Example Terminating TLS and proxying to an TLS external address

istio-google-proxy.yaml

apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: google-proxy-test
spec:
  hosts:
  - google-proxy-test.mydomain.tld
  gateways:
  - istio-gateway
  http:
  - match:
    - uri:
        regex: .+
    rewrite:
      authority: www.googleapis.com
    route:
    - destination:
        host: www.googleapis.com
        port:
          number: 443
---
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: google-proxy-test
spec:
  hosts:
  - www.googleapis.com
  ports:
  - number: 443
    name: https
    protocol: TLS
  location: MESH_EXTERNAL
  resolution: DNS
---
apiVersion: networking.istio.io/v1alpha3
kind: DestinationRule
metadata:
  name: google-proxy-test
spec:
  host: www.googleapis.com
  trafficPolicy:
    tls:
      mode: SIMPLE