diff --git a/site/content/en/latest/tasks/extensibility/envoy-patch-policy.md b/site/content/en/latest/tasks/extensibility/envoy-patch-policy.md
index e32c447e750..ff819754d1f 100644
--- a/site/content/en/latest/tasks/extensibility/envoy-patch-policy.md
+++ b/site/content/en/latest/tasks/extensibility/envoy-patch-policy.md
@@ -34,6 +34,7 @@ using a `ConfigMap`. In the next step, we will update this resource to enable En
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -53,6 +54,7 @@ data:
       enableEnvoyPatchPolicy: true
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -75,6 +77,7 @@ data:
     extensionApis:
       enableEnvoyPatchPolicy: true
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -95,6 +98,7 @@ the status code is `404`
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -130,6 +134,7 @@ spec:
               inline_string: "could not find what you are looking for"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -168,6 +173,7 @@ spec:
             body:
               inline_string: "could not find what you are looking for"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -176,6 +182,7 @@ Then the EnvoyPatchPolicy should target a specific GatewayClass.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -211,6 +218,7 @@ spec:
               inline_string: "could not find what you are looking for"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -249,6 +257,7 @@ spec:
             body:
               inline_string: "could not find what you are looking for"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/observability/rate-limit-observability.md b/site/content/en/latest/tasks/observability/rate-limit-observability.md
index 26ffe24a9b1..478b85859b9 100644
--- a/site/content/en/latest/tasks/observability/rate-limit-observability.md
+++ b/site/content/en/latest/tasks/observability/rate-limit-observability.md
@@ -37,6 +37,7 @@ we only want to sample `50%` of the trace data. We would configure it as follows
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -64,6 +65,7 @@ data:
             url: otel-svc.observability.svc.cluster.local:4318
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -94,6 +96,7 @@ data:
           provider:
             url: otel-svc.observability.svc.cluster.local:4318
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/operations/customize-envoyproxy.md b/site/content/en/latest/tasks/operations/customize-envoyproxy.md
index 50c2cc26118..152f9e7ff44 100644
--- a/site/content/en/latest/tasks/operations/customize-envoyproxy.md
+++ b/site/content/en/latest/tasks/operations/customize-envoyproxy.md
@@ -17,6 +17,7 @@ First, you need to add ParametersRef in GatewayClass, and refer to EnvoyProxy Co
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -32,6 +33,7 @@ spec:
     namespace: envoy-gateway-system
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -50,6 +52,7 @@ spec:
     name: custom-proxy-config
     namespace: envoy-gateway-system
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -59,6 +62,7 @@ You can customize the EnvoyProxy Deployment Replicas via EnvoyProxy Config like:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -74,6 +78,7 @@ spec:
         replicas: 2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -92,6 +97,7 @@ spec:
       envoyDeployment:
         replicas: 2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -108,6 +114,7 @@ You can customize the EnvoyProxy Image via EnvoyProxy Config like:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -124,6 +131,7 @@ spec:
           image: envoyproxy/envoy:v1.25-latest
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -143,6 +151,7 @@ spec:
         container:
           image: envoyproxy/envoy:v1.25-latest
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -154,6 +163,7 @@ You can customize the EnvoyProxy Pod Annotations via EnvoyProxy Config like:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -172,6 +182,7 @@ spec:
             custom2: deploy-annotation2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -193,6 +204,7 @@ spec:
             custom1: deploy-annotation1
             custom2: deploy-annotation2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -204,6 +216,7 @@ You can customize the EnvoyProxy Deployment Resources via EnvoyProxy Config like
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -226,6 +239,7 @@ spec:
               memory: 1Gi
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -251,6 +265,7 @@ spec:
               cpu: 500m
               memory: 1Gi
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -260,6 +275,7 @@ You can customize the EnvoyProxy Deployment Env via EnvoyProxy Config like:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -280,6 +296,7 @@ spec:
             value: env_b_value
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -303,6 +320,7 @@ spec:
           - name: env_b
             value: env_b_value
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -316,6 +334,7 @@ You can customize the EnvoyProxy Deployment Volumes or VolumeMounts via EnvoyPro
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -340,6 +359,7 @@ spec:
               secretName: envoy-cert
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -367,6 +387,7 @@ spec:
             secret:
               secretName: envoy-cert
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -378,6 +399,7 @@ You can customize the EnvoyProxy Service Annotations via EnvoyProxy Config like:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -395,6 +417,7 @@ spec:
