apiVersion: v1
kind: Service
metadata:
  name: jwt-server
  labels:
    app: jwt-server
spec:
  ports:
  - name: http
    port: 8000
    targetPort: 8000
  - name: https
    port: 8443
    targetPort: 8443
  selector:
    app: jwt-server
---
apiVersion: v1
kind: Secret
metadata:
  name: jwt-cert-key-secret
# command to generate certificate

    apiVersion: v1
    metadata:
      name: frontend
    spec:
      selector:
        app: hello
        tier: frontend
      ports:
        - protocol: "TCP"
          port: 80
          targetPort: 80
      type: LoadBalancer

  - apiVersion: apps.openshift.io/v1
    kind: DeploymentConfig
    metadata:
      name: hello
    spec:
      replicas: 7
      template:
        metadata:

            return resolvedVariant;
        }
        List<NodeState> targetNodes = findTargetNodes();
        assert !targetNodes.isEmpty();
        for (NodeState targetNode : targetNodes) {
            if (targetNode.isSelected()) {
                resolvedVariant = targetNode;
                return resolvedVariant;
            }
        }
        return null;
    }

    private List<NodeState> findTargetNodes() {

							// Because the Gateway's server port is the port on which the proxy should listen for incoming connections,
							// the actual port associated with the service is the `TargetPort` that reaches the sidecar *workload instances*.
							if tp := port.TargetPort.IntValue(); tp != 0 {
								servicePorts[uint32(tp)] = true
								if _, ok := portMapping[uint32(port.Port)]; !ok {
									portMapping[uint32(port.Port)] = uint32(tp)
								}

          "name":"mock",
          "labels":{
            "app":"mock"
          }
        },
        "spec":{
          "ports": [{
            "protocol": "TCP",
            "port": 99,
            "targetPort": 9949
          }],
          "selector":{
            "app":"mock"
          }
        }
      },
      {
         "kind":"ReplicationController",
         "apiVersion":"v1",
         "metadata":{

		preserveDIP = false
		localTrafficDSR = false
	}
	// targetPort is zero if it is specified as a name in port.TargetPort.
	// Its real value would be got later from endpoints.
	targetPort := 0
	if port.TargetPort.Type == intstr.Int {
		targetPort = port.TargetPort.IntValue()
	}

	info.preserveDIP = preserveDIP
	info.targetPort = targetPort
	info.hns = proxier.hns
	info.localTrafficDSR = localTrafficDSR

		// Get pod IPs for service B.
		pods, err := c.PodsForSelector(context.TODO(), destNS, "app="+destName)
		if err == nil {
			for _, destPod := range pods.Items {
				info.TargetPod = append(info.TargetPod, destPod.Status.PodIP)
			}
			sort.Strings(info.TargetPod)
		}

		// Get the East-West Gateway IP
		svc, err := c.Kube().CoreV1().Services(istioNS).Get(context.TODO(), "istio-eastwestgateway", metav1.GetOptions{})

          "labels":{
            "app":"mock",
            "status":"replaced"
          }
        },
        "spec":{
          "ports": [{
            "protocol": "TCP",
            "port": 99,
            "targetPort": 9949
          }],
          "selector":{
            "app":"mock"
          }
        }
      },
      {
         "kind":"ReplicationController",
         "apiVersion":"v1",
         "metadata":{

  ports:
  - name: https
    port: 443
    protocol: TCP
    targetPort: 8443
  selector:
    old: test
`),
			applied: []byte(`
# All accepted while using the same field manager

apiVersion: v1
kind: Service
metadata:
  name: test
spec:
  ports:
  - name: https
    port: 443
    protocol: TCP
    targetPort: 8444
  selector:
    new: test
`),
		},
		{

apiVersion: v1
kind: Service
metadata:
  name: redis-master
  labels:
    app: redis
    role: master
    tier: backend
spec:
  ports:
  - port: 6379
    targetPort: 6379
  selector:
    app: redis
    role: master