spec:
  targetRef:
    name: {{ .To.ServiceName }}-gateway
    kind: Gateway
    group: gateway.networking.k8s.io
  action: ALLOW
  rules:
  - to:
    - operation:
        hosts:
{{- range $svc := .Services }}
        - "example.{{ $svc.ServiceName }}.com"
{{- end }}
    from:
    - source:

            kind: kindValue
            name: nameValue
          serviceName: serviceNameValue
          servicePort: servicePortValue
        path: pathValue
        pathType: pathTypeValue
  tls:
  - hosts:
    - hostsValue
    secretName: secretNameValue
status:
  loadBalancer:
    ingress:
    - hostname: hostnameValue
      ip: ipValue
      ports:
      - error: errorValue
        port: 1

# Split traffic using header
# Will use c-weighted endpoint
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: headers-route
  namespace: testns
spec:
  hosts:
    - headers.test.istio.io
  http:
    - match:
      - headers:
          version:
            exact: v2
        sourceLabels:
          version: v1
      route:
      - destination:
          host: c-weighted.extsvc.com

  mtls:
    mode: STRICT
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: "multiversion-route"
  annotations:
    test-suite: "automtls-partial-sidecar-dr-no-tls"
spec:
  hosts:
  - "multiversion"
  http:
  - name: "vistio-route"
    match:
    - uri:
        prefix: "/vistio"
    route:
    - destination:
        host: "multiversion"
        subset: "vistio"

	prefix = strings.ReplaceAll(prefix, servicePortNameStatPattern, portName)
	return prefix
}

// shortHostName constructs the name from kubernetes hosts based on attributes (name and namespace).
// For other hosts like VMs, this method does not do any thing - just returns the passed in host as is.
func shortHostName(host string, attributes *model.ServiceAttributes) string {

          "number": 2
        }
      },
      "resource": {
        "apiGroup": "apiGroupValue",
        "kind": "kindValue",
        "name": "nameValue"
      }
    },
    "tls": [
      {
        "hosts": [
          "hostsValue"
        ],
        "secretName": "secretNameValue"
      }
    ],
    "rules": [
      {
        "host": "hostValue",
        "http": {
          "paths": [
            {

          "number": 2
        }
      },
      "resource": {
        "apiGroup": "apiGroupValue",
        "kind": "kindValue",
        "name": "nameValue"
      }
    },
    "tls": [
      {
        "hosts": [
          "hostsValue"
        ],
        "secretName": "secretNameValue"
      }
    ],
    "rules": [
      {
        "host": "hostValue",
        "http": {
          "paths": [
            {

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: direct-cnn-through-egress-gateway
spec:
  hosts:
  - fake.external.com
  gateways:
  - istio-egressgateway
  - mesh
  tls:
  - match:
    - gateways:
      - mesh
      port: 443
      sniHosts:
      - fake.external.com
    route:
    - destination:
        host: istio-egressgateway.istio-system.svc.cluster.local
        port:

      name: http-tracing
      protocol: HTTP
    hosts:
    - "tracing.{INGRESS_DOMAIN}"
  - port:
      number: 9411
      name: http-tracing-span
      protocol: HTTP
    hosts:
    - "tracing.{INGRESS_DOMAIN}"
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: tracing-vs
  namespace: istio-system
spec:
  hosts:
  - "tracing.{INGRESS_DOMAIN}"
  gateways:

apiVersion: networking.istio.io/v1
kind: ServiceEntry
metadata:
  name: valid-service-entry
spec:
  hosts:
  - eu.bookinfo.com
  ports:
  - number: 80
    name: http
    protocol: HTTP
  resolution: DNS
  endpoints:
  # Rather than relying on an external host that might become unreachable (causing test failures)
  # we can mock the external endpoint using service t which has no sidecar.