           custom2: svc-annotation2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -415,6 +438,7 @@ spec:
           custom1: svc-annotation1
           custom2: svc-annotation2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -430,6 +454,7 @@ There are two ways to customize it:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -513,6 +538,7 @@ spec:
             name: runtime-0
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -599,6 +625,7 @@ spec:
               resource_api_version: V3
             name: runtime-0
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -617,6 +644,7 @@ Once confirmed, you can apply it via EnvoyProxy Config as shown below:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -640,6 +668,7 @@ spec:
             type: Resource
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -666,6 +695,7 @@ spec:
                 type: Utilization
             type: Resource
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -678,6 +708,7 @@ For example, the following configuration will add `--disable-extensions` arg in
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -690,6 +721,7 @@ spec:
     - --disable-extensions envoy.access_loggers/envoy.access_loggers.wasm 
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -705,6 +737,7 @@ spec:
   extraArgs:
     - --disable-extensions envoy.access_loggers/envoy.access_loggers.wasm 
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -716,6 +749,7 @@ For example, the following configuration will add resource limits to the `envoy`
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -747,6 +781,7 @@ spec:
                         memory: 1024Mi
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -781,6 +816,7 @@ spec:
                         cpu: 200m
                         memory: 1024Mi
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/operations/deployment-mode.md b/site/content/en/latest/tasks/operations/deployment-mode.md
index 300c828120a..16b339fe571 100644
--- a/site/content/en/latest/tasks/operations/deployment-mode.md
+++ b/site/content/en/latest/tasks/operations/deployment-mode.md
@@ -59,6 +59,7 @@ Lets create a `GatewayClass` linked to the marketing team's Envoy Gateway contro
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -159,6 +160,7 @@ spec:
             value: /
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -262,6 +264,7 @@ spec:
             type: PathPrefix
             value: /
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -344,6 +347,7 @@ Lets create a `GatewayClass` linked to the product team's Envoy Gateway controll
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -444,6 +448,7 @@ spec:
             value: /
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -547,6 +552,7 @@ spec:
             type: PathPrefix
             value: /
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -824,6 +830,7 @@ Lets create also and additional `Gateway` linked to the GatewayClass and `backen
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -861,6 +868,7 @@ spec:
             value: /
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -901,6 +909,7 @@ spec:
             type: PathPrefix
             value: /
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/backend-tls.md b/site/content/en/latest/tasks/security/backend-tls.md
index 80ed3593305..706d25ae60d 100644
--- a/site/content/en/latest/tasks/security/backend-tls.md
+++ b/site/content/en/latest/tasks/security/backend-tls.md
@@ -83,6 +83,7 @@ Create a service that exposes port 443 on the backend service.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -103,6 +104,7 @@ spec:
     targetPort: 8443
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -126,6 +128,7 @@ spec:
     protocol: TCP
     targetPort: 8443
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -133,6 +136,7 @@ Create a [BackendTLSPolicy][] instructing Envoy Gateway to establish a TLS conne
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -154,6 +158,7 @@ spec:
     hostname: www.example.com
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -178,6 +183,7 @@ spec:
       kind: ConfigMap
     hostname: www.example.com
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/basic-auth.md b/site/content/en/latest/tasks/security/basic-auth.md
index c9560f56f88..04559a8d2bc 100644
--- a/site/content/en/latest/tasks/security/basic-auth.md
+++ b/site/content/en/latest/tasks/security/basic-auth.md
@@ -102,6 +102,7 @@ secret generated in the previous step.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -118,6 +119,7 @@ spec:
       name: "basic-auth"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -137,6 +139,7 @@ spec:
     users:
       name: "basic-auth"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/cors.md b/site/content/en/latest/tasks/security/cors.md
index 9243d6a5905..cfbe979cd22 100644
--- a/site/content/en/latest/tasks/security/cors.md
+++ b/site/content/en/latest/tasks/security/cors.md
@@ -24,6 +24,7 @@ The below example defines a SecurityPolicy that allows CORS for all HTTP request
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -50,6 +51,7 @@ spec:
     - "x-header-4"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -79,6 +81,7 @@ spec:
     - "x-header-3"
     - "x-header-4"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/ext-auth.md b/site/content/en/latest/tasks/security/ext-auth.md
