Grpc Credentials File Based Metadata

This documentation is for the Envoy v3 API.

As of Envoy v1.18 the v2 API has been removed and is no longer supported.

If you are upgrading from v2 API config you may wish to view the v2 API documentation:

This extension may be referenced by the qualified name envoy.grpc_credentials.file_based_metadata


This extension is functional but has not had substantial production burn time, use only with this caveat.

This extension does not operate on the data plane and hence is intended to be robust against untrusted traffic.


This extension extends and can be used with the following extension category:

Configuration for File Based Metadata Grpc Credentials Plugin


[config.grpc_credential.v3.FileBasedMetadataConfig proto]

  "secret_data": "{...}",
  "header_key": "...",
  "header_prefix": "..."

(config.core.v3.DataSource) Location or inline data of secret to use for authentication of the Google gRPC connection this secret will be attached to a header of the gRPC connection


(string) Metadata header key to use for sending the secret data if no header key is set, “authorization” header will be used


(string) Prefix to prepend to the secret in the metadata header if no prefix is set, the default is to use no prefix