metadata:
  name: "{{ .To.ServiceName }}"
spec:
  hosts:
  - "{{ .To.ClusterLocalFQDN }}"
  http:
  - name: "vistio-route"
    match:
    - uri:
        prefix: "/vistio"
    route:
    - destination:
        host: "{{ .To.ClusterLocalFQDN }}"
        subset: "vistio"
  - name: "legacy-by-default"
    route:
    - destination:
        host: "{{ .To.ClusterLocalFQDN }}"
        subset: "vlegacy"
---

	return len(d)
}

// Less returns true if the element at i should appear before the element at j in a sorted Services
func (d Services) Less(i, j int) bool {
	return strings.Compare(d[i].Config().ClusterLocalFQDN(), d[j].Config().ClusterLocalFQDN()) < 0
}

// Swap switches the positions of elements at i and j (used for sorting).
func (d Services) Swap(i, j int) {
	d[i], d[j] = d[j], d[i]
}

// Copy this services array.

      app: "{{ .To.ServiceName }}"
  mtls:
    mode: STRICT
---
apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: {{ .To.ServiceName }}
spec:
  host: "{{ .To.ClusterLocalFQDN }}"
  trafficPolicy:
    tls:

	return i.Config().NamespaceName()
}

func (i Instances) ServiceAccountName() string {
	return i.Config().ServiceAccountName()
}

func (i Instances) ClusterLocalFQDN() string {
	return i.Config().ClusterLocalFQDN()
}

func (i Instances) ClusterSetLocalFQDN() string {
	return i.Config().ClusterSetLocalFQDN()
}

func (i Instances) NamespacedName() NamespacedName {

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: "{{ .To.ServiceName }}"
spec:
  host: "{{ .To.ClusterLocalFQDN }}"
  trafficPolicy:
    tls:

    - key: connection.sni
      values: [ "*.{{ .To.ClusterLocalFQDN }}" ]
  - to:
    - operation:
        paths: [ "/connection-sni-bad" ]
    when:
    - key: connection.sni
      values: [ "never-matched" ]
  - to:
      - operation:
          paths: [ "/connection-sni-notValues" ]
    when:
      - key: connection.sni
        notValues: [ "*.{{ .To.ClusterLocalFQDN }}" ]

              number: 80
          weight: 100
    - match:
        - gateways:
            - test-egress
          port: 80
      route:
        - destination:
            host: "{{ .To.ClusterLocalFQDN }}"
            port:
              number: {{ (.To.PortForName "http").ServicePort }}
          weight: 100
      headers:
        request:
          add:

apiVersion: networking.istio.io/v1beta1
kind: DestinationRule
metadata:
  name: {{ .To.ServiceName }}
  namespace: {{ .Denied.NamespaceName }}
spec:
  host: "{{ .To.ClusterLocalFQDN }}"
  trafficPolicy:
    tls:

metadata:
  name: {{ .To.ServiceName }}
spec:
  hosts:
  - "*.{{ .To.ServiceName }}.com"
  gateways:
  - {{ .To.ServiceName }}-gateway
  http:
  - route:
    - destination:
        host: "{{ .To.ClusterLocalFQDN }}"
        port:

spec:
  hosts:
    - "allow.{{ .To.ServiceName }}.com"
    - "deny.{{ .To.ServiceName }}.com"
  gateways:
    - gw-{{ .To.ServiceName }}
  http:
    - route:
        - destination:
            host: "{{ .To.ClusterLocalFQDN }}"
            port:
              number: {{ (.To.PortForName "http").ServicePort }}
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: allow-{{ .To.ServiceName }}
spec: