spec:
  hosts:
  - "*.bookinfo.com"
  gateways:
  - istio-system/istio-ingressgateway
  http:
  - route:
    - destination:
        host: www.bookinfo.com
        port:
          number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: https
  namespace: istio-system
spec:
  hosts:
  - https.secure.com
  gateways:

spec:
  selector:
    istio.io/benchmark: "true"
  servers:
  - hosts:
    - '*'
    port:
      name: http
      number: 80
      protocol: HTTP
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: knative-local-gateway
  namespace: knative-serving
spec:
  selector:
    istio.io/benchmark: "true"
  servers:
  - hosts:
    - '*'
    port:
      name: http
      number: 8081

            hosts: ["rule[0]-to[0]-host[1]", "rule[0]-to[0]-host[2]"]
            ports: ["9001", "9002"]
            paths: ["rule[0]-to[0]-path[1]", "rule[0]-to[0]-path[2]"]
        - operation:
            methods: ["rule[0]-to[1]-method[1]", "rule[0]-to[1]-method[2]"]
            hosts: ["rule[0]-to[1]-host[1]", "rule[0]-to[1]-host[2]"]
            ports: ["9011", "9012"]

kind: VirtualService
metadata:
  name: ratings-01
  namespace: default
spec:
  hosts:
  - ratings
  http:
  - route:
    - destination:
        host: ratings
        subset: v1
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: ratings
  namespace: default
spec:
  host: ratings
  subsets:
  - name: v1
    labels:

spec:
  gateways:
  - gateway-conformance-infra/isolation-istio-autogenerated-k8s-gateway-abc-foo-example-com
  hosts:
  - bar.com
  http:
  - match:
    - uri:
        prefix: /abc-foo-example-com
    name: gateway-conformance-infra.attaches-to-abc-foo-example-com-with-hostname-intersection.0
    route:
    - destination:
        host: infra-backend-v1.gateway-conformance-infra.svc.domain.suffix
        port:
          number: 8080
---

  rules:
    - to: # only allow /allow for company.com
        - operation:
            paths: [ "/allow" ]
            hosts: [ "www.company.com" ]
    - to: # checks only a call 443 over istio mutual without JWT
        - operation:
            hosts: [ "{{ .Allowed.ServiceName }}-{{ .Allowed.NamespaceName }}-only.com" ]
      from:
        - source:

		},
		{
			host.Names{"foo.com"},
			host.Names{},
			host.Names{},
		},
		{
			host.Names{},
			host.Names{"bar.com"},
			host.Names{},
		},
		{
			host.Names{"*", "foo.com"},
			host.Names{"foo.com"},
			host.Names{"foo.com"},
		},
		{
			host.Names{"*"},
			host.Names{"foo.com"},
			host.Names{"foo.com"},
		},
		{
			host.Names{"foo.com"},
			host.Names{"Foo.com"},
			host.Names{},
		},

metadata:
  name: websocket
  namespace: testns
spec:
  host: websocket.test.istio.io
  subsets:
    - name: v1
      labels:
        version: v1


---

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: websocket-route
  namespace: testns
spec:
  hosts:
    - websocket.test.istio.io
  http:
    - match:
      - headers:
          testwebsocket:

  - istio-system/foo-istio-autogenerated-k8s-ingress-ns
  hosts:
  - foohost.bar.com
  http:
  - match:
    - uri:
        exact: /sub/path/
    route:
    - destination:
        host: service1.ns.svc.mydomain
        port:
          number: 4202
      weight: 100
  - match:
    - uri:
        exact: /sub/path/
    route:
    - destination:
        host: service1.ns.svc.mydomain
        port:

Gregory Hanson <******@****.***> 1646968323 -0500