reverse-proxy.yaml

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: myapp
spec:
  hosts:
  - myapp.backendengineer.net
  ports:
  - number: 80
    name: http
    protocol: HTTP
  - number: 443
    name: https
    protocol: HTTPS
  resolution: STATIC
  endpoints:
  - address: 10.128.0.5
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: myapp-backend-engineer-cert
  namespace: istio-system
spec:
  issuerRef:
    name: letsencrypt-prod
  secretName: myapp-backend-engineer-cert
  commonName: myapp.backendengineer.net
  dnsNames:
  - myapp.backendengineer.net
---
apiVersion: networking.istio.io/v1alpha3
kind: Gateway
metadata:
  name: myapp-backendengineer-net
spec:
  selector:
    istio: ingressgateway # use istio default controller
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    hosts:
    - "myapp.backendengineer.net"
    tls:
      mode: SIMPLE
      credentialName: myapp-backend-engineer-cert
---
apiVersion: networking.istio.io/v1alpha3
kind: VirtualService
metadata:
  name: myapp-backendengineer-net
spec:
  hosts:
  - myapp.backendengineer.net
  gateways:
  - myapp-backendengineer-net
  http:
    - route:
      - destination:
          host: myapp.backendengineer.net
          port:
            number: 80