},
		},
		{
			Name:     "HTTPS Traffic",
			PortName: "https",
			Expected: Expected{
				Query: prometheus.Query{
					Metric:      "istio_tcp_connections_closed_total",
					Aggregation: "sum",
					Labels: map[string]string{
						"destination_service_name": "BlackHoleCluster",
					},
				},
			},
		},
		{
			Name:     "HTTPS Traffic Conflict",
			PortName: "https-conflict",

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue: []
releaseNotes:
  - |

      service, and traffic matching the service was sent to the configured DNS name.

      This caused a few issues:
      * Ports are required in Istio, but not in Kubernetes. This can result in broken traffic if ports are not configured as Istio expects, despite them working without Istio.

apiVersion: release-notes/v2
kind: feature
area: traffic-management
releaseNotes:
- |

apiVersion: release-notes/v2
kind: bug-fix
area: traffic-management

issue:
  - 39825

releaseNotes:
- |

By default, Istio-enabled services are unable to access services and URLs outside the cluster. Pods use <i>iptables</i> to transparently redirect all outbound traffic to the sidecar proxy, which only handles intra-cluster destinations.

See [the Egress Task](https://istio.io/docs/tasks/traffic-management/egress/) for
information on configuring Istio to contact external services.

This directory contains samples showing how to enable pods to contact a few well

  annotations:
    # annotations are set by default by istio-cni, will be ignored to avoid validation errors
    sidecar.istio.io/interceptionMode: REDIRECT
    traffic.sidecar.istio.io/excludeInboundPorts: "15020"
    traffic.sidecar.istio.io/includeInboundPorts: '*'
    traffic.sidecar.istio.io/includeOutboundIPRanges: '*'
    gateway.istio.io/controller-version: "5"
spec:
  containers:
    - name: "grafana-test"

apiVersion: release-notes/v2
kind: feature
area: traffic-management
issue:
  - 46540

releaseNotes:
- |

      app: grpc
  template:
    metadata:
      annotations:
        inject.istio.io/templates: grpc-agent
      labels:
        app: grpc
    spec:
      containers:
      - name: traffic
        image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
        readinessProbe:
          httpGet:

      app: grpc
  template:
    metadata:
      annotations:
        inject.istio.io/templates: grpc-simple
      labels:
        app: grpc
    spec:
      containers:
      - name: traffic
        image: "fake.docker.io/google-samples/traffic-go-gke:1.0"
        readinessProbe:
          httpGet: