gw-cfg.json

"listener": {
      "name": "0.0.0.0_443",
      "address": {
       "socket_address": {
        "address": "0.0.0.0",
        "port_value": 443
       }
      },
      "filter_chains": [
       {
        "filter_chain_match": {
         "server_names": [
          "example.com"
         ]
        },
        "tls_context": {
         "common_tls_context": {
          "alpn_protocols": [
           "h2",
           "http/1.1"
          ],
          "tls_certificate_sds_secret_configs": [
           {
            "name": "wild-credential",
            "sds_config": {
             "api_config_source": {
              "api_type": "GRPC",
              "grpc_services": [
               {
                "google_grpc": {
                 "target_uri": "unix:/var/run/ingress_gateway/sds",
                 "stat_prefix": "sdsstat"
                }
               }
              ]
             },
             "initial_fetch_timeout": "0s"
            }
           }
          ]
         },
         "require_client_certificate": false
        },
        "filters": [
         {
          "name": "envoy.http_connection_manager",
          "config": {
           "http_protocol_options": {},
           "generate_request_id": true,
           "upgrade_configs": [
            {
             "upgrade_type": "websocket"
            }
           ],
           "tracing": {
            "overall_sampling": {
             "value": 100
            },
            "random_sampling": {
             "value": 100
            },
            "client_sampling": {
             "value": 100
            },
            "operation_name": "EGRESS"
           },
           "use_remote_address": true,
           "rds": {
            "route_config_name": "https.443.https-httpbin.mygateway.default",
            "config_source": {
             "ads": {},
             "initial_fetch_timeout": "0s"
            }
           },
           "stat_prefix": "0.0.0.0_443",
           "set_current_client_cert_details": {
            "dns": true,
            "uri": true,
            "subject": true,
            "cert": true
           },
           "stream_idle_timeout": "0s",
           "forward_client_cert_details": "SANITIZE_SET",
           "access_log": [
            {
             "name": "envoy.file_access_log",
             "config": {
              "format": "[%START_TIME%] \"%REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\" %RESPONSE_CODE% %RESPONSE_FLAGS% \"%DYNAMIC_METADATA(istio.mixer:status)%\" \"%UPSTREAM_TRANSPORT_FAILURE_REASON%\" %BYTES_RECEIVED% %BYTES_SENT% %DURATION% %RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% \"%REQ(X-FORWARDED-FOR)%\" \"%REQ(USER-AGENT)%\" \"%REQ(X-REQUEST-ID)%\" \"%REQ(:AUTHORITY)%\" \"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %REQUESTED_SERVER_NAME%\n",
              "path": "/dev/stdout"
             }
            }
           ],
           "server_name": "istio-envoy",
           "http_filters": [
            {
             "name": "mixer",
             "config": {
              "transport": {
               "check_cluster": "outbound|9091||istio-policy.istio-system.svc.cluster.local",
               "network_fail_policy": {
                "policy": "FAIL_CLOSE",
                "max_retry_wait": "1s",
                "base_retry_wait": "0.080s"
               },
               "report_cluster": "outbound|9091||istio-telemetry.istio-system.svc.cluster.local"
              },
              "service_configs": {
               "default": {}
              },
              "default_destination_service": "default",
              "mixer_attributes": {
               "attributes": {
                "source.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                },
                "context.reporter.kind": {
                 "string_value": "outbound"
                },
                "source.namespace": {
                 "string_value": "istio-system"
                },
                "context.reporter.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                }
               }
              },
              "forward_attributes": {
               "attributes": {
                "source.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                }
               }
              }
             }
            },
            {
             "name": "envoy.cors"
            },
            {
             "name": "envoy.fault"
            },
            {
             "name": "envoy.router"
            }
           ],
           "normalize_path": true
          }
         }
        ]
       },
       {
        "filter_chain_match": {
