apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: annotations: internal.istio.io/gateway-semantics: gateway internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix internal.istio.io/parents: Gateway/gateway/echo.higress-system internal.istio.io/service-account-name: "" name: gateway-istio-autogenerated-k8s-gateway-echo namespace: higress-system spec: servers: - hosts: - '*/*' port: name: default number: 34001 protocol: TCP --- apiVersion: networking.istio.io/v1alpha3 kind: Gateway metadata: annotations: internal.istio.io/gateway-semantics: gateway internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix internal.istio.io/parents: Gateway/gateway/my-svc.higress-system internal.istio.io/service-account-name: "" name: gateway-istio-autogenerated-k8s-gateway-my-svc namespace: higress-system spec: servers: - hosts: - '*/*' port: name: default number: 34000 protocol: TCP --- apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: annotations: internal.istio.io/parents: TCPRoute/allowed-my-svc.higress-system internal.istio.io/route-semantics: gateway name: allowed-my-svc-tcp-0-istio-autogenerated-k8s-gateway namespace: higress-system spec: gateways: - higress-system/gateway-istio-autogenerated-k8s-gateway-my-svc hosts: - '*' tcp: - route: - destination: host: my-svc.service.svc.domain.suffix port: number: 34000 --- apiVersion: networking.istio.io/v1alpha3 kind: VirtualService metadata: annotations: internal.istio.io/parents: TCPRoute/not-allowed-echo.higress-system internal.istio.io/route-semantics: gateway name: not-allowed-echo-tcp-0-istio-autogenerated-k8s-gateway namespace: higress-system spec: gateways: - higress-system/gateway-istio-autogenerated-k8s-gateway-echo hosts: - '*' tcp: - route: - destination: {} ---