index 455b986283f..1676b60ded1 100644
--- a/site/content/en/latest/tasks/security/ext-auth.md
+++ b/site/content/en/latest/tasks/security/ext-auth.md
@@ -36,6 +36,7 @@ Create a new HTTPRoute resource to route traffic on the path `/myapp` to the bac
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -57,6 +58,7 @@ spec:
       port: 3000   
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -81,6 +83,7 @@ spec:
     - name: backend
       port: 3000   
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -99,6 +102,7 @@ is successfully authorized.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -118,6 +122,7 @@ spec:
       headersToBackend: ["x-current-user"]
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -140,6 +145,7 @@ spec:
         port: 9002
       headersToBackend: ["x-current-user"]
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -218,6 +224,7 @@ Create a new HTTPRoute resource to route traffic on the path `/myapp` to the bac
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -239,6 +246,7 @@ spec:
       port: 3000   
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -263,6 +271,7 @@ spec:
     - name: backend
       port: 3000   
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -279,6 +288,7 @@ It calls the gRPC external authorization service "grpc-ext-auth" on port 9002 fo
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -297,6 +307,7 @@ spec:
         port: 9002
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -318,6 +329,7 @@ spec:
         name: grpc-ext-auth
         port: 9002
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -332,6 +344,7 @@ the communication between the Envoy proxy and the gRPC auth service.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -352,6 +365,7 @@ spec:
     hostname: grpc-ext-auth
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -375,6 +389,7 @@ spec:
       kind: ConfigMap
     hostname: grpc-ext-auth
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/mutual-tls.md b/site/content/en/latest/tasks/security/mutual-tls.md
index 769f3bd4535..a848d8334cf 100644
--- a/site/content/en/latest/tasks/security/mutual-tls.md
+++ b/site/content/en/latest/tasks/security/mutual-tls.md
@@ -80,6 +80,7 @@ Create a [ClientTrafficPolicy][] to enforce client validation using the CA Certi
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -101,6 +102,7 @@ spec:
         name: "example-ca-cert"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -125,6 +127,7 @@ spec:
         group: ""
         name: "example-ca-cert"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/oidc.md b/site/content/en/latest/tasks/security/oidc.md
index b754d35163d..0360ccd496f 100644
--- a/site/content/en/latest/tasks/security/oidc.md
+++ b/site/content/en/latest/tasks/security/oidc.md
@@ -31,6 +31,7 @@ Let's create an HTTPRoute that represents an application protected by OIDC.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -51,6 +52,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -74,6 +76,7 @@ spec:
     - name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -122,6 +125,7 @@ Note: please replace the ${CLIENT_ID} in the below yaml snippet with the actual
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -143,6 +147,7 @@ spec:
     logoutPath: "/myapp/logout"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -167,6 +172,7 @@ spec:
     redirectURL: "http://www.example.com:8080/myapp/oauth2/callback"
     logoutPath: "/myapp/logout"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/private-key-provider.md b/site/content/en/latest/tasks/security/private-key-provider.md
index 18d3afc5fd0..cf40a96e9e1 100644
--- a/site/content/en/latest/tasks/security/private-key-provider.md
+++ b/site/content/en/latest/tasks/security/private-key-provider.md
@@ -118,6 +118,7 @@ It required the node with 3rd generation Intel Xeon Scalable processor server pr
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -135,6 +136,7 @@ data:
       enableEnvoyPatchPolicy: true
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -155,6 +157,7 @@ data:
     extensionApis:
       enableEnvoyPatchPolicy: true
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -172,6 +175,7 @@ data:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -187,6 +191,7 @@ spec:
     namespace: envoy-gateway-system
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -205,6 +210,7 @@ spec:
     name: custom-proxy-config
     namespace: envoy-gateway-system
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -214,6 +220,7 @@ Using the envoyproxy image with contrib extensions and add qat resources request
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -242,6 +249,7 @@ spec:
               qat.intel.com/cy: '1'
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -273,6 +281,7 @@ spec:
               memory: 4096Mi
               qat.intel.com/cy: '1'
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -282,6 +291,7 @@ Using the envoyproxy image with contrib extensions and add the node affinity to
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -324,6 +334,7 @@ spec:
                     operator: Exists
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -369,6 +380,7 @@ spec:
                   - key: feature.node.kubernetes.io/cpu-cpuid.AVX512VBMI2
                     operator: Exists
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -408,6 +420,7 @@ fortio load -c 10 -k -qps 0 -t 30s -keepalive=false https://www.example.com:${NO