         "server_names": [
          "helloworld-v1.example.com"
         ]
        },
        "tls_context": {
         "common_tls_context": {
          "alpn_protocols": [
           "h2",
           "http/1.1"
          ],
          "tls_certificate_sds_secret_configs": [
           {
            "name": "helloworld-credential",
            "sds_config": {
             "api_config_source": {
              "api_type": "GRPC",
              "grpc_services": [
               {
                "google_grpc": {
                 "target_uri": "unix:/var/run/ingress_gateway/sds",
                 "stat_prefix": "sdsstat"
                }
               }
              ]
             },
             "initial_fetch_timeout": "0s"
            }
           }
          ]
         },
         "require_client_certificate": false
        },
        "filters": [
         {
          "name": "envoy.http_connection_manager",
          "config": {
           "tracing": {
            "client_sampling": {
             "value": 100
            },
            "operation_name": "EGRESS",
            "overall_sampling": {
             "value": 100
            },
            "random_sampling": {
             "value": 100
            }
           },
           "rds": {
            "route_config_name": "https.443.https-helloworld.mygateway.default",
            "config_source": {
             "ads": {},
             "initial_fetch_timeout": "0s"
            }
           },
           "stat_prefix": "0.0.0.0_443",
           "use_remote_address": true,
           "set_current_client_cert_details": {
            "subject": true,
            "uri": true,
            "cert": true,
            "dns": true
           },
           "stream_idle_timeout": "0s",
           "forward_client_cert_details": "SANITIZE_SET",
           "server_name": "istio-envoy",
           "access_log": [
            {
             "name": "envoy.file_access_log",
             "config": {
              "path": "/dev/stdout",
              "format": "[%START_TIME%] \"%REQ(:METHOD)% %REQ(X-ENVOY-ORIGINAL-PATH?:PATH)% %PROTOCOL%\" %RESPONSE_CODE% %RESPONSE_FLAGS% \"%DYNAMIC_METADATA(istio.mixer:status)%\" \"%UPSTREAM_TRANSPORT_FAILURE_REASON%\" %BYTES_RECEIVED% %BYTES_SENT% %DURATION% %RESP(X-ENVOY-UPSTREAM-SERVICE-TIME)% \"%REQ(X-FORWARDED-FOR)%\" \"%REQ(USER-AGENT)%\" \"%REQ(X-REQUEST-ID)%\" \"%REQ(:AUTHORITY)%\" \"%UPSTREAM_HOST%\" %UPSTREAM_CLUSTER% %UPSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_LOCAL_ADDRESS% %DOWNSTREAM_REMOTE_ADDRESS% %REQUESTED_SERVER_NAME%\n"
             }
            }
           ],
           "http_filters": [
            {
             "name": "mixer",
             "config": {
              "transport": {
               "check_cluster": "outbound|9091||istio-policy.istio-system.svc.cluster.local",
               "network_fail_policy": {
                "policy": "FAIL_CLOSE",
                "max_retry_wait": "1s",
                "base_retry_wait": "0.080s"
               },
               "report_cluster": "outbound|9091||istio-telemetry.istio-system.svc.cluster.local"
              },
              "service_configs": {
               "default": {}
              },
              "default_destination_service": "default",
              "mixer_attributes": {
               "attributes": {
                "context.reporter.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                },
                "source.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                },
                "context.reporter.kind": {
                 "string_value": "outbound"
                },
                "source.namespace": {
                 "string_value": "istio-system"
                }
               }
              },
              "forward_attributes": {
               "attributes": {
                "source.uid": {
                 "string_value": "kubernetes://istio-ingressgateway-5867f5c858-j4852.istio-system"
                }
               }
              }
             }
            },
            {
             "name": "envoy.cors"
            },
            {
             "name": "envoy.fault"
            },
            {
             "name": "envoy.router"
            }
           ],
           "normalize_path": true,
           "http_protocol_options": {},
           "generate_request_id": true,
           "upgrade_configs": [
            {
             "upgrade_type": "websocket"
            }
           ]
          }
         }
        ]
       }
      ],
      "listener_filters": [
       {
        "name": "envoy.listener.tls_inspector"
       }
      ]
     },

