---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: miniflux-cert
  namespace: istio-system
spec:
  secretName: miniflux-cert
  commonName: miniflux.minhas.io
  dnsNames:
    - miniflux.minhas.io
    - rss.minhas.io
  issuerRef:
    name: letsencrypt-prod
    kind: ClusterIssuer
    group: cert-manager.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: miniflux-gateway
  namespace: miniflux
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    tls:
      mode: SIMPLE
      credentialName: miniflux-cert
    hosts:
    - miniflux.minhas.io
    - rss.minhas.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: miniflux
  namespace: miniflux
spec:
  hosts:
  - miniflux.minhas.io
  - rss.minhas.io
  gateways:
  - miniflux-gateway
  http:
  - match:
    - uri:
        prefix: /
    route:
    - destination:
        port:
          number: 80
        host: miniflux
...