istio.io/istio@v0.0.0-20240520182934-d79c90f27776/tests/integration/pilot/testdata/tunneling/gateway/tls/passthrough/virtual-service.tmpl.yaml (about)

     1  apiVersion: networking.istio.io/v1alpha3
     2  kind: VirtualService
     3  metadata:
     4    name: mesh-route-outbound-traffic-to-external-svc-via-egress-gw
     5  spec:
     6    hosts:
     7    - external.{{ .externalNamespace }}.svc.cluster.local
     8    gateways:
     9    - mesh
    10    tcp:
    11    - match:
    12      - port: {{ .externalSvcTcpPort }}
    13      route:
    14      - destination:
    15          host: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}.{{ .EgressGatewayServiceNamespace | default "istio-system" }}.svc.cluster.local
    16          subset: originate-tls-for-plain-traffic
    17          port:
    18            number: 443
    19    tls:
    20    - match:
    21      - port: {{ .externalSvcTlsPort }}
    22        sniHosts:
    23        - external.{{ .externalNamespace }}.svc.cluster.local
    24      route:
    25      - destination:
    26          host: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}.{{ .EgressGatewayServiceNamespace | default "istio-system" }}.svc.cluster.local
    27          port:
    28            number: 443
    29  ---
    30  apiVersion: networking.istio.io/v1alpha3
    31  kind: VirtualService
    32  metadata:
    33    name: egress-gw-route-outbound-traffic-to-external-svc-via-external-forward-proxy
    34  spec:
    35    hosts:
    36    - external.{{ .externalNamespace }}.svc.cluster.local
    37    gateways:
    38    - {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
    39    tls:
    40    - match:
    41      - gateways:
    42        - {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
    43        port: 443
    44        sniHosts:
    45        - external.{{ .externalNamespace }}.svc.cluster.local
    46      route:
    47      - destination:
    48          host: external-forward-proxy.{{ .externalNamespace }}.svc.cluster.local
    49          subset: external-svc-tls
    50          port:
    51            number: {{ .forwardProxyPort }}