istio
63 строки · 1.6 Кб
1name: envoy.filters.http.ext_authz2typedConfig:3'@type': type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz4allowedHeaders:5patterns:6- exact: x-custom-id7ignoreCase: true8- ignoreCase: true9prefix: x-prefix-10- ignoreCase: true11suffix: -suffix12failureModeAllow: true13filterEnabledMetadata:14filter: envoy.filters.http.rbac15path:16- key: istio_ext_authz_shadow_effective_policy_id17value:18stringMatch:19prefix: istio-ext-authz20httpService:21authorizationRequest:22headersToAdd:23- key: x-header-124value: value-125- key: x-header-226value: value-227authorizationResponse:28allowedClientHeaders:29patterns:30- exact: Set-cookie31ignoreCase: true32- ignoreCase: true33prefix: x-prefix-34- ignoreCase: true35suffix: -suffix36allowedClientHeadersOnSuccess:37patterns:38- exact: Set-cookie39ignoreCase: true40- ignoreCase: true41prefix: x-prefix-42- ignoreCase: true43suffix: -suffix44allowedUpstreamHeaders:45patterns:46- exact: Authorization47ignoreCase: true48- ignoreCase: true49prefix: x-prefix-50- ignoreCase: true51suffix: -suffix52pathPrefix: /check53serverUri:54cluster: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local55timeout: 10s56uri: http://my-custom-ext-authz.foo.svc.cluster.local57statusOnError:58code: Forbidden59transportApiVersion: V360withRequestBody:61allowPartialMessage: true62maxRequestBytes: 204863packAsBytes: true64