istio.io/istio@v0.0.0-20240520182934-d79c90f27776/tests/integration/pilot/testdata/tunneling/gateway/tls/istio-mutual/virtual-service.tmpl.yaml (about)

     1  apiVersion: networking.istio.io/v1alpha3
     2  kind: VirtualService
     3  metadata:
     4    name: mesh-route-outbound-traffic-to-external-svc-via-egress-gw
     5  spec:
     6    hosts:
     7    - external.{{ .externalNamespace }}.svc.cluster.local
     8    gateways:
     9    - mesh
    10    tcp:
    11    - match:
    12      - port: {{ .externalSvcTcpPort }}
    13      route:
    14      - destination:
    15          host: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}.{{ .EgressGatewayServiceNamespace | default "istio-system" }}.svc.cluster.local
    16          port:
    17            number: 80
    18    tls:
    19    - match:
    20      - port: {{ .externalSvcTlsPort }}
    21        sniHosts:
    22        - external.{{ .externalNamespace }}.svc.cluster.local
    23      route:
    24      - destination:
    25          host: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}.{{ .EgressGatewayServiceNamespace | default "istio-system" }}.svc.cluster.local
    26          port:
    27            number: 443
    28  ---
    29  apiVersion: networking.istio.io/v1alpha3
    30  kind: VirtualService
    31  metadata:
    32    name: egress-gw-route-outbound-traffic-to-external-svc-via-external-forward-proxy
    33  spec:
    34    hosts:
    35    - external.{{ .externalNamespace }}.svc.cluster.local
    36    gateways:
    37    - {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
    38    tcp:
    39    - match:
    40      - port: 80
    41      route:
    42      - destination:
    43          host: external-forward-proxy.{{ .externalNamespace }}.svc.cluster.local
    44          subset: external-svc-tcp
    45          port:
    46            number: {{ .forwardProxyPort }}
    47    - match:
    48      - port: 443
    49      route:
    50      - destination:
    51          host: external-forward-proxy.{{ .externalNamespace }}.svc.cluster.local
    52          subset: external-svc-tls
    53          port:
    54            number: {{ .forwardProxyPort }}