"unhealthyPodEvictionPolicy": "UnhealthyPodEvictionPolicy defines the criteria for when unhealthy pods should be considered for eviction. Current implementation considers healthy pods, as pods that have status.conditions item with type=\"Ready\",status=\"True\".\n\nValid policies are IfHealthyBudget and AlwaysAllow. If no policy is specified, the default behavior will be used, which corresponds to the IfHealthyBudget policy.\n\nIfHealthyBudget policy means that running pods (status.phase=\"Running\"), but not yet...

    hostname: "*.example"
    port: 8080 # Test service has port 80 with targetPort 8080
    protocol: HTTP
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: invalid-gateway-address
  namespace: invalid-gateway-address
spec:
  gatewayClassName: istio
  addresses:
  - value: 1.2.3.4
    type: istio.io/FakeType
  listeners:
  - name: default
    hostname: "*.domain.example"
    port: 80

    internal.istio.io/parents: HTTPRoute/invalid-backendRef-kind.default
    internal.istio.io/route-semantics: gateway
  creationTimestamp: null
  name: invalid-backendRef-kind-0-istio-autogenerated-k8s-gateway
  namespace: default
spec:
  gateways:
  - istio-system/gateway-istio-autogenerated-k8s-gateway-default
  hosts:
  - first.domain.example
  http:
  - name: default.invalid-backendRef-kind.0
    route:

apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
  name: invalid-method
spec:
  rules:
  - matches:

iptables -t nat -N ISTIO_INBOUND
iptables -t nat -N ISTIO_REDIRECT
iptables -t nat -N ISTIO_IN_REDIRECT
iptables -t nat -N ISTIO_OUTPUT
iptables -t mangle -A PREROUTING -m conntrack --ctstate INVALID -j DROP
iptables -t nat -A ISTIO_INBOUND -p tcp --dport 15008 -j RETURN
iptables -t nat -A ISTIO_REDIRECT -p tcp -j REDIRECT --to-ports 15001
iptables -t nat -A ISTIO_IN_REDIRECT -p tcp -j REDIRECT --to-ports 15006
iptables -t nat -A OUTPUT -p tcp -j ISTIO_OUTPUT

apiVersion: gateway.networking.k8s.io/v1beta1
kind: GatewayClass
metadata:
  name: invalid-controller
spec:

apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
  name: invalid-hostname
spec:
  hostnames:
  - http://a<
  rules:
  - backendRefs:

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: invalid-addresses
spec:
  gatewayClassName: acme-lb
  addresses:
  - value: 1200:0000:::AB00:1234:0000:2552:7777:1313
  - value: 21DA:D3:0:2F3B:2AY:FF:FE28:9C5A
  - value: "2001:db8:3c4d:15:0:d234:3eee:"
  - value: "2001:db8:3c4d:15:0:d234:3eee:::"
  - value: ":::1234::"
  - value: "1.1.1"
  - value: "1.a.3.4"
  - value: "foo.com"
  - type: IPAddress

apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
  name: invalid-filter-duplicate
spec:
  rules:
  - filters:
    - type: RequestHeaderModifier
      requestHeaderModifier:
        add:
        - name: my-header
          value: foo
    - type: RequestHeaderModifier
      requestHeaderModifier:
        add:
        - name: my-header

apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: invalid-listener-port
spec:
  gatewayClassName: acme-lb
  listeners:
  - name: foo
    protocol: HTTP