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -445,6 +458,7 @@ spec:
         path: "/tls_certificate/private_key_provider/typed_config/private_key"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -485,6 +499,7 @@ spec:
         from: "/tls_certificate/private_key"
         path: "/tls_certificate/private_key_provider/typed_config/private_key"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -492,6 +507,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -529,6 +545,7 @@ spec:
         path: "/tls_certificate/private_key_provider/typed_config/private_key"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -569,6 +586,7 @@ spec:
         from: "/tls_certificate/private_key"
         path: "/tls_certificate/private_key_provider/typed_config/private_key"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/security/secure-gateways.md b/site/content/en/latest/tasks/security/secure-gateways.md
index 199ac976005..e57b1236389 100644
--- a/site/content/en/latest/tasks/security/secure-gateways.md
+++ b/site/content/en/latest/tasks/security/secure-gateways.md
@@ -167,6 +167,7 @@ namespace to reference Secrets in the "envoy-gateway-system" namespace:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1beta1
@@ -184,6 +185,7 @@ spec:
     kind: Secret
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -204,6 +206,7 @@ spec:
   - group: ""
     kind: Secret
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -230,6 +233,7 @@ Update the Gateway HTTPS listener with `namespace: envoy-gateway-system`, for ex
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -254,6 +258,7 @@ spec:
             namespace: envoy-gateway-system
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -281,6 +286,7 @@ spec:
             name: example-cert
             namespace: envoy-gateway-system
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/circuit-breaker.md b/site/content/en/latest/tasks/traffic/circuit-breaker.md
index 1d3a2e85bbf..9480a86a2cd 100644
--- a/site/content/en/latest/tasks/traffic/circuit-breaker.md
+++ b/site/content/en/latest/tasks/traffic/circuit-breaker.md
@@ -64,6 +64,7 @@ In order to fail fast, apply a `BackendTrafficPolicy` that limits concurrent req
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -81,6 +82,7 @@ spec:
     maxParallelRequests: 10
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -101,6 +103,7 @@ spec:
     maxPendingRequests: 0
     maxParallelRequests: 10
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/client-traffic-policy.md b/site/content/en/latest/tasks/traffic/client-traffic-policy.md
index dc461d7c702..7132453da38 100644
--- a/site/content/en/latest/tasks/traffic/client-traffic-policy.md
+++ b/site/content/en/latest/tasks/traffic/client-traffic-policy.md
@@ -25,6 +25,7 @@ Before proceeding, you should be able to query the example backend using HTTP.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -44,6 +45,7 @@ spec:
     probes: 3
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -66,6 +68,7 @@ spec:
     interval: 60s
     probes: 3
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -204,6 +207,7 @@ This example configures Proxy Protocol for downstream clients.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -220,6 +224,7 @@ spec:
   enableProxyProtocol: true
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -239,6 +244,7 @@ spec:
     namespace: default
   enableProxyProtocol: true
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -340,6 +346,7 @@ This example configures the number of additional ingress proxy hops from the rig
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -358,6 +365,7 @@ spec:
       numTrustedHops: 2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -379,6 +387,7 @@ spec:
     xForwardedFor:
       numTrustedHops: 2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -491,6 +500,7 @@ This example configures the HTTP request timeout for the client, please check ou
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -507,6 +517,7 @@ spec:
       requestReceivedTimeout: 2s
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -526,6 +537,7 @@ spec:
     http:
       requestReceivedTimeout: 2s
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/connection-limit.md b/site/content/en/latest/tasks/traffic/connection-limit.md
index 20bce016805..aac8437dc45 100644
--- a/site/content/en/latest/tasks/traffic/connection-limit.md
+++ b/site/content/en/latest/tasks/traffic/connection-limit.md
@@ -59,6 +59,7 @@ Next, we apply a limit of 5 connections.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -77,6 +78,7 @@ spec:
       value: 5    
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -98,6 +100,7 @@ spec:
     connectionLimit:
       value: 5    
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/fault-injection.md b/site/content/en/latest/tasks/traffic/fault-injection.md
index cc8bea6f6fe..d4f536dbb33 100644
--- a/site/content/en/latest/tasks/traffic/fault-injection.md
+++ b/site/content/en/latest/tasks/traffic/fault-injection.md
@@ -28,6 +28,7 @@ Allow requests with a valid faultInjection by creating an [BackendTrafficPolicy]
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -100,6 +101,7 @@ spec:
         value: /bar
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -175,6 +177,7 @@ spec:
         type: PathPrefix
         value: /bar
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -199,6 +202,7 @@ kubectl get backendtrafficpolicy/fault-injection-delay -o yaml
