apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway2/passthrough.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway2~istio-autogenerated-k8s-gateway~passthrough
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/*'
    port:
      name: default
      number: 34000
      protocol: TLS
    tls: {}
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/passthrough.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~passthrough
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/*'
    port:
      name: default
      number: 34000
      protocol: TLS
    tls: {}
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/domain.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      caCertCredentialName: configmap://istio-system/my-cert-http-cacert
      credentialName: kubernetes-gateway://istio-system/my-cert-http
      mode: MUTUAL
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-istio-builtin.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-istio-builtin
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/builtin.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      credentialName: builtin://
      mode: SIMPLE
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-istio-mtls.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-istio-mtls
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/egress.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      mode: ISTIO_MUTUAL
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-mtls.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-mtls
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/other.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      caCertCredentialName: configmap://istio-system/my-cert-http-cacert
      credentialName: kubernetes-gateway://istio-system/my-cert-http
      mode: MUTUAL
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-mtls-frontendvalidation-configmap.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-mtls-frontendvalidation-configmap
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/frontendvalidation-configmap.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      caCertCredentialName: configmap://istio-system/my-cert-http-cacert
      credentialName: kubernetes-gateway://istio-system/my-cert-http
      mode: MUTUAL
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-mtls-frontendvalidation-secret.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-mtls-frontendvalidation-secret
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/frontendvalidation-secret.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      caCertCredentialName: configmap://istio-system/my-cert-http-cacert
      credentialName: kubernetes-gateway://istio-system/my-cert-http
      mode: MUTUAL
---
apiVersion: networking.istio.io/v1
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: istio-ingressgateway.istio-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/terminate-multi.istio-system
    internal.istio.io/service-account-name: ""
  name: gateway~istio-autogenerated-k8s-gateway~terminate-multi
  namespace: istio-system
spec:
  servers:
  - hosts:
    - '*/domainmulti.example'
    port:
      name: default
      number: 34000
      protocol: HTTPS
    tls:
      caCertCredentialName: configmap://istio-system/my-cert-http-cacert
      credentialNames:
      - kubernetes-gateway://istio-system/my-cert-http
      - kubernetes-gateway://istio-system/my-cert-http2
      mode: MUTUAL
---
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: HTTPRoute/http.default
    internal.istio.io/route-semantics: gateway
  name: istio-system~gateway~istio-autogenerated-k8s-gateway~terminate~domain.example
  namespace: default
spec:
  gateways:
  - istio-system/gateway~istio-autogenerated-k8s-gateway~terminate
  hosts:
  - domain.example
  http:
  - name: default.http.0
    route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 80
---
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/tls-match.default
    internal.istio.io/route-semantics: gateway
  name: tls-match~tls~0~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  gateways:
  - istio-system/gateway~istio-autogenerated-k8s-gateway~passthrough
  hosts:
  - foo.com
  tls:
  - match:
    - sniHosts:
      - foo.com
    route:
    - destination:
        host: httpbin-foo.default.svc.domain.suffix
        port:
          number: 443
---
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/tls.default
    internal.istio.io/route-semantics: gateway
  name: tls~tls~0~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  gateways:
  - istio-system/gateway2~istio-autogenerated-k8s-gateway~passthrough
  hosts:
  - '*'
  tls:
  - match:
    - sniHosts:
      - '*'
    route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 443
---
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: TLSRoute/tls.default
    internal.istio.io/route-semantics: gateway
  name: tls~tls~1~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  gateways:
  - istio-system/gateway~istio-autogenerated-k8s-gateway~passthrough
  hosts:
  - '*'
  tls:
  - match:
    - sniHosts:
      - '*'
    route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 443
---
