apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
spec:
  selector:
    istio: {{ .EgressGatewayIstioLabel | default "egressgateway" }}
  servers:
  - port:
      number: 80
      name: http
      protocol: TLS
    hosts:
    - external.{{ .externalNamespace }}.svc.cluster.local
    tls:
      mode: ISTIO_MUTUAL
  - port:
      number: 443

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
spec:
  selector:
    istio: {{ .EgressGatewayIstioLabel | default "egressgateway" }} 
  servers:
  - port:
      number: 443
      name: tls
      protocol: TLS
    hosts:
    - external.{{ .externalNamespace }}.svc.cluster.local
    tls:

		Should only be set when istio.test.kube.deploy=false`)
	flag.StringVar(&settingsFromCommandline.EgressGatewayIstioLabel, "istio.test.kube.egressGatewayIstioLabel",
		settingsFromCommandline.EgressGatewayIstioLabel,
		`Specifies the istio label of the egressgateway to search for when running tests in a preinstalled istio installation.
		Should only be set when istio.test.kube.deploy=false`)

apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: {{ .EgressGatewayServiceName | default "istio-egressgateway" }}
spec:
  selector:
    istio: {{ .EgressGatewayIstioLabel | default "egressgateway" }}
  servers:
  - port:
      number: 80
      name: tcp-80
      protocol: TCP
    hosts:
    - external.{{ .externalNamespace }}.svc.cluster.local
  - port:
      number: 443
      name: tcp-443
      protocol: TCP

      jwksUri: "https://raw.githubusercontent.com/istio/istio/master/tests/common/jwt/jwks.json"
---
apiVersion: security.istio.io/v1beta1
kind: AuthorizationPolicy
metadata:
  name: {{ .EgressGatewayIstioLabel | default "egressgateway" }}
  namespace: {{ .EgressGatewayServiceNamespace | default .SystemNamespace.Name }}
spec:
  selector:
    matchLabels:

	// This field should only be set when DeployIstio is false
	EgressGatewayServiceNamespace string

	// EgressGatewayIstioLabel allows overriding the selector of the egressgateway service (defaults to istio=egressgateway)
	// This field should only be set when DeployIstio is false
	EgressGatewayIstioLabel string

					"tlsEnabled":                    proxyConfig.TLSEnabled,
					"externalSvcTcpPort":            ports.TCPForHTTP.ServicePort,
					"externalSvcTlsPort":            ports.HTTPS.ServicePort,
					"EgressGatewayIstioLabel":       i.Settings().EgressGatewayIstioLabel,
					"EgressGatewayServiceName":      i.Settings().EgressGatewayServiceName,
					"EgressGatewayServiceNamespace": i.Settings().EgressGatewayServiceNamespace,
				}

					useGateway:      false,
				},
			}

			newTLSGateway(t, t, apps.Ns1.Namespace, apps.External.All, i.Settings().EgressGatewayServiceNamespace,
				i.Settings().EgressGatewayServiceName, i.Settings().EgressGatewayIstioLabel)

			for _, tc := range testCases {
				t.NewSubTest(tc.name).Run(func(t framework.TestContext) {
					newTLSGatewayDestinationRule(t, apps.External.All, "SIMPLE", tc.credentialToUse)
					newTLSGatewayTest(t).

			createGateway(t, t, appNS, serviceNS, inst.Settings().EgressGatewayServiceNamespace,
				inst.Settings().EgressGatewayServiceName, inst.Settings().EgressGatewayIstioLabel)

			if err := WaitUntilNotCallable(internalClient[0], externalService[0]); err != nil {
				t.Fatalf("failed to apply sidecar, %v", err)
			}

			// Set up Host Name

					// The namespaces for each resource are specified in the file. Use "" as the ns to apply to.
					param.Namespace.String():        "",
					"EgressGatewayIstioLabel":       i.Settings().EgressGatewayIstioLabel,
					"EgressGatewayServiceName":      i.Settings().EgressGatewayServiceName,
					"EgressGatewayServiceNamespace": i.Settings().EgressGatewayServiceNamespace,