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -234,6 +238,7 @@ spec:
       weight: 1
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -272,6 +277,7 @@ spec:
       port: 9000
       weight: 1
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/global-rate-limit.md b/site/content/en/latest/tasks/traffic/global-rate-limit.md
index 97cda03a4a5..dfd1e5cf2a3 100644
--- a/site/content/en/latest/tasks/traffic/global-rate-limit.md
+++ b/site/content/en/latest/tasks/traffic/global-rate-limit.md
@@ -37,6 +37,7 @@ Lets install a Redis deployment in the `redis-system` namespce.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 kind: Namespace
@@ -91,6 +92,7 @@ spec:
     app: redis
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -148,6 +150,7 @@ spec:
   selector:
     app: redis
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -159,6 +162,7 @@ as well as configure the URL for the Redis instance used for Global rate limitin
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -181,6 +185,7 @@ data:
           url: redis.redis-system.svc.cluster.local:6379
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -206,6 +211,7 @@ data:
         redis:
           url: redis.redis-system.svc.cluster.local:6379
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -222,6 +228,7 @@ with a value set to `one`.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -247,6 +254,7 @@ spec:
           unit: Hour
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -275,6 +283,7 @@ spec:
           requests: 3
           unit: Hour
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -282,6 +291,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -305,6 +315,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -331,6 +342,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -436,6 +448,7 @@ and so will user `two` (recognised from the traffic flow using the header `x-use
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -461,6 +474,7 @@ spec:
           unit: Hour
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -489,6 +503,7 @@ spec:
           requests: 3
           unit: Hour
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -496,6 +511,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -519,6 +535,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -545,6 +562,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -633,6 +651,7 @@ This example shows you how to rate limit all requests matching the HTTPRoute rul
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -654,6 +673,7 @@ spec:
           unit: Hour
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -678,6 +698,7 @@ spec:
           requests: 3
           unit: Hour
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -685,6 +706,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -708,6 +730,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -734,6 +757,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -785,6 +809,7 @@ Note: EG supports two kinds of rate limit for the IP address: exact and distinct
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -830,6 +855,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -878,6 +904,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -924,6 +951,7 @@ Here is an example of a rate limit implemented by the application developer to l
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -987,6 +1015,7 @@ spec:
         value: /foo
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -1053,6 +1082,7 @@ spec:
         type: PathPrefix
         value: /foo
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -1159,6 +1189,7 @@ like container `image`, `securityContext`, `env` and pod `annotations` and `secu
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -1208,6 +1239,7 @@ data:
               name: ratelimit-cert
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -1260,6 +1292,7 @@ data:
             certificateRef:
               name: ratelimit-cert
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/grpc-routing.md b/site/content/en/latest/tasks/traffic/grpc-routing.md
index 3165405aad5..7c41b54c885 100644
--- a/site/content/en/latest/tasks/traffic/grpc-routing.md
+++ b/site/content/en/latest/tasks/traffic/grpc-routing.md
@@ -97,6 +97,7 @@ as well as a match for all services with a method name `Ping` which matches `yag
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -125,6 +126,7 @@ spec:
           weight: 1
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -156,6 +158,7 @@ spec:
           port: 9000
           weight: 1
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -179,6 +182,7 @@ with match type `RegularExpression`. It matches all the services and methods wit
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -209,6 +213,7 @@ spec:
           weight: 1
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -242,6 +247,7 @@ spec:
           port: 9000
           weight: 1
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-redirect.md b/site/content/en/latest/tasks/traffic/http-redirect.md
index a8fc7d2e82c..2a41777f80b 100644
--- a/site/content/en/latest/tasks/traffic/http-redirect.md
+++ b/site/content/en/latest/tasks/traffic/http-redirect.md
@@ -21,6 +21,7 @@ For example, to issue a permanent redirect (301) from HTTP to HTTPS, configure `
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -42,6 +43,7 @@ spec:
           port: 443
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -66,6 +68,7 @@ spec:
