KIND, either express or implied.  See the License for the
specific language governing permissions and limitations
under the License.
-->

<model>

  <extend>${basedir}/bogus.xml</extend>

  <parent>
    <groupId>maven</groupId>
    <artifactId>bogus</artifactId>
    <version>1.0-beta-9</version>
  </parent>

kind: AuthorizationPolicy
metadata:
  name: httpbin-nopods # Invalid: there aren't matching workloads for this selector
  namespace: httpbin
spec:
  selector:
    matchLabels:
      app: bogus-label # Bogus label. No matching workloads
      version: v1
  rules:
    - from:
        - source:
            principals: ["cluster.local/ns/default/sa/sleep"]
        - source:
            namespaces: ["httpbin"]

  gateways:
  - httpbin-gateway # Expected: no validation error since this gateway exists
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: httpbin-bogus
spec:
  hosts:
  - "*"
  gateways:
  - httpbin-gateway-bogus # Expected: validation error since this gateway does not exist
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: httpbin-mesh
spec:
  hosts:

	g.Expect(IsExportToAllNamespaces([]string{"."})).To(Equal(false))

	// Array with "." & "*"
	g.Expect(IsExportToAllNamespaces([]string{".", "*"})).To(Equal(true))

	// Array with "bogus"
	g.Expect(IsExportToAllNamespaces([]string{"bogus"})).To(Equal(false))

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews-bogussubset
  namespace: default
spec:
  http:
  - route:
    - destination:
        host: reviews
        subset: bogus # This subset does not exist, should result in a validation error
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: reviews-fqdn
  namespace: default
spec:
  http:
  - route:

# Gateway with bogus port
#
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: httpbin-gateway
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 80
      name: http
      protocol: HTTP
    hosts:

// Copyright 2016 The Go Authors. All rights reserved.
// Use of this source code is governed by a BSD-style
// license that can be found in the LICENSE file.

package f

import /* // ERROR "import path" */ `

        - destination:
            host: hello.hello.svc.cluster.local
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: hello-export-to-bogus
  namespace: hello
spec:
  hosts: [hello]
  exportTo:
    - bogus # This should generate an error, because the exportTo
  http:
    - route:
        - destination:
            host: hello.hello.svc.cluster.local
---

255.255.255.255	broadcasthost
127.0.0.2	odin
127.0.0.3	odin  # inline comment 
::2             odin
127.1.1.1	thor
# aliases
127.1.1.2	ullr ullrhost
fe80::1%lo0	localhost
# Bogus entries that must be ignored.
123.123.123	loki

			TLSConfig: &tls.Config{InsecureSkipVerify: false, RootCAs: roots},
		},
		"secure with mismatched server": {
			TLSConfig:   &tls.Config{InsecureSkipVerify: false, RootCAs: roots, ServerName: "bogus.com"},
			ExpectError: "not bogus.com",
		},
		"secure with matched server": {
			TLSConfig: &tls.Config{InsecureSkipVerify: false, RootCAs: roots, ServerName: "example.com"},
		},

		"insecure, custom dial": {