<p>I have multiple public and private applications running in my kubernetes cluster. I want to separate out traffic for each type by running multiple istio-gateway deployments. Is there any straight methods to implement it with istio.</p>

<p>For both type of application I am using custom CA and importing certificates as secret manually. Do I need to anything cert manager part to achieve my use case</p>

<p>The cert-manager is not required to achieve this configuration.</p>

<p>To install custom istio-ingress-gateway (for you private domain) next to the default one (for public domain), you can take as an example '<a href="https://github.com/istio/istio/tree/master/install/kubernetes/helm/istio/example-values" rel="nofollow noreferrer">example-values/values-istio-gateways.yaml</a>' values file (part of official Istio github project), and use it with helm, to generate all necessary manifest files to upgrade/extend your current Istio installation. </p>

<p>To generate manifest files use the following command:</p>

<pre><code>helm template install/kubernetes/helm/istio --set gateways.custom-gateway.namespace=nepomucen-custom -f install/kubernetes/istio-demo.yaml -f install/kubernetes/helm/istio/example-values/values-istio-gateways.yaml
</code></pre>

<p>Note: This creates custom gateway in non-default namespace</p>
