metadata:
  name: testing-service-01-test-02
  namespace: default
spec:
  gateways:
    - istio-system/testing-gateway-2
  hosts:
    - testing-01.com # Expected: no validation error because the gateway ns prefix is a wildcard match
  http:
    - match:
        - uri:
            prefix: /
      route:
        - destination:
            host: ratings
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway

# Support replace statement in go.work file

# Replacement in go.work file, and none in go.mod file.
go list -m example.com/dep
stdout 'example.com/dep v1.0.0 => ./dep'

# Wildcard replacement in go.work file overrides version replacement in go.mod
# file.
go list -m example.com/other
stdout 'example.com/other v1.0.0 => ./other2'

-- go.work --
use m

replace example.com/dep => ./dep
replace example.com/other => ./other2

// along with this program.  If not, see <http://www.gnu.org/licenses/>.

package replication

import (
	"encoding/xml"
	"fmt"
	"strings"

	"github.com/minio/pkg/v3/wildcard"
)

// DestinationARNPrefix - destination ARN prefix as per AWS S3 specification.
const DestinationARNPrefix = "arn:aws:s3:::"

// DestinationARNMinIOPrefix - destination ARN prefix for MinIO.

            synchronized (lock) {
                init();
                return wildcardBindingAddress;
            }
        } catch (Exception e) {
            throw new RuntimeException("Could not determine a usable wildcard IP for this machine.", e);
        }
    }

    private void init() throws Exception {
        if (initialized) {
            return;
        }

        initialized = true;

              commonTlsContext:
                alpnProtocols:
                  - http/1.1
                tlsCertificateSdsSecretConfigs:
                  - name: kubernetes://wildcard-cert
                    sdsConfig:
                      ads: {}

        expect:
        select('one.dot', 'has.two.dots').includedTests == ['one.dot', 'has.two/dots']
    }

    def "ignores wildcard to select all tests from module"() {
        expect:
        select('ModuleName.*').includedTests == ['ModuleName.*']
    }

    def "can use wildcard to select all test case from suite"() {
        expect:
        select('ModuleName.suite.*').includedTests == ['ModuleName.suite']
    }

  rules:
    - type: object  # regular objects with zero or more older versions
      name: NAME # match object names that satisfy the wildcard expression.
      olderThan: 70h # match objects older than this value
      createdBefore: "2006-01-02T15:04:05.00Z" # match objects created before "date"
      tags:
        - key: name

    private Trans2FindFirst2Response response;


    public DirFileEntryEnumIterator1 ( SmbTreeHandleImpl th, SmbResource parent, String wildcard, ResourceNameFilter filter, int searchAttributes )
            throws CIFSException {
        super(th, parent, wildcard, filter, searchAttributes);
    }


    @SuppressWarnings ( "resource" )
    @Override
    protected final FileEntry open () throws CIFSException {

  - apiGroups: ["config.istio.io", "security.istio.io", "networking.istio.io", "authentication.istio.io", "rbac.istio.io", "telemetry.istio.io", "extensions.istio.io"]
    verbs: ["update"]
    # TODO: should be on just */status but wildcard is not supported
    resources: ["*"]

  # Needed because status reporter sets the config map owner reference to the istiod pod
  - apiGroups: [""]
    verbs: ["update"]
    resources: ["pods/finalizers"]
{{- end }}

			},
		},
		{
			"inbound-ports-wildcard",
			func(cfg *config.Config) {
				cfg.InboundPortsInclude = "*"
			},
		},
		{
			"inbound-ports-tproxy",
			func(cfg *config.Config) {
				cfg.InboundPortsInclude = "32000,31000"
				cfg.InboundInterceptionMode = constants.TPROXY
			},
		},
		{
			"inbound-ports-wildcard-tproxy",
			func(cfg *config.Config) {