           hostname: www.example.com
           port: 443
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -134,6 +137,7 @@ Define a https listener on the existing gateway
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -158,6 +162,7 @@ spec:
         name: example-com
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -185,6 +190,7 @@ spec:
       - kind: Secret
         name: example-com
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -198,6 +204,7 @@ Create two HTTPRoutes and attach them to the HTTP and HTTPS listeners using the
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -240,6 +247,7 @@ spec:
             value: /
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -285,6 +293,7 @@ spec:
             type: PathPrefix
             value: /
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -309,6 +318,7 @@ below will issue a 302 redirect to all `path.redirect.example` requests whose pa
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -337,6 +347,7 @@ spec:
         port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -368,6 +379,7 @@ spec:
       - name: backend
         port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-request-headers.md b/site/content/en/latest/tasks/traffic/http-request-headers.md
index c3e4efdfe26..7bc709c49c6 100644
--- a/site/content/en/latest/tasks/traffic/http-request-headers.md
+++ b/site/content/en/latest/tasks/traffic/http-request-headers.md
@@ -26,6 +26,7 @@ header in the request.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -56,6 +57,7 @@ spec:
           value: "foo"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -89,6 +91,7 @@ spec:
         - name: "add-header"
           value: "foo"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -147,6 +150,7 @@ filter.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -177,6 +181,7 @@ spec:
           value: "foo"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -210,6 +215,7 @@ spec:
         - name: "set-header"
           value: "foo"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -255,6 +261,7 @@ filter.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -283,6 +290,7 @@ spec:
         - "remove-header"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -314,6 +322,7 @@ spec:
         remove:
         - "remove-header"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -355,6 +364,7 @@ Headers can be added/set/removed in a single filter on the same HTTPRoute and th
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -390,6 +400,7 @@ spec:
         - "removed-header"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -428,6 +439,7 @@ spec:
         remove:
         - "removed-header"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-request-mirroring.md b/site/content/en/latest/tasks/traffic/http-request-mirroring.md
index ed214ac8fc3..f22ef51da36 100644
--- a/site/content/en/latest/tasks/traffic/http-request-mirroring.md
+++ b/site/content/en/latest/tasks/traffic/http-request-mirroring.md
@@ -18,6 +18,7 @@ a second instance of the application deployed in the quickstart.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 ---
@@ -75,6 +76,7 @@ spec:
                   fieldPath: metadata.namespace
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -134,6 +136,7 @@ spec:
                 fieldRef:
                   fieldPath: metadata.namespace
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 Then create an `HTTPRoute` that uses a `HTTPRequestMirrorFilter` to send requests to the original
@@ -141,6 +144,7 @@ service from the quickstart, and mirror request to the service that was just dep
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -171,6 +175,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -204,6 +209,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -266,6 +272,7 @@ When an `HTTPRoute` has multiple `backendRefs` and an `HTTPRequestMirrorFilter`,
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -300,6 +307,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -337,6 +345,7 @@ spec:
       name: backend-3
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -346,6 +355,7 @@ Multiple `HTTPRequestMirrorFilters` are not supported on the same `HTTPRoute` `r
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -382,6 +392,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -421,6 +432,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-response-headers.md b/site/content/en/latest/tasks/traffic/http-response-headers.md
index df6f4369fd2..60121674b00 100644
--- a/site/content/en/latest/tasks/traffic/http-response-headers.md
+++ b/site/content/en/latest/tasks/traffic/http-response-headers.md
@@ -24,6 +24,7 @@ value of the header in the response.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -54,6 +55,7 @@ spec:
           value: "foo"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -87,6 +89,7 @@ spec:
         - name: "add-header"
           value: "foo"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -144,6 +147,7 @@ filter.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -174,6 +178,7 @@ spec:
           value: "foo"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -207,6 +212,7 @@ spec:
         - name: "set-header"
           value: "foo"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -253,6 +259,7 @@ filter.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -281,6 +288,7 @@ spec:
         - "remove-header"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -312,6 +320,7 @@ spec:
