$gateway.type }} selector: {{ $gateway.labels | toYaml | indent 4 }} ports: {{- range $key, $val := $gateway.ports }} - {{- range $pkey, $pval := $val }} {{ $pkey}}: {{ $pval }} {{- end }} {{- end }} {{ range $app := $gateway.ingressPorts }} - port: {{ $app.port }} name: {{ $app.name }} {{- end }} {{- if $gateway.ipFamilyPolicy }} ipFamilyPolicy: {{ $gateway.ipFamilyPolicy }} {{- end }} {{- if $gateway.ipFamilies }} ipFamilies: {{- range $gateway.ipFamilies }} - {{ . }} {{- end }} {{- end }} --- {{ end }} ...

      # https://istio.io/docs/tasks/traffic-management/egress.html#calling-external-services-directly
      # example: includeIPRanges: "172.30.0.0/16,172.20.0.0/16"
      # would only capture egress traffic on those two IP Ranges, all other outbound traffic would
      # be allowed by the sidecar
      includeIPRanges: "*"
      excludeIPRanges: ""
      includeOutboundPorts: ""
      excludeOutboundPorts: ""