transformation tunnel] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (21)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/web-uis/kagent/">integrations/web-uis/kagent</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/failover/">llm/failover</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/bedrock-guardrails/">llm/guardrails/bedrock-guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/google-model-armor/">llm/guardrails/google-model-armor</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/moderation/">llm/guardrails/moderation</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/multi-layer/">llm/guardrails/multi-layer</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/regex/">llm/guardrails/regex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/webhook/guardrails/">llm/guardrails/webhook/guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-enrichment/">llm/prompt-enrichment</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-templates/">llm/prompt-templates</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/about/">mcp/guardrails/about</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/guardrails/setup/">mcp/guardrails/setup</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../mcp/tool-access/">mcp/tool-access</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../migrate/examples/backend-tls/">migrate/examples/backend-tls</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../resiliency/backend-health/">resiliency/backend-health</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/backend-authn-gcp/">security/backend-authn-gcp</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../security/extauth/byo-ext-auth-service/">security/extauth/byo-ext-auth-service</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
+<template data-ks-field-panel="ks-widget-1-node-5"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Settings for AI workloads. This is only applicable when<br />connecting to a <code class="ks-inline-code">Backend</code> of type <code class="ks-inline-code">ai</code>.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Rule</span><div class="ks-validation-value ks-validation-value-block">at least one of the fields in [defaults modelAliases overrides prompt promptCaching promptGuard routes transformations] must be set</div></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (13)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../integrations/web-uis/kagent/">integrations/web-uis/kagent</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/bedrock-guardrails/">llm/guardrails/bedrock-guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/google-model-armor/">llm/guardrails/google-model-armor</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/moderation/">llm/guardrails/moderation</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/multi-layer/">llm/guardrails/multi-layer</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/regex/">llm/guardrails/regex</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/guardrails/webhook/guardrails/">llm/guardrails/webhook/guardrails</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-enrichment/">llm/prompt-enrichment</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/prompt-templates/">llm/prompt-templates</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/bedrock/">llm/providers/bedrock</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-6"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.defaults</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Defaults to merge with user input fields. If the field is already set, the field in the request is used.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">64</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-7"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.defaults.field</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name of the field.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-8"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.defaults.value</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Default value for the field. This can be any JSON data type.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Preserve unknown fields</span><span class="ks-validation-value">true</span></div></div></details></div></template>
@@ -2220,7 +2220,7 @@
 <template data-ks-field-panel="ks-widget-1-node-423"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.promptGuard.response.webhook.forwardHeaderMatches.type</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Type specifies how to match against the value of the header.</div><div class="ks-rich-block">Support: Core (Exact)</div><div class="ks-rich-block">Support: Implementation-specific (RegularExpression)</div><div class="ks-rich-block">Since RegularExpression HeaderMatchType has implementation-specific<br />conformance, implementations can support POSIX, PCRE or any other dialects<br />of regular expressions. Please read the implementation's documentation to<br />determine the supported dialect.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">Exact, RegularExpression</span></div><div class="ks-validation-item"><span class="ks-validation-label">Default</span><span class="ks-validation-value">Exact</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-424"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.promptGuard.response.webhook.forwardHeaderMatches.value</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Value is the value of HTTP Header to be matched.<br />&lt;gateway:experimental:description&gt;<br />Must consist of printable US-ASCII characters, optionally separated<br />by single tabs or spaces. See: https://tools.ietf.org/html/rfc7230#section-3.2<br />&lt;/gateway:experimental:description&gt;</div><div class="ks-rich-block">&lt;gateway:experimental:validation:Pattern=<code class="ks-inline-code">^[!-~]+([\t ]?[!-~]+)*$</code>&gt;</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">4096</span></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-425"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.promptGuard.streaming</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Apply prompt guards to streaming responses and realtime websocket messages.<br />Defaults to disabled to preserve streaming throughput unless explicitly enabled.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Enum</span><span class="ks-validation-value">Enabled</span></div></div></details></div></template>
-<template data-ks-field-panel="ks-widget-1-node-426"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.routes</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Rules for identifying the type of traffic to handle.<br />The keys are URL path suffixes matched using ends-with comparison, for<br />example <code class="ks-inline-code">&quot;/v1/chat/completions&quot;</code>.<br />The special <code class="ks-inline-code">*</code> wildcard matches any path.<br />If not specified, all traffic defaults to <code class="ks-inline-code">completions</code> type.</div></div></div></template>
+<template data-ks-field-panel="ks-widget-1-node-426"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.routes</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-object">object</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Rules for identifying the type of traffic to handle.<br />The keys are URL path suffixes matched using ends-with comparison, for<br />example <code class="ks-inline-code">&quot;/v1/chat/completions&quot;</code>.<br />The special <code class="ks-inline-code">*</code> wildcard matches any path.<br />If not specified, all traffic defaults to <code class="ks-inline-code">completions</code> type.</div></div><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (1)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/providers/multiple-endpoints/">llm/providers/multiple-endpoints</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-427"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.transformations</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-complex">object[]</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CEL transformations to compute and set fields in the request body.<br />The expression result overwrites any existing value for that field.<br />This has a higher priority than <code class="ks-inline-code">overrides</code> if both are set for the same<br />key.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min items</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max items</span><span class="ks-validation-value">64</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-428"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.transformations.expression</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">CEL expression used to compute the field value.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Min length</span><span class="ks-validation-value">1</span></div><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">16384</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>
 <template data-ks-field-panel="ks-widget-1-node-429"><div class="ks-detail-card"><div class="ks-detail-path">spec.backend.ai.transformations.field</div><div class="ks-detail-meta-line"><span class="ks-detail-type ks-type-string">string</span><span class="ks-detail-required">Required</span></div><div class="ks-detail-desc"><div class="ks-rich-block">Name of the field to set.</div></div><details class="ks-validation"><summary class="ks-validation-summary">Validation</summary><div class="ks-validation-body"><div class="ks-validation-item"><span class="ks-validation-label">Max length</span><span class="ks-validation-value">256</span></div></div></details><details class="ks-validation ks-documentation"><summary class="ks-validation-summary">Documentation References (2)</summary><div class="ks-validation-body"><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../llm/transformations/">llm/transformations</a></div><div class="ks-doc-link-row"><a class="ks-doc-link" href="../../../traffic-management/transformations/llm-model-headers/">traffic-management/transformations/llm-model-headers</a></div></div></details></div></template>