apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: common-gateway
  namespace: istio-ingress
spec:
  gatewayClassName: istio
  listeners:
    - name: http-80
      hostname: "*.{{ onap_baseurl }}"
      port: 80
      protocol: HTTP
      allowedRoutes:
        namespaces:
          from: All
    - name: https-443
      hostname: "*.{{ onap_baseurl }}"
      port: 443
      protocol: HTTPS
      allowedRoutes:
        namespaces:
          from: All
      tls:
        mode: Terminate
        certificateRefs:
          - kind: Secret
            group: ""
            name: ingress-tls-secret
    - name: udp-162
      protocol: UDP
      port: 162
      allowedRoutes:
        kinds:
          - kind: UDPRoute
        namespaces:
          from: All
    - name: tcp-4334
      protocol: TCP
      port: 4334
      allowedRoutes:
        kinds:
          - kind: TCPRoute
        namespaces:
          from: All
    - name: tcp-9000
      allowedRoutes:
        namespaces:
          from: All
      hostname: "kafka-api{{ onap_postaddr }}.{{ onap_baseurl }}"
      port: 9000
      protocol: TLS
      tls:
        certificateRefs:
          - group: ""
            kind: Secret
            name: ingress-tls-secret
        mode: Terminate
    - name: tcp-9001
      allowedRoutes:
        namespaces:
          from: All
      hostname: "kafka-api{{ onap_postaddr }}.{{ onap_baseurl }}"
      port: 9001
      protocol: TLS
      tls:
        certificateRefs:
          - group: ""
            kind: Secret
            name: ingress-tls-secret
        mode: Terminate
    - name: tcp-9002
      allowedRoutes:
        namespaces:
          from: All
      hostname: "kafka-api{{ onap_postaddr }}.{{ onap_baseurl }}"
      port: 9002
      protocol: TLS
      tls:
        certificateRefs:
          - group: ""
            kind: Secret
            name: ingress-tls-secret
        mode: Terminate
    - name: tcp-9010
      allowedRoutes:
        namespaces:
          from: All
      hostname: "kafka-bootstrap-api{{ onap_postaddr }}.{{ onap_baseurl }}"
      port: 9010
      protocol: TLS
      tls:
        certificateRefs:
          - group: ""
            kind: Secret
            name: ingress-tls-secret
        mode: Terminate