The gateway is named hands-on-gw; this name is used by the virtual services underneath.

The selector field specifies that the gateway object will be handled by the default Istio ingress gateway, named ingressgateway.

The hosts and port fields specify that the gateway will handle incoming requests for the minikube.me hostname using HTTPS over port 443.

The tls field specifies that the Istio ingress gateway can find the certificate and private key used for HTTPS communication in a TLS Secret named hands-on-certificate. Refer to the Protecting external endpoints with HTTPS and certificates section below for details on how these certificate files are created. The SIMPLE mode denotes that normal TLS semantics will be applied.