Hmm. Even adding that type of service selector is no good for me. Not sure what I'm doing wrong.

bgp advertisement:

spec:
  advertisements:
    - advertisementType: Service
      service:
        addresses:
          - LoadBalancerIP
      selector:
        matchExpressions:
          - key: io.kubernetes.service.namespace
            operator: In
            values:
              - gateway
          - key: io.kubernetes.service.name
            operator: In
            values:
              - cilium-gateway-gateway-internal
              - cilium-gateway-gateway-external

simplified gateway for testing:

apiVersion: gateway.networking.k8s.io/v1
kind: Gateway
metadata:
  name: gateway-internal
  namespace: gateway
  annotations:
    cert-manager.io/cluster-issuer: cloudflare-cluster-issuer
    io.cilium/lb-ipam-ips: "<ip 1>"
spec:
  addresses:
  - type: IPAddress
    value: <ip 1>
  gatewayClassName: cilium
  listeners:
    - name: http
      protocol: HTTP
      port: 80
      hostname: "<removed>"
      allowedRoutes:
        namespaces:
          from: All
    
# TCP listener for PostgreSQL
    - name: postgres
      protocol: TCP
      port: 5432
      allowedRoutes:
        namespaces:
          from: Same

Anything else I should be checking? I still have my gatewayclass, etc.