istio

1
apiVersion: gateway.networking.k8s.io/v1beta1
2
kind: GatewayClass
3
metadata:
4
  name: istio
5
spec:
6
  controllerName: istio.io/gateway-controller
7
---
8
apiVersion: gateway.networking.k8s.io/v1beta1
9
kind: Gateway
10
metadata:
11
  name: gateway
12
  namespace: istio-system
13
spec:
14
  addresses:
15
  - value: istio-ingressgateway
16
    type: Hostname
17
  gatewayClassName: istio
18
  listeners:
19
  - name: default
20
    hostname: "*.domain.example"
21
    port: 80
22
    protocol: HTTP
23
    allowedRoutes:
24
      namespaces:
25
        from: All
26
---
27
apiVersion: gateway.networking.k8s.io/v1beta1
28
kind: Gateway
29
metadata:
30
  name: invalid-service
31
  namespace: istio-system
32
spec:
33
  gatewayClassName: istio
34
  listeners:
35
  - name: default
36
    hostname: "*.example"
37
    port: 80
38
    protocol: HTTP
39
  addresses:
40
  - value: fake-service.com
41
    type: Hostname
42
---
43
apiVersion: gateway.networking.k8s.io/v1beta1
44
kind: Gateway
45
metadata:
46
  name: target-port-reference
47
  namespace: istio-system
48
spec:
49
  addresses:
50
  - value: istio-ingressgateway
51
    type: Hostname
52
  gatewayClassName: istio
53
  listeners:
54
  - name: default
55
    hostname: "*.example"
56
    port: 8080 # Test service has port 80 with targetPort 8080
57
    protocol: HTTP
58
---
59
apiVersion: gateway.networking.k8s.io/v1beta1
60
kind: Gateway
61
metadata:
62
  name: invalid-gateway-address
63
  namespace: invalid-gateway-address
64
spec:
65
  gatewayClassName: istio
66
  addresses:
67
  - value: 1.2.3.4
68
    type: istio.io/FakeType
69
  listeners:
70
  - name: default
71
    hostname: "*.domain.example"
72
    port: 80
73
    protocol: HTTP
74
---
75
apiVersion: gateway.networking.k8s.io/v1beta1
76
kind: Gateway
77
metadata:
78
  name: invalid-cert-kind
79
  namespace: istio-system
80
spec:
81
  addresses:
82
  - value: istio-ingressgateway
83
    type: Hostname
84
  gatewayClassName: istio
85
  listeners:
86
  - name: default
87
    hostname: "domain.example"
88
    port: 34000
89
    protocol: HTTPS
90
    tls:
91
      mode: Terminate
92
      certificateRefs:
93
      - name: my-cert-http
94
        group: core
95
        kind: unknown
96
---
97
apiVersion: gateway.networking.k8s.io/v1beta1
98
kind: Gateway
99
metadata:
100
  name: invalid-cert-notfound
101
  namespace: istio-system
102
spec:
103
  addresses:
104
  - value: istio-ingressgateway
105
    type: Hostname
106
  gatewayClassName: istio
107
  listeners:
108
  - name: default
109
    hostname: "domain.example"
110
    port: 34001
111
    protocol: HTTPS
112
    tls:
113
      mode: Terminate
114
      certificateRefs:
115
      - name: nonexistent
116
        kind: Secret
117
---
118
apiVersion: gateway.networking.k8s.io/v1beta1
119
kind: Gateway
120
metadata:
121
  name: invalid-cert-malformed
122
  namespace: istio-system
123
spec:
124
  addresses:
125
  - value: istio-ingressgateway
126
    type: Hostname
127
  gatewayClassName: istio
128
  listeners:
129
  - name: default
130
    hostname: "domain.example"
131
    port: 34002
132
    protocol: HTTPS
133
    tls:
134
      mode: Terminate
135
      certificateRefs:
136
      - name: malformed
137
        kind: Secret
138
---
139
apiVersion: gateway.networking.k8s.io/v1beta1
140
kind: HTTPRoute
141
metadata:
142
  name: invalid-backendRef-kind
143
  namespace: default
144
spec:
145
  parentRefs:
146
  - name: gateway
147
    namespace: istio-system
148
  hostnames: ["first.domain.example"]
149
  rules:
150
  - backendRefs:
151
    - name: httpbin
152
      kind: GcsBucket
153
---
154
apiVersion: gateway.networking.k8s.io/v1beta1
155
kind: HTTPRoute
156
metadata:
157
  name: invalid-backendRef-notfound
158
  namespace: default
159
spec:
160
  parentRefs:
161
  - name: gateway
162
    namespace: istio-system
163
  hostnames: ["second.domain.example"]
164
  rules:
165
  - backendRefs:
166
    - name: nonexistent
167
      port: 80
168
---
169
apiVersion: gateway.networking.k8s.io/v1beta1
170
kind: HTTPRoute
171
metadata:
172
  name: invalid-backendRef-mixed
173
  namespace: default
174
spec:
175
  parentRefs:
176
  - name: gateway
177
    namespace: istio-system
178
  hostnames: ["third.domain.example"]
179
  rules:
180
  - backendRefs:
181
    - name: nonexistent
182
      port: 80
183
      weight: 1
184
    - name: httpbin
185
      port: 80
186
      weight: 1
187
    - name: httpbin
188
      kind: GcsBucket
189
      weight: 1
190
---
191
apiVersion: gateway.networking.k8s.io/v1beta1
192
kind: HTTPRoute
193
metadata:
194
  name: invalid-mirror
195
  namespace: default
196
spec:
197
  parentRefs:
198
  - name: gateway
199
    namespace: istio-system
200
  rules:
201
  - filters:
202
    - type: RequestMirror
203
      requestMirror:
204
        backendRef:
205
          kind: no-support
206
          name: httpbin-mirror
207
          port: 80
208
    backendRefs:
209
    - name: httpbin
210
      port: 80
211
---
212
apiVersion: gateway.networking.k8s.io/v1beta1
213
kind: HTTPRoute
214
metadata:
215
  name: no-backend
216
  namespace: default
217
spec:
218
  parentRefs:
219
  - group: ""
220
    kind: Service
221
    name: httpbin
222
  rules:
223
  - filters:
224
    - type: RequestMirror
225
      requestMirror:
226
        backendRef:
227
          name: httpbin
228
          port: 80
229
---
230
apiVersion: gateway.networking.k8s.io/v1beta1
231
kind: HTTPRoute
232
metadata:
233
  name: invalid-parentRef-port
234
  namespace: default
235
spec:
236
  parentRefs:
237
  - name: gateway
238
    namespace: istio-system
239
    port: 1234
240
  hostnames: ["first.domain.example"]
241
  rules:
242
  - backendRefs:
243
    - name: httpbin
244
      port: 80
245
      weight: 1
246
---
247
apiVersion: gateway.networking.k8s.io/v1beta1
248
kind: HTTPRoute
249
metadata:
250
  name: invalid-sectionname-port
251
  namespace: default
252
spec:
253
  parentRefs:
254
  - name: gateway
255
    namespace: istio-system
256
    sectionName: fake
257
  hostnames: ["first.domain.example"]
258
  rules:
259
  - backendRefs:
260
    - name: httpbin
261
      port: 80
262
      weight: 1
263