# This ServiceEntry exposes the hosts needed for Python `pip`.
# After applying this file, Istio-enabled pods will be able to execute
# `pip search istio`.

# HTTP and TLS, the host must be specified
# See https://istio.io/docs/tasks/traffic-management/egress/

apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: python-https
spec:
  hosts:
  - pypi.python.org
  ports:
  - number: 443
    name: https
    protocol: HTTPS
---
# pypi.python.org may 301 redirect to pypi.org, so we need this too.
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: pypi-https
spec:
  hosts:
  - pypi.org
  ports:
  - number: 443
    name: https
    protocol: HTTPS
---
# pip install may fetch files from files.pythonhosted.org
apiVersion: networking.istio.io/v1alpha3
kind: ServiceEntry
metadata:
  name: pythonhosted-https
spec:
  hosts:
  - files.pythonhosted.org
  ports:
  - number: 443
    name: https
    protocol: HTTPS