apiVersion: gateway.networking.k8s.io/v1beta1
kind: Gateway
metadata:
  name: gateway
spec:
  gatewayClassName: istio
  listeners:
    - name: http-all
      port: 80
      protocol: HTTP
    - name: https-base
      protocol: HTTPS
      port: 443
      hostname: "example.com"
      tls:
        certificateRefs:
          - kind: Secret
            name: exact-cert
    - name: https-subs
      protocol: HTTPS
      port: 443
      hostname: "*.example.com"
      tls:
        certificateRefs:
          - kind: Secret
            name: subs-cert
---