blob: 160c53b0c8c15f4d015ba1142c64af1e66ee8cda [file] [log] [blame]
# Our service has three secure mtls ports, but the DR only specifies one. Note
# that one of the secure ports is a UDP port - we ignore those, so the analyzer
# should only produce one message.
apiVersion: authentication.istio.io/v1alpha1
kind: Policy
metadata:
name: default
namespace: my-namespace
spec:
targets:
- name: my-service
ports:
- number: 8080
- number: 8081
- number: 8082
peers:
- mtls:
---
apiVersion: v1
kind: Service
metadata:
name: my-service
namespace: my-namespace
spec:
selector:
app: my-service
ports:
- protocol: TCP
port: 8080
targetPort: 8080
- protocol: TCP
port: 8081
targetPort: 8081
- protocol: UDP
port: 8082
targetPort: 8082
---
apiVersion: v1
kind: Pod
metadata:
name: my-service-pod
namespace: my-namespace
labels:
app: my-service
spec:
containers:
- name: istio-proxy
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
name: default
namespace: my-namespace
spec:
host: my-service.my-namespace.svc.cluster.local
trafficPolicy:
portLevelSettings:
- port:
number: 8080
tls:
mode: ISTIO_MUTUAL
---