pilot/pkg/config/kube/gateway/testdata/deployment/cluster-ip.yaml

apiVersion: v1
kind: Service
metadata:
  annotations:
    networking.istio.io/service-type: ClusterIP
  labels:
    gateway.istio.io/managed: istio.io-gateway-controller
  name: default
  namespace: default
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1alpha2
    kind: Gateway
    name: default
    uid: null
spec:
  ports:
  - name: status-port
    port: 15021
    protocol: TCP
  - name: http
    port: 80
    protocol: TCP
  selector:
    istio.io/gateway-name: default
  type: ClusterIP
---
apiVersion: apps/v1
kind: Deployment
metadata:
  annotations:
    networking.istio.io/service-type: ClusterIP
  labels:
    gateway.istio.io/managed: istio.io-gateway-controller
  name: default
  namespace: default
  ownerReferences:
  - apiVersion: gateway.networking.k8s.io/v1alpha2
    kind: Gateway
    name: default
    uid: null
spec:
  selector:
    matchLabels:
      istio.io/gateway-name: default
  template:
    metadata:
      annotations:
        inject.istio.io/templates: gateway
        networking.istio.io/service-type: ClusterIP
      labels:
        istio.io/gateway-name: default
        sidecar.istio.io/inject: "true"
    spec:
      containers:
      - image: auto
        name: istio-proxy
        ports:
        - containerPort: 15021
          name: status-port
          protocol: TCP
        readinessProbe:
          failureThreshold: 10
          httpGet:
            path: /healthz/ready
            port: 15021
            scheme: HTTP
          periodSeconds: 2
          successThreshold: 1
          timeoutSeconds: 2
        securityContext:
          allowPrivilegeEscalation: false
          capabilities:
            drop:
            - ALL
          privileged: false
          readOnlyRootFilesystem: true
          runAsGroup: 1337
          runAsNonRoot: true
          runAsUser: 1337
      securityContext:
        sysctls:
        - name: net.ipv4.ip_unprivileged_port_start
          value: "0"
---
apiVersion: gateway.networking.k8s.io/v1alpha2
kind: Gateway
metadata:
  creationTimestamp: null
  name: default
  namespace: default
spec:
  gatewayClassName: ""
  listeners: null
status:
  conditions:
  - lastTransitionTime: fake
    message: Deployed gateway to the cluster
    reason: ResourcesAvailable
    status: "True"
    type: Scheduled
---