higress/pkg/ingress/kube/gateway/istio/testdata/backend-tls-policy.yaml.golden

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  annotations:
    internal.istio.io/gateway-semantics: gateway
    internal.istio.io/gateway-service: higress-gateway.higress-system.svc.domain.suffix
    internal.istio.io/parents: Gateway/gateway/default.higress-system
    internal.istio.io/service-account-name: ""
  name: gateway-istio-autogenerated-k8s-gateway-default
  namespace: higress-system
spec:
  servers:
  - hosts:
    - higress-system/*.domain.example
    port:
      name: default
      number: 80
      protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  annotations:
    internal.istio.io/parents: HTTPRoute/http.higress-system
    internal.istio.io/route-semantics: gateway
  name: higress-system~gateway-istio-autogenerated-k8s-gateway-default~*
  namespace: higress-system
spec:
  gateways:
  - higress-system/gateway-istio-autogenerated-k8s-gateway-default
  hosts:
  - '*'
  http:
  - name: http
    route:
    - destination: {}
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.tls-upstream-echo-https-merged-rules
  name: echo-https~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: echo-https.default.svc.domain.suffix
  trafficPolicy:
    portLevelSettings:
    - port:
        number: 443
      tls:
        credentialName: configmap://default/auth-cert
        mode: SIMPLE
        sni: auth.example.com
    tls:
      credentialName: configmap://default/auth-cert
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.tls-upstream-echo
  name: echo~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: echo.default.svc.domain.suffix
  trafficPolicy:
    tls:
      credentialName: configmap://default/auth-cert
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.tls-external-service-https
  name: external-service~external-example-com~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: external.example.com
  trafficPolicy:
    portLevelSettings:
    - port:
        number: 443
      tls:
        mode: SIMPLE
        sni: external.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.bad-configmap-type
  name: foo-svc~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: foo-svc.default.svc.domain.suffix
  trafficPolicy:
    tls:
      credentialName: invalid://
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.malformed-configmap
  name: httpbin-other~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: httpbin-other.default.svc.domain.suffix
  trafficPolicy:
    tls:
      credentialName: invalid://
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.unknown-configmap
  name: httpbin-second~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: httpbin-second.default.svc.domain.suffix
  trafficPolicy:
    tls:
      credentialName: invalid://
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.existing-status
  name: httpbin~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: httpbin.default.svc.domain.suffix
  trafficPolicy:
    tls:
      credentialName: configmap://default/auth-cert
      mode: SIMPLE
      sni: auth.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.multi-host-service-entry,BackendTLSPolicy/default.multi-host-service-entry-section-name
  name: multi-host-service~api-example-com~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: api.example.com
  trafficPolicy:
    portLevelSettings:
    - port:
        number: 8443
      tls:
        credentialName: configmap://default/auth-cert
        mode: SIMPLE
        sni: api.example.com
    tls:
      mode: SIMPLE
      sni: cdn.example.com
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  annotations:
    internal.istio.io/parents: BackendTLSPolicy/default.multi-host-service-entry,BackendTLSPolicy/default.multi-host-service-entry-section-name
  name: multi-host-service~cdn-example-com~istio-autogenerated-k8s-gateway
  namespace: default
spec:
  host: cdn.example.com
  trafficPolicy:
    portLevelSettings:
    - port:
        number: 8443
      tls:
        credentialName: configmap://default/auth-cert
        mode: SIMPLE
        sni: api.example.com
    tls:
      mode: SIMPLE
      sni: cdn.example.com
---