istio

1
name: envoy.filters.http.ext_authz
2
typedConfig:
3
  '@type': type.googleapis.com/envoy.extensions.filters.http.ext_authz.v3.ExtAuthz
4
  failureModeAllow: true
5
  filterEnabledMetadata:
6
    filter: envoy.filters.http.rbac
7
    path:
8
    - key: istio_ext_authz_shadow_effective_policy_id
9
    value:
10
      stringMatch:
11
        prefix: istio-ext-authz
12
  grpcService:
13
    envoyGrpc:
14
      authority: my-custom-ext-authz.foo.svc.cluster.local
15
      clusterName: outbound|9000||my-custom-ext-authz.foo.svc.cluster.local
16
    timeout: 0.002s
17
  statusOnError:
18
    code: Forbidden
19
  transportApiVersion: V3
20
  withRequestBody:
21
    allowPartialMessage: true
22
    maxRequestBytes: 4096
23