Implementing Service Mesh Integration

apiVersion: networking.istio.io/v1
kind: Gateway
metadata: { name: api-gw }
spec:
  selector: { istio: ingressgateway }
  servers:
    - port: { number: 443, name: https, protocol: HTTPS }
      tls: { mode: SIMPLE, credentialName: api-tls }
      hosts: ["api.example.com"]
---
apiVersion: networking.istio.io/v1
kind: VirtualService
metadata: { name: orders }
spec:
  hosts: ["api.example.com"]
  gateways: [api-gw]
  http:
    - match: [{ uri: { prefix: /orders } }]
      route: [{ destination: { host: orders.svc.cluster.local, port: { number: 80 } } }]

listeners:
  - name: api_listener
    address: { socket_address: { address: 0.0.0.0, port_value: 8443 } }
    filter_chains:
      - filters:
          - name: envoy.filters.network.http_connection_manager
            typed_config:
              "@type": type.googleapis.com/envoy.extensions.filters.network.http_connection_manager.v3.HttpConnectionManager
              stat_prefix: api
              route_config:
                virtual_hosts:
                  - name: api
                    domains: ["*"]
                    routes:
                      - match: { prefix: "/" }
                        route: { cluster: orders }
              http_filters:
                - name: envoy.filters.http.router

apiVersion: networking.istio.io/v1
kind: DestinationRule
metadata: { name: orders-cb }
spec:
  host: orders.svc.cluster.local
  trafficPolicy:
    connectionPool:
      tcp: { maxConnections: 100 }
      http: { http1MaxPendingRequests: 50, http2MaxRequests: 1000 }
    outlierDetection:
      consecutive5xxErrors: 5
      interval: 30s
      baseEjectionTime: 30s
      maxEjectionPercent: 50