# Copyright 2018 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

# ----------------------------------------------------------
# WARNING: This file is autogenerated. Do not manually edit.
# ----------------------------------------------------------

# apiVersion: networking.istio.io/v1alpha3
# kind: Gateway
# metadata:
#   name: frontend-gateway
#   namespace: istio-system
# spec:
#   selector:
#     istio: ingressgateway # use Istio default gateway implementation
#   servers:
#   - port:
#       number: 80
#       name: http
#       protocol: HTTP
#     hosts:
#     - "*.arctiqtim.next.gkeop.labs.arctiq.ca"
#     tls:
#       httpsRedirect: true
#   - hosts:
#     - "*.arctiqtim.next.gkeop.labs.arctiq.ca"
#     port:
#       name: https
#       number: 443
#       protocol: HTTPS
#     tls:
#       mode: SIMPLE
#       serverCertificate: /etc/istio/ingressgateway-certs/tls.crt
#       privateKey: /etc/istio/ingressgateway-certs/tls.key
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: frontend
  namespace: hipster-store
spec:
  host: frontend
  trafficPolicy:
    tls:
      mode: ISTIO_MUTUAL
  subsets:
  - name: local
    labels:
      cluster: local
  - name: remote
    labels:
      cluster: remote
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: frontend-ingress
  namespace: hipster-store
spec:
  hosts:
  - "hipster-store.arctiqtim-istio.next.gkeop.labs.arctiq.ca"
  gateways:
  - istio-system/frontend-gateway
  http:
  - route:
    - destination:
        host: frontend
        port:
          number: 80
        subset: local
      weight: 50
    - destination:
        host: frontend
        port:
          number: 80
        subset: remote
      weight: 50
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: frontend
  namespace: hipster-store
spec:
  hosts:
  - "frontend.hipster-store.svc.cluster.local"
  http:
  # - fault:
  #     abort:
  #       httpStatus: 500
  #       percent: 100
  - route:
    - destination:
        host: frontend
        port:
          number: 80
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: whitelist-egress-googleapis
  namespace: hipster-store
spec:
  hosts:
  - "accounts.google.com" # Used to get token
  - "*.googleapis.com"
  ports:
  - number: 80
    protocol: HTTP
    name: http
  - number: 443
    protocol: HTTPS
    name: https
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: whitelist-egress-google-metadata
  namespace: hipster-store
spec:
  hosts:
  - metadata.google.internal
  addresses:
  - 169.254.169.254 # GCE metadata server
  ports:
  - number: 80
    name: http
    protocol: HTTP
  - number: 443
    name: https
    protocol: HTTPS
---