Files
higress/pkg/ingress/kube/gateway/istio/testdata/tls.yaml.golden
2025-11-26 10:15:00 +08:00

285 lines
7.8 KiB
Plaintext

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/passthrough.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-passthrough
namespace: higress-system
spec:
servers:
- hosts:
- '*/*'
port:
name: default
number: 34000
protocol: TLS
tls: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate
namespace: higress-system
spec:
servers:
- hosts:
- '*/domain.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialName: kubernetes-gateway://higress-system/my-cert-http
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-istio-builtin.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-istio-builtin
namespace: higress-system
spec:
servers:
- hosts:
- '*/builtin.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
mode: SIMPLE
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-istio-mtls.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-istio-mtls
namespace: higress-system
spec:
servers:
- hosts:
- '*/egress.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
mode: SIMPLE
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-mtls.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-mtls
namespace: higress-system
spec:
servers:
- hosts:
- '*/other.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialName: kubernetes-gateway://higress-system/my-cert-http
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-mtls-frontendvalidation-configmap.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-mtls-frontendvalidation-configmap
namespace: higress-system
spec:
servers:
- hosts:
- '*/frontendvalidation-configmap.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialName: kubernetes-gateway://higress-system/my-cert-http
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-mtls-frontendvalidation-secret.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-mtls-frontendvalidation-secret
namespace: higress-system
spec:
servers:
- hosts:
- '*/frontendvalidation-secret.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialName: kubernetes-gateway://higress-system/my-cert-http
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway/terminate-multi.higress-system
internal.istio.io/service-account-name: ""
name: gateway-istio-autogenerated-k8s-gateway-terminate-multi
namespace: higress-system
spec:
servers:
- hosts:
- '*/domainmulti.example'
port:
name: default
number: 34000
protocol: HTTPS
tls:
credentialNames:
- kubernetes-gateway://higress-system/my-cert-http
- kubernetes-gateway://higress-system/my-cert-http2
mode: MUTUAL
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
annotations:
internal.istio.io/gateway-semantics: gateway
internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
internal.istio.io/parents: Gateway/gateway2/passthrough.higress-system
internal.istio.io/service-account-name: ""
name: gateway2-istio-autogenerated-k8s-gateway-passthrough
namespace: higress-system
spec:
servers:
- hosts:
- '*/*'
port:
name: default
number: 34000
protocol: TLS
tls: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: HTTPRoute/http.default
internal.istio.io/route-semantics: gateway
name: higress-system~gateway-istio-autogenerated-k8s-gateway-terminate~domain.example
namespace: default
spec:
gateways:
- higress-system/gateway-istio-autogenerated-k8s-gateway-terminate
hosts:
- domain.example
http:
- name: default/http
route:
- destination:
host: httpbin.default.svc.domain.suffix
port:
number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: TLSRoute/tls-match.default
internal.istio.io/route-semantics: gateway
name: tls-match-tls-0-istio-autogenerated-k8s-gateway
namespace: default
spec:
gateways:
- higress-system/gateway-istio-autogenerated-k8s-gateway-passthrough
hosts:
- foo.com
tls:
- match:
- sniHosts:
- foo.com
route:
- destination:
host: httpbin-foo.default.svc.domain.suffix
port:
number: 443
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: TLSRoute/tls.default
internal.istio.io/route-semantics: gateway
name: tls-tls-0-istio-autogenerated-k8s-gateway
namespace: default
spec:
gateways:
- higress-system/gateway-istio-autogenerated-k8s-gateway-passthrough
hosts:
- '*'
tls:
- match:
- sniHosts:
- '*'
route:
- destination:
host: httpbin.default.svc.domain.suffix
port:
number: 443
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
annotations:
internal.istio.io/parents: TLSRoute/tls.default
internal.istio.io/route-semantics: gateway
name: tls-tls-1-istio-autogenerated-k8s-gateway
namespace: default
spec:
gateways:
- higress-system/gateway2-istio-autogenerated-k8s-gateway-passthrough
hosts:
- '*'
tls:
- match:
- sniHosts:
- '*'
route:
- destination:
host: httpbin.default.svc.domain.suffix
port:
number: 443
---