boolean wildcard = nodeNameTest.isWildcard();
            String testName = nodeNameTest.getNodeName().getName();
            String testPrefix = nodeNameTest.getNodeName().getPrefix();
            if (wildcard && testPrefix == null) {
                return true;
            }
            if (wildcard || testName.equals(nodeName)) {

    parentRef:
      name: isolation
      namespace: gateway-conformance-infra
      sectionName: wildcard-example-com
---
apiVersion: gateway.networking.k8s.io/v1beta1
kind: HTTPRoute
metadata:
  creationTimestamp: null
  name: attaches-to-wildcard-foo-example-com-with-hostname-intersection
  namespace: gateway-conformance-infra
spec: null
status:
  parents:
  - conditions:

    }

    private DaemonsState() {
        this.busy = -1
        this.idle = -1
    }

    String toString() {
        wildcard ? "DaemonsState{*}" : "DaemonsState{busy=$busy,idle=$idle}"
    }

    boolean matches(DaemonsState rhs) {
        wildcard || (this.busy == rhs.busy && this.idle == rhs.idle)
    }

    boolean isWildcard() {
        busy < 0
    }

import org.apache.maven.settings.Mirror;

/**
 * DefaultMirrorSelector
 */
@Named
@Singleton
public class DefaultMirrorSelector implements MirrorSelector {

    private static final String WILDCARD = "*";

    private static final String EXTERNAL_WILDCARD = "external:*";

    private static final String EXTERNAL_HTTP_WILDCARD = "external:http:*";

					"*.com":                 {Token: "third"},
					"*":                     {Token: "fallback"},
				},
			},
			expected: rest.Config{BearerToken: "exact"},
		},
		{
			name:       "wildcard match with default https port",
			serverName: "one.two.three.com:443",
			kubeconfig: clientcmdapi.Config{
				AuthInfos: map[string]*clientcmdapi.AuthInfo{
					"*.two.three.com:443": {Token: "first-with-port"},

		addresses = req.Delta.Subscribed
	} else {
		if w.Wildcard {
			addresses = updatedAddresses
		} else {
			// this is from the external triggers instead of request
			// send response for all the subscribed intersect with the updated
			addresses = updatedAddresses.IntersectInPlace(subs)
		}
	}

	if !w.Wildcard {

area: traffic-management
issues:
- 40474
releaseNotes:
- |
  **Fixed** an issue causing traffic to not match (and return a `404`) when using wildcard domain names and including an unexpected port in the `Host` header.
- |
  **Fixed** an issue causing traffic to match an unexpected route when using wildcard domain names and including an port in the `Host` header.
- |

metadata:
  name: testing-service-01-test-02
  namespace: default
spec:
  gateways:
  - istio-system/testing-gateway-01-test-02
  hosts:
  - 'web.testing-02.com' # Expected: no validation error since this host match the wildcard
  http:
  - match:
    - uri:
        prefix: /
    route:
    - destination:
        host: ratings
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:

	for pattern := range rules {
		if wildcard.MatchSimple(pattern, objectName) {
			return true
		}
	}
	return false
}

// Match - returns TargetIDSet matching object name in rules.
func (rules Rules) Match(objectName string) TargetIDSet {
	targetIDs := NewTargetIDSet()

	for pattern, targetIDSet := range rules {
		if wildcard.MatchSimple(pattern, objectName) {

go list -m all
stdout 'example.com/join/subpkg v1.0.0'

# A 'go get' that simultaneously upgrades away conflicting package definitions is not ambiguous.
# (A wildcard pattern applies to both packages and modules,
# because we define wildcard matching to apply after version resolution.)
go get example.com/join/subpkg/...@v1.1.0

# A 'go get' without an upgrade should find the package.
rm go.mod
go mod init example.com/foo