apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/parent-gateway/foo.istio-system
    internal.istio.io/service-account-name: ""
  name: parent-gateway~istio-autogenerated-k8s-gateway~foo
  namespace: istio-system
spec:
  servers:
  - hosts:
    - istio-system/foo.com
    port:
      name: default
      number: 80
      protocol: HTTP
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parent-namespace: istio-system
    internal.istio.io/parents: XListenerSet/single-entry-http/first.ns1
    internal.istio.io/service-account-name: single-entry-http-istio
  name: single-entry-http~istio-autogenerated-k8s-gateway~first
  namespace: ns1
spec:
  servers:
  - hosts:
    - ns1/first.foo.com
    port:
      name: default
      number: 80
      protocol: HTTP
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parent-namespace: istio-system
    internal.istio.io/parents: XListenerSet/cross-ns-cert/allowed.ns2
    internal.istio.io/service-account-name: cross-ns-cert-istio
  name: cross-ns-cert~istio-autogenerated-k8s-gateway~allowed
  namespace: ns2
spec:
  servers:
  - hosts:
    - ns2/allowed.foo.com
    port:
      name: default
      number: 443
      protocol: HTTPS
    tls:
      credentialName: kubernetes-gateway://ns3/ns3-cert
      mode: SIMPLE
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parent-namespace: istio-system
    internal.istio.io/parents: XListenerSet/same-ns-cert/second.ns2
    internal.istio.io/service-account-name: same-ns-cert-istio
  name: same-ns-cert~istio-autogenerated-k8s-gateway~second
  namespace: ns2
spec:
  servers:
  - hosts:
    - ns2/second.foo.com
    port:
      name: default
      number: 443
      protocol: HTTPS
    tls:
      credentialName: kubernetes-gateway://ns2/ns2-cert
      mode: SIMPLE
---
