blob: 0960a501622f9bd544ab2b0ab88191b41c5ca15a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
name: ext-authz
namespace: clover-gateway
spec:
workloadLabels:
app: istio-ingressgateway
filters:
- insertPosition:
index: FIRST
listenerMatch:
portNumber: 80
listenerType: GATEWAY
listenerProtocol: HTTP
filterType: HTTP
filterName: "envoy.ext_authz"
filterConfig:
http_service:
server_uri:
uri: "http://modsecurity-crs.clover-gateway.svc.cluster.local"
cluster: "outbound|80||modsecurity-crs.clover-gateway.svc.cluster.local"
timeout: 0.5s
failure_mode_allow: false
|
