Add multiproject example

ingress/multi-cluster/mci-multi-projects/app.yaml

@@ -0,0 +1,21 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: whereami
+  namespace: whereami
+spec:
+  replicas: 2
+  selector:
+    matchLabels:
+      app: whereami
+      version: v1
+  template:
+    metadata:
+      labels:
+        app: whereami
+    spec:
+      containers:
+        - name: whereami
+          image: us-docker.pkg.dev/google-samples/containers/gke/whereami:v1.2.11
+          ports:
+            - containerPort: 8080

ingress/multi-cluster/mci-multi-projects/ingress.yaml

@@ -0,0 +1,87 @@
+apiVersion: networking.gke.io/v1
+kind: MultiClusterIngress
+metadata:
+  name: foobar-ingress
+  namespace: multi-cluster-demo
+spec:
+  template:
+    spec:
+      backend:
+        serviceName: default-backend
+        servicePort: 8080
+      rules:
+      - host: foo.example.com
+        http:
+          paths:
+            - backend:
+                serviceName: foo
+                servicePort: 8080
+      - host: bar.example.com
+        http:
+          paths:
+            - backend:
+                serviceName: bar
+                servicePort: 8080
+---
+apiVersion: networking.gke.io/v1
+kind: MultiClusterService
+metadata:
+  name: foo
+  namespace: multi-cluster-demo
+spec:
+  template:
+    spec:
+      selector:
+        app: foo
+      ports:
+      - name: http
+        protocol: TCP
+        port: 8080
+        targetPort: 8080
+---
+apiVersion: networking.gke.io/v1
+kind: MultiClusterService
+metadata:
+  name: bar
+  namespace: multi-cluster-demo
+  annotations:
+    beta.cloud.google.com/backend-config: '{"ports": {"8080":"backend-health-check"}}'
+spec:
+  template:
+    spec:
+      selector:
+        app: bar
+      ports:
+      - name: http
+        protocol: TCP
+        port: 8080
+        targetPort: 8080
+---
+apiVersion: networking.gke.io/v1
+kind: MultiClusterService
+metadata:
+  name: default-backend
+  namespace: multi-cluster-demo
+  annotations:
+    beta.cloud.google.com/backend-config: '{"default": "backend-health-check"}'
+spec:
+  template:
+    spec:
+      selector:
+        app: default-backend
+      ports:
+      - name: http
+        protocol: TCP
+        port: 8080
+        targetPort: 8080
+---
+apiVersion: cloud.google.com/v1
+kind: BackendConfig
+metadata:
+  name: backend-health-check
+  namespace: multi-cluster-demo
+spec:
+  healthCheck:
+    requestPath: /healthz
+    port: 8080
+    type: HTTP

ingress/multi-cluster/mci-multi-projects/ingress_gw.yaml

@@ -0,0 +1,70 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: ingressgateway
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      asm: ingressgateway
+  template:
+    metadata:
+      annotations:
+        # This is required to tell Anthos Service Mesh to inject the gateway with the
+        # required configuration.
+        inject.istio.io/templates: gateway
+      labels:
+        asm: ingressgateway
+    spec:
+      containers:
+        - name: istio-proxy
+          image: auto # The image will automatically update each time the pod starts.
+          resources:
+            limits:
+              cpu: 2000m
+              memory: 1024Mi
+            requests:
+              cpu: 100m
+              memory: 128Mi
+      serviceAccountName: ingressgateway
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: ingressgateway
+rules:
+  - apiGroups: [""]
+    resources: ["secrets"]
+    verbs: ["get", "watch", "list"]
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: ingressgateway
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: ingressgateway
+subjects:
+  - kind: ServiceAccount
+    name: ingressgateway
+---
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: ingressgateway
+---
+apiVersion: networking.istio.io/v1alpha3
+kind: Gateway
+metadata:
+  name: ingressgateway
+spec:
+  selector:
+    asm: ingressgateway
+  servers:
+    - port:
+        number: 80
+        name: http
+        protocol: HTTP
+      hosts:
+        - "*"

ingress/multi-cluster/mci-multi-projects/namespace.yaml

@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  labels:
+    istio.io/rev: asm-managed-stable
+  name: whereami

ingress/multi-cluster/mci-multi-projects/service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: whereami
+  namespace: whereami
+spec:
+  selector:
+    app: whereami
+  ports:
+    - port: 80
+      targetPort: 8080

ingress/multi-cluster/mci-multi-projects/virtual_service_app.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: frontend
+  namespace: whereami
+spec:
+  hosts:
+    - "whereami.example.com"
+  gateways:
+    - mesh
+  http:
+    - route:
+        - destination:
+            host: whereami
+            port:
+              number: 80

ingress/multi-cluster/mci-multi-projects/virtual_service_ingress.yaml

@@ -0,0 +1,16 @@
+apiVersion: networking.istio.io/v1alpha3
+kind: VirtualService
+metadata:
+  name: frontend
+  namespace: whereami
+spec:
+  hosts:
+    - "whereami.example.com"
+  gateways:
+    - asmingress/ingressgateway
+  http:
+    - route:
+        - destination:
+            host: whereami
+            port:
+              number: 80