number: 80
  - mirrors:
    - destination:
        host: httpbin-mirror.default.svc.domain.suffix
        port:
          number: 80
    - destination:
        host: httpbin-second.default.svc.domain.suffix
        port:
          number: 80
    name: default.mirror.0
    route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 80

	return false
}

// convert ./host to currentNamespace/Host
// */host to just host
// */* to just *
func sanitizeServerHostNamespace(server *v1alpha3.Server, namespace string) {
	for i, h := range server.Hosts {
		if strings.Contains(h, "/") {
			parts := strings.Split(h, "/")
			if parts[0] == "." {
				server.Hosts[i] = fmt.Sprintf("%s/%s", namespace, parts[1])
			} else if parts[0] == "*" {
				if parts[1] == "*" {

		},
	)
}

func TestGatewayConflicts(t *testing.T) {
	tcpServer := `port:
  number: 80
  name: tcp
  protocol: TCP
hosts:
- "foo.bar"`
	httpServer := `port:
  number: 80
  name: http
  protocol: HTTP
hosts:
- "foo.bar"`
	tlsServer := `hosts:
  - ./*
port:
  name: https-ingress
  number: 443
  protocol: HTTPS
tls:
  credentialName: sds-credential
  mode: SIMPLE`

        return hosts;
    }


    @Override
    public void addHost(String host, int port) {
        hosts.add(new DefaultHostAndPort(host, port));
    }

    private static class DefaultHostAndPort implements HostAndPort {
        private final String host;
        private final int port;

        DefaultHostAndPort(String host, int port) {
            this.host = host;

kind: VirtualService
metadata:
  name: vs-{{$i}}
spec:
  hosts:
    - random-{{$i}}.host.example
  http:
  - name: "match-route"
    match:
    - uri:
        prefix: "/foo"
    - uri:
        regex: "/bar"
    rewrite:
      uri: "/new-url"
    route:
      - destination:
          host: random-{{$i}}.host.example
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: http1
  namespace: ns1
spec:
  hosts:
  - http1.ns1.svc.cluster.local
  http:
  - route:
    - destination:
        host: http1.ns1.svc.cluster.local
        subset: v1
      weight: 70
    - destination:
        host: http1.ns1.svc.cluster.local
        subset: v2
      weight: 30
---
apiVersion: networking.istio.io/v1alpha3

        credentialName: "$CREDENTIAL_NAME"
      hosts:
      # use a valid gateway host and domain for istiod
      - "ISTIOD-HOST.DOMAIN"
    - port:
        name: https-istiodwebhook
        number: 15017
        protocol: https
      tls:
        mode: SIMPLE
        # use a valid credential here
        credentialName: "$CREDENTIAL_NAME"
      hosts:
      # use a valid gateway host and domain for istiod
      - "ISTIOD-HOST.DOMAIN"

  namespace: default
spec:
  gateways:
  - istio-system/gateway-istio-autogenerated-k8s-gateway-tcp
  hosts:
  - '*'
  tcp:
  - route:
    - destination:
        host: httpbin.default.svc.domain.suffix
        port:
          number: 9090
      weight: 1
    - destination:
        host: httpbin-alt.default.svc.domain.suffix
        port:
          number: 9090
      weight: 2

	if cMatch.PortNumber != 0 && int(cMatch.PortNumber) != port {
		return false
	}
	return true
}

func hostContains(hosts []host.Name, service host.Name) bool {
	for _, h := range hosts {
		if h == service {
			return true
		}
	}
	return false

  - istio-system/gateway-istio-autogenerated-k8s-gateway-default
  hosts:
  - a.domain.example
  http:
  - match:
    - headers:
        my-header:
          exact: some-value
      queryParams:
        my-param:
          regex: some-value
      uri:
        exact: /baz
    name: allowed-2.http.1
    route:
    - destination:
        host: svc2.allowed-2.svc.domain.suffix
        port:
          number: 80