---
apiVersion: v1
kind: Service
metadata:
  name: sudosci
  namespace: external-services
spec:
  type: ClusterIP
  ports:
    - name: http
      port: 80
...
---
apiVersion: discovery.k8s.io/v1
kind: EndpointSlice
metadata:
  name: sudosci
  namespace: external-services
  labels:
    kubernetes.io/service-name: sudosci
addressType: IPv4
ports:
  - name: http
    appProtocol: http
    protocol: TCP
    port: 28824
endpoints:
  - addresses:
    - "192.168.0.12"
    conditions:
      ready: true
...
---
apiVersion: cert-manager.io/v1
kind: Certificate
metadata:
  name: sudosci-cert
  namespace: istio-system
spec:
  secretName: sudosci-cert
  commonName: api.sudoscientist.com
  dnsNames:
    - api.sudoscientist.com
  issuerRef:
    name: route53-issuer
    kind: ClusterIssuer
    group: cert-manager.io
...
---
apiVersion: networking.istio.io/v1beta1
kind: Gateway
metadata:
  name: sudosci-gateway
  namespace: external-services
spec:
  selector:
    istio: ingressgateway
  servers:
  - port:
      number: 443
      name: https
      protocol: HTTPS
    tls:
      mode: SIMPLE
      credentialName: sudosci-cert
    hosts:
    - api.sudoscientist.com
...
---
apiVersion: networking.istio.io/v1beta1
kind: ServiceEntry
metadata:
  name: sudosci
  namespace: external-services
spec:
  hosts:
  - api.sudoscientist.com
  addresses:
  -  0.0.0.0/0
  ports:
  - number: 28824
    name: sudosci
    protocol: HTTP
  location: MESH_EXTERNAL
  resolution: STATIC
  endpoints:
    - address: 192.168.0.12
...
---
apiVersion: networking.istio.io/v1beta1
kind: VirtualService
metadata:
  name: sudosci-gateway
  namespace: external-services
spec:
  hosts:
  - api.sudoscientist.com
  gateways:
  - sudosci-gateway
  http:
  - match:
    - uri:
        prefix: /
    route:
    - destination:
        port:
          number: 80
        host: sudosci
...