blob: 46f730c47444e262ca09c89fd16c20f5c5646c4e (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
apiVersion: networking.istio.io/v1alpha3
kind: EnvoyFilter
metadata:
name: ext-authz
namespace: istio-system
spec:
workloadLabels:
app: istio-ingressgateway
filters:
- insertPosition:
index: FIRST
listenerMatch:
portNumber: 80
listenerType: GATEWAY
listenerProtocol: HTTP
filterType: HTTP
filterName: "envoy.ext_authz"
filterConfig:
http_service:
server_uri:
uri: "http://modsecurity-crs.istio-system.svc.cluster.local"
cluster: "outbound|80||modsecurity-crs.istio-system.svc.cluster.local"
timeout: 0.5s
failure_mode_allow: false
|
