In other words, the Gateway resource must reside in the same namespace as the gateway workload instance.
the selector should select the ingress gateway pod in the same namespace.
However, deployed the bookinfo app in default namespace and created Gateway in default ns.
It’s still able to use the istio-ingressgateway under istio-system ns.
Same question, is the code wrong or is the doc wrong? I’m able to create the gateway resource in a different namespace then the proxy instances. But I don’t want to be relying on an undocumented feature that may go away.
New question is is this a bug they’re going to keep? As our expected behaviour is that the gateway would work across namespaces. Only found this discussion and the link to the bug because i read the documentation and was also confused by the line mentioned in the original post.