istio

1
apiVersion: gateway.networking.k8s.io/v1beta1
2
kind: GatewayClass
3
metadata:
4
  name: istio
5
spec:
6
  controllerName: istio.io/gateway-controller
7
---
8
apiVersion: gateway.networking.k8s.io/v1beta1
9
kind: Gateway
10
metadata:
11
  name: gateway
12
  namespace: istio-system
13
spec:
14
  addresses:
15
  - value: istio-ingressgateway
16
    type: Hostname
17
  gatewayClassName: istio
18
  listeners:
19
  - name: cross
20
    hostname: "cert1.domain.example"
21
    port: 443
22
    protocol: HTTPS
23
    allowedRoutes:
24
      namespaces:
25
        from: Selector
26
        selector:
27
          matchLabels:
28
            kubernetes.io/metadata.name: "cert"
29
    tls:
30
      mode: Terminate
31
      certificateRefs:
32
      - name: cert
33
        namespace: cert
34
---
35
apiVersion: gateway.networking.k8s.io/v1beta1
36
kind: ReferenceGrant
37
metadata:
38
  name: allow-cert
39
  namespace: cert
40
spec:
41
  from:
42
  - group: gateway.networking.k8s.io
43
    kind: Gateway
44
    namespace: istio-system
45
  to:
46
    - group: ""
47
      kind: Secret
48
---
49
apiVersion: gateway.networking.k8s.io/v1beta1
50
kind: HTTPRoute
51
metadata:
52
  name: http
53
  namespace: cert
54
spec:
55
  parentRefs:
56
  - name: gateway
57
    namespace: istio-system
58
  hostnames: ["cert1.domain.example"]
59
  rules:
60
  - backendRefs:
61
    - name: httpbin
62
      port: 80
63