{
  "DefaultPrivateGateway": {
    "cidr": "10.200.2.0/24",
    "concerns": {
      "backup": {
        "kind": "disabled",
        "reason": "state in K8s API captured by SystemBackupDef.cluster_resources"
      },
      "certs": {
        "kind": "disabled",
        "reason": "no ACME issuer required"
      },
      "dns": {
        "kind": "disabled",
        "reason": "no DNS records owned by this component (consumers declare their own)"
      },
      "observability": {
        "backlog_ref": "OBS-001",
        "kind": "pending",
        "reason": "ObservabilityImpl iteration deferred — surface stub only"
      },
      "security": {
        "backlog_ref": "SEC-001",
        "kind": "pending",
        "reason": "SecurityImpl iteration deferred — surface stub only"
      },
      "tls": {
        "kind": "disabled",
        "reason": "Gateway-API TLS handled by HTTPRoute consumers, not the gateway itself"
      }
    },
    "gateway_ip": "10.200.2.254",
    "live_check": {
      "scope": "cp_only",
      "strategy": "k8s_pods"
    },
    "name": "private-gateway",
    "namespace": "kube-system",
    "operations": {
      "delete": true,
      "install": true,
      "update": true
    },
    "port": 80
  },
  "PrivateGateway": {
    "cidr": "10.200.2.0/24",
    "concerns": {
      "backup": {
        "kind": "disabled",
        "reason": "state in K8s API captured by SystemBackupDef.cluster_resources"
      },
      "certs": {
        "kind": "disabled",
        "reason": "no ACME issuer required"
      },
      "dns": {
        "kind": "disabled",
        "reason": "no DNS records owned by this component (consumers declare their own)"
      },
      "observability": {
        "backlog_ref": "OBS-001",
        "kind": "pending",
        "reason": "ObservabilityImpl iteration deferred — surface stub only"
      },
      "security": {
        "backlog_ref": "SEC-001",
        "kind": "pending",
        "reason": "SecurityImpl iteration deferred — surface stub only"
      },
      "tls": {
        "kind": "disabled",
        "reason": "Gateway-API TLS handled by HTTPRoute consumers, not the gateway itself"
      }
    },
    "gateway_ip": "10.200.2.254",
    "live_check": {
      "scope": "cp_only",
      "strategy": "k8s_pods"
    },
    "name": "private-gateway",
    "namespace": "kube-system",
    "operations": {
      "delete": true,
      "install": true,
      "update": true
    },
    "port": 80
  },
  "defaults": {
    "private_gateway": {
      "cidr": "10.200.2.0/24",
      "concerns": {
        "backup": {
          "kind": "disabled",
          "reason": "state in K8s API captured by SystemBackupDef.cluster_resources"
        },
        "certs": {
          "kind": "disabled",
          "reason": "no ACME issuer required"
        },
        "dns": {
          "kind": "disabled",
          "reason": "no DNS records owned by this component (consumers declare their own)"
        },
        "observability": {
          "backlog_ref": "OBS-001",
          "kind": "pending",
          "reason": "ObservabilityImpl iteration deferred — surface stub only"
        },
        "security": {
          "backlog_ref": "SEC-001",
          "kind": "pending",
          "reason": "SecurityImpl iteration deferred — surface stub only"
        },
        "tls": {
          "kind": "disabled",
          "reason": "Gateway-API TLS handled by HTTPRoute consumers, not the gateway itself"
        }
      },
      "gateway_ip": "10.200.2.254",
      "live_check": {
        "scope": "cp_only",
        "strategy": "k8s_pods"
      },
      "name": "private-gateway",
      "namespace": "kube-system",
      "operations": {
        "delete": true,
        "install": true,
        "update": true
      },
      "port": 80
    }
  }
}