         remove:
         - "remove-header"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -353,6 +362,7 @@ Headers can be added/set/removed in a single filter on the same HTTPRoute and th
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -388,6 +398,7 @@ spec:
         - "removed-header"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -426,6 +437,7 @@ spec:
         remove:
         - "removed-header"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-routing.md b/site/content/en/latest/tasks/traffic/http-routing.md
index 94a492d51da..aba57adc9b2 100644
--- a/site/content/en/latest/tasks/traffic/http-routing.md
+++ b/site/content/en/latest/tasks/traffic/http-routing.md
@@ -133,6 +133,7 @@ For this feature to work please make sure
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -196,6 +197,7 @@ spec:
             value: /
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -262,6 +264,7 @@ spec:
             type: PathPrefix
             value: /
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-timeouts.md b/site/content/en/latest/tasks/traffic/http-timeouts.md
index 322707d823d..3ab863608ce 100644
--- a/site/content/en/latest/tasks/traffic/http-timeouts.md
+++ b/site/content/en/latest/tasks/traffic/http-timeouts.md
@@ -24,6 +24,7 @@ We configure the backend to delay responses by 3 seconds, then we set the reques
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -52,6 +53,7 @@ spec:
       request: "4s"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -83,6 +85,7 @@ spec:
     timeouts:
       request: "4s"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -102,6 +105,7 @@ Then we set the request timeout to 2 seconds. In this case, Envoy Gateway will r
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -130,6 +134,7 @@ spec:
       request: "2s"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -161,6 +166,7 @@ spec:
     timeouts:
       request: "2s"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-traffic-splitting.md b/site/content/en/latest/tasks/traffic/http-traffic-splitting.md
index e2ec77dd3ab..06e4a236589 100644
--- a/site/content/en/latest/tasks/traffic/http-traffic-splitting.md
+++ b/site/content/en/latest/tasks/traffic/http-traffic-splitting.md
@@ -17,6 +17,7 @@ When a single backendRef is configured in a HTTPRoute, it will receive 100% of t
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -40,6 +41,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -66,6 +68,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -119,6 +122,7 @@ First, create a second instance of the example app from the quickstart:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 ---
@@ -176,6 +180,7 @@ spec:
                   fieldPath: metadata.namespace
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -235,6 +240,7 @@ spec:
                 fieldRef:
                   fieldPath: metadata.namespace
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -242,6 +248,7 @@ Then create an HTTPRoute that uses both the app from the quickstart and the seco
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -269,6 +276,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -299,6 +307,7 @@ spec:
       name: backend-2
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -346,6 +355,7 @@ backend-2 service.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -375,6 +385,7 @@ spec:
       weight: 2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -407,6 +418,7 @@ spec:
       port: 3000
       weight: 2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -428,6 +440,7 @@ with status code `500`.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -457,6 +470,7 @@ spec:
       weight: 2
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -489,6 +503,7 @@ spec:
       port: 9000
       weight: 2
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http-urlrewrite.md b/site/content/en/latest/tasks/traffic/http-urlrewrite.md
index 2e6ec3f0612..0ebb7595c22 100644
--- a/site/content/en/latest/tasks/traffic/http-urlrewrite.md
+++ b/site/content/en/latest/tasks/traffic/http-urlrewrite.md
@@ -17,6 +17,7 @@ You can configure to rewrite the prefix in the url like below. In this example,
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -43,6 +44,7 @@ spec:
         port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -72,6 +74,7 @@ spec:
       - name: backend
         port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -149,6 +152,7 @@ You can configure to rewrite the fullpath in the url like below. In this example
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -176,6 +180,7 @@ spec:
         port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -206,6 +211,7 @@ spec:
       - name: backend
         port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -277,6 +283,7 @@ You can configure to rewrite the hostname like below. In this example, any reque
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -302,6 +309,7 @@ spec:
         port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -330,6 +338,7 @@ spec:
       - name: backend
         port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/http3.md b/site/content/en/latest/tasks/traffic/http3.md
index a55e6c58e24..502c37496b6 100644
--- a/site/content/en/latest/tasks/traffic/http3.md
+++ b/site/content/en/latest/tasks/traffic/http3.md
@@ -61,6 +61,7 @@ Apply the following ClientTrafficPolicy to enable HTTP3
