docker-compose.yaml

version: "3"

services:
  pilot-discovery:
    image: docker.io/istio/pilot:1.11.3
    command:
      - discovery
      - --meshConfig
      - /etc/istio/config/mesh
      - --registries=
    environment:
      - ENABLE_CA_SERVER=false
      - FILE_MOUNTED_CERTS=false
      - PILOT_CERT_PROVIDER=custom
    volumes:
      - ./config/mesh-config.yaml:/etc/istio/config/mesh
      - ./config-sources:/etc/istio/config-sources

  istio-ingressgateway:
    container_name: istio-ingressgateway
    image: docker.io/istio/proxyv2:1.11.3
    command:
      - proxy
      - router
    environment:
      - XDS_ROOT_CA=SYSTEM
      - FILE_MOUNTED_CERTS=true
      # These POD_* are esthetic, but are useful for debugging.
      - POD_NAME=ingressgateway
      - POD_NAMESPACE=default
      - |
        ISTIO_METAJSON_LABELS={"istio":"ingressgateway"}
    volumes:
      - ./config/mesh-config.yaml:/etc/istio/config/mesh
    ports:
      - "8080:80"