no-issue-for-multi-gateway.yaml

---
apiVersion: v1
items:
- apiVersion: networking.istio.io/v1alpha3
  kind: Gateway
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.istio.io/v1alpha3","kind":"Gateway","metadata":{"annotations":{},"name":"mygateway","namespace":"default"},"spec":{"selector":{"istio":"ingressgateway"},"servers":[{"hosts":["httpbin.example.com"],"port":{"name":"https-httpbin","number":443,"protocol":"HTTPS"},"tls":{"credentialName":"httpbin-credential","mode":"SIMPLE"}},{"hosts":["helloworld-v1.example.com"],"port":{"name":"https-helloworld","number":443,"protocol":"HTTPS"},"tls":{"credentialName":"helloworld-credential","mode":"SIMPLE"}}]}}
    creationTimestamp: "2019-10-29T23:59:36Z"
    generation: 6
    name: mygateway
    namespace: default
    resourceVersion: "31029779"
    selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/gateways/mygateway
    uid: 295a5d2e-faa8-11e9-a66c-42010a8001e8
  spec:
    selector:
      istio: ingressgateway
    servers:
    - hosts:
      - example.com
      port:
        name: https-httpbin
        number: 443
        protocol: HTTPS
      tls:
        credentialName: wild-credential
        mode: SIMPLE
    - hosts:
      - helloworld-v1.example.com
      port:
        name: https-helloworld
        number: 443
        protocol: HTTPS
      tls:
        credentialName: helloworld-credential
        mode: SIMPLE
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""
---
apiVersion: v1
items:
- apiVersion: networking.istio.io/v1alpha3
  kind: VirtualService
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"helloworld-v1","namespace":"default"},"spec":{"gateways":["mygateway"],"hosts":["helloworld-v1.example.com"],"http":[{"match":[{"uri":{"exact":"/hello"}}],"route":[{"destination":{"host":"helloworld-v1","port":{"number":5000}}}]}]}}
    creationTimestamp: "2019-10-30T00:05:24Z"
    generation: 1
    name: helloworld-v1
    namespace: default
    resourceVersion: "31004414"
    selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/virtualservices/helloworld-v1
    uid: f878e9ba-faa8-11e9-a66c-42010a8001e8
  spec:
    gateways:
    - mygateway
    hosts:
    - helloworld-v1.example.com
    http:
    - match:
      - uri:
          exact: /hello
      route:
      - destination:
          host: helloworld-v1
          port:
            number: 5000
- apiVersion: networking.istio.io/v1alpha3
  kind: VirtualService
  metadata:
    annotations:
      kubectl.kubernetes.io/last-applied-configuration: |
        {"apiVersion":"networking.istio.io/v1alpha3","kind":"VirtualService","metadata":{"annotations":{},"name":"httpbin","namespace":"default"},"spec":{"gateways":["mygateway"],"hosts":["httpbin.example.com"],"http":[{"match":[{"uri":{"prefix":"/status"}},{"uri":{"prefix":"/delay"}}],"route":[{"destination":{"host":"httpbin","port":{"number":8000}}}]}]}}
    creationTimestamp: "2019-10-30T00:00:02Z"
    generation: 4
    name: httpbin
    namespace: default
    resourceVersion: "31029274"
    selfLink: /apis/networking.istio.io/v1alpha3/namespaces/default/virtualservices/httpbin
    uid: 3875e3f6-faa8-11e9-a66c-42010a8001e8
  spec:
    gateways:
    - mygateway
    hosts:
    - test.example.com
    http:
    - match:
      - uri:
          prefix: /status
      - uri:
          prefix: /delay
      route:
      - destination:
          host: httpbin
          port:
            number: 8000
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""

secret.yaml

apiVersion: v1
items:
- apiVersion: v1
  data:
    cert: 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
    key: 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
  kind: Secret
  metadata:
    creationTimestamp: "2019-10-30T01:06:02Z"
    name: wild-credential
    namespace: istio-system
    resourceVersion: "31024139"
    selfLink: /api/v1/namespaces/istio-system/secrets/wild-credential
    uid: 71435b8a-fab1-11e9-a66c-42010a8001e8
  type: Opaque
- apiVersion: v1
  data:
    cert: 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
    key: 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
  kind: Secret
  metadata:
    creationTimestamp: "2019-10-30T00:04:58Z"
    name: helloworld-credential
    namespace: istio-system
    resourceVersion: "31004269"
    selfLink: /api/v1/namespaces/istio-system/secrets/helloworld-credential
    uid: e8e8a83a-faa8-11e9-a66c-42010a8001e8
  type: Opaque
kind: List
metadata:
  resourceVersion: ""
  selfLink: ""

curl -v -HHost:helloworld-v1.example.com
--resolve helloworld-v1.example.com:$SECURE_INGRESS_PORT:$INGRESS_HOST
--cacert helloworld-v1.example.com/2_intermediate/certs/ca-chain.cert.pem
https://helloworld-v1.example.com:$SECURE_INGRESS_PORT/hello

Hello version: v1, instance: helloworld-v1-99d9d7f97-nkh4m