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -76,6 +77,7 @@ spec:
     namespace: default
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -94,6 +96,7 @@ spec:
     name: eg
     namespace: default
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/local-rate-limit.md b/site/content/en/latest/tasks/traffic/local-rate-limit.md
index afda7d125a6..37fb5590a44 100644
--- a/site/content/en/latest/tasks/traffic/local-rate-limit.md
+++ b/site/content/en/latest/tasks/traffic/local-rate-limit.md
@@ -38,6 +38,7 @@ with a value set to `one`.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -63,6 +64,7 @@ spec:
           unit: Hour
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -91,6 +93,7 @@ spec:
           requests: 3
           unit: Hour
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -98,6 +101,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -121,6 +125,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -147,6 +152,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -250,6 +256,7 @@ This example shows you how to rate limit all requests matching the HTTPRoute rul
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -271,6 +278,7 @@ spec:
           unit: Hour
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -295,6 +303,7 @@ spec:
           requests: 3
           unit: Hour
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -302,6 +311,7 @@ spec:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1
@@ -325,6 +335,7 @@ spec:
       port: 3000
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -351,6 +362,7 @@ spec:
       name: backend
       port: 3000
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/retry.md b/site/content/en/latest/tasks/traffic/retry.md
index d5ab467a38b..4de8f604f96 100644
--- a/site/content/en/latest/tasks/traffic/retry.md
+++ b/site/content/en/latest/tasks/traffic/retry.md
@@ -48,6 +48,7 @@ The request will be retried 5 times with a 100ms base interval and a 10s maximum
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.envoyproxy.io/v1alpha1
@@ -75,6 +76,7 @@ spec:
         - retriable-status-codes
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -105,6 +107,7 @@ spec:
         - connect-failure
         - retriable-status-codes
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/routing-outside-kubernetes.md b/site/content/en/latest/tasks/traffic/routing-outside-kubernetes.md
index e2acfbfc393..7720d899954 100644
--- a/site/content/en/latest/tasks/traffic/routing-outside-kubernetes.md
+++ b/site/content/en/latest/tasks/traffic/routing-outside-kubernetes.md
@@ -16,6 +16,7 @@ Define a Service and EndpointSlice that represents https://httpbin.org
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -47,6 +48,7 @@ endpoints:
   - "httpbin.org"
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -81,6 +83,7 @@ endpoints:
 - addresses:
   - "httpbin.org"
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -103,6 +106,7 @@ Add a [TLSRoute][] that can route incoming traffic to the above backend that we
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -119,6 +123,7 @@ spec:
       port: 443
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -138,6 +143,7 @@ spec:
     - name: httpbin
       port: 443
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/tcp-routing.md b/site/content/en/latest/tasks/traffic/tcp-routing.md
index 878ed917e50..d36f145e266 100644
--- a/site/content/en/latest/tasks/traffic/tcp-routing.md
+++ b/site/content/en/latest/tasks/traffic/tcp-routing.md
@@ -25,6 +25,7 @@ Install the GatewayClass and a `tcp-gateway` Gateway first.
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 kind: GatewayClass
@@ -55,6 +56,7 @@ spec:
       - kind: TCPRoute
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -88,6 +90,7 @@ spec:
       kinds:
       - kind: TCPRoute
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -95,6 +98,7 @@ Install two services `foo` and `bar`, which are bound to `backend-1` and `backen
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: v1
@@ -194,6 +198,7 @@ spec:
               value: bar
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -296,6 +301,7 @@ spec:
             - name: SERVICE_NAME
               value: bar
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
@@ -303,6 +309,7 @@ Install two TCPRoutes `tcp-app-1` and `tcp-app-2` with different `sectionName`:
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -332,6 +339,7 @@ spec:
       port: 3002
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resources to your cluster:
@@ -364,6 +372,7 @@ spec:
     - name: bar
       port: 3002
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}
 
diff --git a/site/content/en/latest/tasks/traffic/udp-routing.md b/site/content/en/latest/tasks/traffic/udp-routing.md
index d20287476b9..b9d8e379282 100644
--- a/site/content/en/latest/tasks/traffic/udp-routing.md
+++ b/site/content/en/latest/tasks/traffic/udp-routing.md
@@ -58,6 +58,7 @@ Create a UDPRoute resource to route UDP traffic received on Gateway port 5300 to
 
 {{< tabpane text=true >}}
 {{% tab header="Apply from stdin" %}}
+
 ```shell
 cat <<EOF | kubectl apply -f -
 apiVersion: gateway.networking.k8s.io/v1alpha2
@@ -74,6 +75,7 @@ spec:
           port: 53
 EOF
 ```
+
 {{% /tab %}}
 {{% tab header="Apply from file" %}}
 Save and apply the following resource to your cluster:
@@ -93,6 +95,7 @@ spec:
         - name: coredns
           port: 53
 ```
+
 {{% /tab %}}
 {{< /tabpane >}}