apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: gitea-cert
  namespace: istio-system
spec:
  dnsNames:
    - gitea.invest.cps.sarex.lonsdaleites.ru
  issuerRef:
    kind: ClusterIssuer
    name: letsencrypt-prod
  secretName: gitea-tls-secret
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: gitea-gateway
  namespace: gateway
spec:
  selector:
    istio: ingressgateway
  servers:
    - hosts:
        - gitea.invest.cps.sarex.lonsdaleites.ru
      port:
        name: http
        number: 80
        protocol: HTTP
    - hosts:
        - gitea.invest.cps.sarex.lonsdaleites.ru
      port:
        name: https
        number: 443
        protocol: HTTPS
      tls:
        credentialName: gitea-tls-secret
        mode: SIMPLE
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: gitea-virt-service
  namespace: gitea
spec:
  gateways:
    - gateway/gitea-gateway
  hosts:
    - gitea.invest.cps.sarex.lonsdaleites.ru
  http:
    - match:
        - uri:
            prefix: /
      route:
        - destination:
            host: gitea
            port:
              number: 3000